ssl - What kind of private key is located in a PKC12 pfx file? -
can clarify me kind of "private key" located in pfx file ?
i asking because after having read quite lot on digital certification still bit confuse on private key part, when certificate authority involved.
the part missing said private key kept secret on ca side if go in personal certificate store , try export certificate, able export private key in it.
is private key same private key not supposed know ?
if talking ssl-certificates , ssl think mean x509
-certificates in common. let me make clear first: passwords of private keys different.
the magic here chaining
of certificates, i.e.
- root certificate ca
- intermediate certificate ca (for instance class 2)
- your certificate
- intermediate certificate ca (for instance class 2)
if @ ssl-certificate, find structure. every certificate within hierarchy can seen certificate own. can find more information within msdn article. briefly description point of view:
the certifcates within chain can seen separate certificates. own ability sign information private key , validating signature private key. linked within chain.
you might ask why certificates linked?
there 2 main reasons: security , trust.
if loose private key or if certificates broken, it's need revocated
. says, certificates should not trusted anymore. it's listed on revocation-list on parent certificate ensure security break can fixed fast. behavior explains, why root certficates creating intermediate
certificates , not requested certificate - want sure can revocate intermediate
certificate well.
additionally functional explanation there mathematical, not able explain easy way. can find information within it's article on wikipedia. says, can't calculate password parent , / or public certificate use private certificate.
Comments
Post a Comment