Untitled

A CA is responsible for:

Issuing Certificates

Renewing certificates

Revoking certificates

Publishing a certificate revocation list (CRL)

Secure Sockets Layer (SSL)

Clients sends request to connect to secure server

Server sends pre-signed certificate to client

Client checks trust list to verify that certificate was issued by trusted CA

Client checks RL to make sure certificate has not been revoked

Client tells server which ciphers it supports

Server consults its own cipher list and chooses strongest cipher it has in common with the client, then informs client of this cipher.

Content of the notes (2)