WHAT SSL AUTHENTICATION METHODS ARE SUPPORTED?
The SSL (Secure Sockets Layer) certificates are small data file that function digitally to combine an organization’s information to a cryptographic key. When installed the SSL certificate activates the https protocol and the padlock all functioning to provide a secure connection between the server and the web browser.
In the process of authentication there is a procedure whereby it requires the data to be encrypted with a key from the asymmetric key pair then to be decrypted with another key of the pair. To prove identity a message digest is used.
SSL Authentication.
For the authentication of the server, the public key of the server is used by the client to encrypt data used in computing the secret key. The secret key can only be found only with the fact that it can decrypt the data using the appropriate private key by the server.
Authentication of the client occurs when the server uses the public key that is in the certificate of the client functioning to decrypt data client sends during the handshake process. When there is exchange of messages that are finished of which are encrypted with private key confirms the authentication process is successful. If at all the process is a failure then the handshake will fails bringing the whole session to a close.
The exchanging of the certificates that are digital during the SSL/TLS handshake is part and parcel of the whole authentication process.
During the process, the SSL certificate is issued to the client under the CA X whereas the server using the SSL is issued with the certificate from CA Y.
During the SSL authentication the client needs:
· Certificate Authority certificate for CA Y
During authentication of the server, the SSL server needs:
· The private key of the server.
· The CA Y issued personal certificate to the server.
Authentication for the SSL certificates in different levels sub-dividing the SSL certificates into three:
1. Domain Validated SSL Certificates.
These are certificates that that for their issuance require only that the business should prove their identity over the domain name only. The DV certificates contain the domain name supplied to the authority of issuance as part of the request made. Under the fact that the organization’s identity is not checked here, the Domain Validated certificates become only suitable for test servers and links which are internal.
2. Organization validation SSL Certificates.
In addition to proving ownership of the domain name the organization validation SSL certificates require the client to prove that the company is registered and is accountable legally as a business. The certificate issued is a validation of the domain and the company name. The authentication level becomes suitable the public-facing websites that collect data that is personal from the site users. The above certificates can only be obtained by organizations and businesses and not any individual.
3. Extended Validation SSL Certificates.
The extended validation SSL certificates work to safeguard users from feeding their information to fake websites that can be used for crimes. The extended validation SSL certificates require the validations of the domain and the organization plus some additional authentication steps that are found in the address bar of the issued certificate to the company in question of which contain additional company information. It can be accessed from a lot of web browsers when one clicks on the padlock option.
