
May 10th, 2001, 12:48 AM
|
|
|
When an SSL client connects to an SSL server, the server presents a certificate, essentially an electronic piece of proof that machine is who it claims to be. This certificate is signed by a 'Certificate Authority' (hereafter a CA) -- usually a trusted third party like Verisign. A client will accept this certificate only if - The certificate presented matches the private key being used by the remote end.
- The certificate has been signed correctly by the CA.
- The client recognizes the CA as trusted.
It is also possible for an SSL client to present a certificate, called a client certificate or peer certificate, although the methods for generating them are all the same.
__________________
 Michael
|