SSL Certificate and Code Signing

SSL Certiﬁcate and
Code Signing
2015/05/03
Qlync Inc.
YAO, LI-WEI
Ver1.1

Example First…
https://www.java.com/en/download/installed.jsp

SSL Certiﬁcate
Firefox, https://www.java.com/en/download/installed.jsp

Code Signing

Why SSL Certiﬁcate and
Code Signing?
To Encrypt Sensitive Information
To Gain Your Customer’s Trust
https://www.sslshopper.com/why-ssl-the-purpose-of-using-ssl-certiﬁcates.html

To Encrypt Sensitive
Information

Secure Socket Layer (SSL) Protocol
http://beefchunk.com/documentation/bin/apache/
apache2_with_ssl_tls/part1.htm

HTTPS = HTTP + SSL/TLS
http://hackerxu.com/2014/11/18/HTTPS.html

Symmetric Cryptography
Asymmetric Cryptography

Symmetric Cryptography
https://msdn.microsoft.com/en-us/library/ff650720.aspx

Asymmetric Cryptography
https://msdn.microsoft.com/en-us/library/ff650720.aspx

https://www.youtube.com/watch?v=E5FEqGYLL0o
Video: Asymmetric Key Cryptography

Asymmetric Encryption
for Random Key Exchange
Symmetric Encryption
by Random Key
for Data

Digital Signature
http://en.wikipedia.org/wiki/Digital_signature

PKI = Public Key Infrastructure
http://software-engineer-tips-and-tricks.blogspot.tw/2012/09/what-is-pki.html

Certiﬁcate and CA
A certificate is a document that contains both an identity and a
public key, binding them together by a digital signature.
This digital signature is created by an organization called a
Certification Authority (CA). This organization guarantees that
upon creating the digital signature it has checked the identity of
the public key owner (e.g. by verifying a passport) and that is
has checked that this public key owner is in possession of the
corresponding private key. Anybody in possession of the CA's
public key can verify the CA's signature on the certificate.
In this way the CA guarantees that the public key in the
certificate belongs to the individual whose identity is in the same
certificate.
http://www.win.tue.nl/hashclash/rogue-ca/

CA
Certiﬁcate
Structure
(X.509)
https://technet.microsoft.com/en-us/library/cc737264(v=ws.10).aspx

Website Certiﬁcate Operation

SSL Certificate and Code Signing

Certiﬁcate Authority

Q
Web Browser - Firefox
How do I trust a self-signed issuer certiﬁcate?

Lifecycle of an SSL
Certificate
If you need to secure your web site, it is quick and easy to request an SSL certificate and
install it.
1 Generate a Certificate Signing Request (CSR) for the web server you plan to
secure. If you do not manage your own web server, contact your web host or Internet
service provider to request a CSR.
2 Select an SSL Certificate and click buy.
3 Pick up your certificate in to your Thawte® Certificate Center Account.
4 Follow installation instructions for your Web server.
5 Download the Thawte® Trusted Site Seal to display on pages within your
secured domain.
At the end of the SSL certificate’s validity period (1-5 years, depending on the certificate
type and your selection), you have the option to renew your SSL certificate. You may
need to provide additional information for authentication or generate a new CSR.
https://www.thawte.com/resources/getting-started/how-ssl-works/index.html

CSR Contents
https://www.sslshopper.com/what-is-a-csr-certiﬁcate-signing-request.html

SSL Certificate Guide
• What is CSR
• https://www.sslshopper.com/what-is-a-csr-certificate-signing-request.html
• Generate CSR for Apache SSL
• https://search.thawte.com/support/ssl-digital-certificates/index?
page=content&actp=CROSSLINK&id=SO2614
• How to Install SSL Certificates to Apache
• https://www.thawte.com/resources/video/install-ssl-certificates-
apache.html

Video: Install SSL Certiﬁcate on Apache
https://www.youtube.com/watch?v=yYxhPgMJCbo

To Gain Your
Customer’s Trust

Code Signing Certificate
Code signing certificates are digital certificates
that will help protect users from downloading
compromised files or applications.
When a file or application signed by a developer is
modified or compromised after publication, a
popup browser warning will appear to let users
know that the origin of the file or application cannot
be verified.
http://www.symantec.com/code-signing/

Code Signing Process
http://www.cisco.com/web/about/ac123/ac147/
archived_issues/ipj_5-1/code_signing.html

Code Veriﬁcation Process
http://www.cisco.com/web/about/ac123/ac147/
archived_issues/ipj_5-1/code_signing.html

Code Signing Products
http://www.symantec.com/zh/tw/products-solutions/
families/?ﬁd=code-signing

Example

The First Few Milliseconds of an
HTTPS Connection
• http://www.moserware.com/2009/06/ﬁrst-few-
milliseconds-of-https.html?m=1

Android: Security with HTTPS
and SSL
• https://developer.android.com/training/articles/
security-ssl.html

iOS: Maintaining Your Signing
Identities and Certificates
• https://developer.apple.com/library/ios/
documentation/IDEs/Conceptual/
AppDistributionGuide/MaintainingCertificates/
MaintainingCertificates.html#//apple_ref/doc/uid/
TP40012582-CH31-SW1

Java Code Signing Guide
• https://www.digicert.com/code-signing/java-
code-signing-guide.htm

Java keytool
• http://docs.oracle.com/javase/7/docs/technotes/
tools/solaris/keytool.html

What are the different types of
SSL Certiﬁcate?
• https://www.globalsign.com/en/ssl-information-
center/types-of-ssl-certiﬁcate/
• https://www.thawte.com/ssl/index.html

SSL Certificate and Code Signing

More Related Content

SSL Certificate and Code Signing