Security and Cryptography
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me

The Shed is going Social! Join us on FaceBook and Twitter and chime in on the conversation.

Go Back   Dev Shed ForumsSystem AdministrationSecurity and Cryptography

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
  #1  
Old August 4th, 2011, 08:42 AM
ketan.k07 ketan.k07 is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Aug 2011
Posts: 1 ketan.k07 User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 38 m 15 sec
Reputation Power: 0
SSL - Role of certificate chain for client certificate authentication

Hello.

I have a two server setup where the two servers communicate with each other over SSL. The SSL connection requires mutual authentication.

The SSL handshake happens successfully if both the server certificates have Server Authentication & Client Authentication in their Key Usage. However, if one of the server certificates has only Server Authentication as its Key Usage then the other server rejects this certificate with an error. This is expected.

The puzzling behavior is that if I use a certificate that is set for Server Authentication only but with its full certificate chain containing all intermediate & root CA certificates, the same certificate is accepted as a valid client certificate by the other server.

Is there a difference in the validation mechanism for client certificates if the full chain of the client certificate is present?

Thank You.

Reply With Quote
Reply

Viewing: Dev Shed ForumsSystem AdministrationSecurity and Cryptography > SSL - Role of certificate chain for client certificate authentication

Developer Shed Advertisers and Affiliates



Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump

Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 


Powered by: vBulletin Version 3.0.5
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.

© 2003-2013 by Developer Shed. All rights reserved. DS Cluster - Follow our Sitemap