There are two major encoding schemes for X.509 certificates and keys: PEM (Base64 ASCII), and DER (binary). We can’t always tell what kind of file we are working with just from looking at the filename. We may need to open it in a text editor and take a look for ourselves. We will share more …

A self-signed SSL certificate is a security certificate that is not signed by a certificate authority (CA). These certificates are easy to make and do not cost money. The Self-signed SSL certificate is mainly used for non-production applications or other experiments. Generate private key and self signed SSL certificate Run the following OpenSSL command to …

PKCS#12 files are commonly used to import and export certificates and private keys on Windows and macOS computers, and usually have the filename extensions .p12 or .pfx. OpenSSL on Linux If we are using Linux, we can install OpenSSL with the following YUM console command: > yum install opensslIf our distribution is based on APT …

Two way SSL, also known as mutual SSL certificates, are SSL certificate where the server and the client, authenticates each other for a more robust security. Steps for a 2 way SSL handshake process In Two-Way SSL authentication, the client and server need to authenticate and validate each others identities. The authentication message exchange between …

An SSL/TLS handshake is a negotiation between two parties on a network – such as a browser and web server – to establish the details of their connection.The main purpose of an SSL handshake is to provide privacy and data integrity for communication between a server and a client. During a TLS handshake, the two …

OpenSSL includes tonnes of features covering a broad range of use cases, and it’s difficult to remember its syntax for all of them and quite easy to get lost. We will share how to use OpenSSL RSA to create public and private keys in this post. Understanding Public Key and Private Key Generate a 2048 …

OpenSSL is the true Swiss Army knife of certificate management, and just like with the real McCoy, we spend more time extracting the nail file when what we really want is the inflatable hacksaw. We will find an overview of the most commonly used commands below. Certificate requests and key generation with OpenSSL Typically, when …

A SSL certificate chain is an ordered list of certificates, containing an SSL/TLS Certificate and Certificate Authority (CA) Certificates, that enable the receiver to verify that the sender and all CA’s are trustworthy. Each certificate contains information about its issuer. The issuer is the next link in the SSL chain. The SSL chain will be …

TCP allows for the transmission of information in both directions. This means that computer systems that communicate over TCP can send and receive data at the same time, similar to a telephone conversation. The protocol uses segments (packets) as the basic units of data transmission. In addition to the payload, segments can also contain control …

DNS TTL, or time to live, is the element of a DNS record that tells the requester how long the record is valid. In other words, if the TTL for our DNS record is set to 24 hours, once a browser has resolved that DNS record, it will continue to use that same value for …