This document discusses SSL certificates and code signing. It begins by explaining how SSL certificates encrypt sensitive information during HTTPS connections and help gain customer trust. It then covers the basics of symmetric and asymmetric cryptography used in SSL. The document also discusses code signing certificates and how they help protect users by verifying the integrity of downloaded files. It provides examples of installing SSL certificates and lists additional resources on related topics like certificate authorities and Java code signing.
5. Why SSL Certificate and
Code Signing?
To Encrypt Sensitive Information
To Gain Your Customer’s Trust
https://www.sslshopper.com/why-ssl-the-purpose-of-using-ssl-certificates.html
20. Certificate and CA
A certificate is a document that contains both an identity and a
public key, binding them together by a digital signature.
This digital signature is created by an organization called a
Certification Authority (CA). This organization guarantees that
upon creating the digital signature it has checked the identity of
the public key owner (e.g. by verifying a passport) and that is
has checked that this public key owner is in possession of the
corresponding private key. Anybody in possession of the CA's
public key can verify the CA's signature on the certificate.
In this way the CA guarantees that the public key in the
certificate belongs to the individual whose identity is in the same
certificate.
http://www.win.tue.nl/hashclash/rogue-ca/
29. Q
Web Browser - Firefox
How do I trust a self-signed issuer certificate?
30. Lifecycle of an SSL
Certificate
If you need to secure your web site, it is quick and easy to request an SSL certificate and
install it.
1 Generate a Certificate Signing Request (CSR) for the web server you plan to
secure. If you do not manage your own web server, contact your web host or Internet
service provider to request a CSR.
2 Select an SSL Certificate and click buy.
3 Pick up your certificate in to your Thawte® Certificate Center Account.
4 Follow installation instructions for your Web server.
5 Download the Thawte® Trusted Site Seal to display on pages within your
secured domain.
At the end of the SSL certificate’s validity period (1-5 years, depending on the certificate
type and your selection), you have the option to renew your SSL certificate. You may
need to provide additional information for authentication or generate a new CSR.
https://www.thawte.com/resources/getting-started/how-ssl-works/index.html
33. SSL Certificate Guide
• What is CSR
• https://www.sslshopper.com/what-is-a-csr-certificate-signing-request.html
• Generate CSR for Apache SSL
• https://search.thawte.com/support/ssl-digital-certificates/index?
page=content&actp=CROSSLINK&id=SO2614
• How to Install SSL Certificates to Apache
• https://www.thawte.com/resources/video/install-ssl-certificates-
apache.html
34. Video: Install SSL Certificate on Apache
https://www.youtube.com/watch?v=yYxhPgMJCbo
35. Why SSL Certificate and
Code Signing?
To Encrypt Sensitive Information
To Gain Your Customer’s Trust
https://www.sslshopper.com/why-ssl-the-purpose-of-using-ssl-certificates.html
38. Code Signing Certificate
Code signing certificates are digital certificates
that will help protect users from downloading
compromised files or applications.
When a file or application signed by a developer is
modified or compromised after publication, a
popup browser warning will appear to let users
know that the origin of the file or application cannot
be verified.
http://www.symantec.com/code-signing/
52. What are the different types of
SSL Certificate?
• https://www.globalsign.com/en/ssl-information-
center/types-of-ssl-certificate/
• https://www.thawte.com/ssl/index.html