HTTPS Client Authentication Service-side certificate process

There are many articles on the Internet, but the validation process for abstracts is not easy to understand.

Qq20160420114804.png Certificate Presets and applications

1: The client browser will pre-provision the root certificate, which containsCA公钥
2: The server goes to CA to request a certificate
3:CA with his own signature to sign a certificate, the fingerprint information is stored in the certificate's Digital Digest, and then sent to the server

One-time access process (Simplified)

1: Client SayHello
2: Server returns certificate
3-1: Client verifies certificate content validity (expiration time, domain name is the same, etc.)
3-2: Verify the validity of the certificate (whether the string is changed), through the decryption of the local root certificate of the CA公钥 Digital Digest, to see if the match.
3-3: If the digital signature verification is passed, the public key provided inside the server certificate can be used for next communication.

Text/Big World (Jane book author)
Original link: http://www.jianshu.com/p/0d59d2216c64
Copyright belongs to the author, please contact the author to obtain authorization, and Mark "book author".

HTTPS Client Authentication Service-side certificate process