Jump to content

File talk:Ssl handshake with two way authentication with certificates.svg

Page contents not supported in other languages.
From Wikipedia, the free encyclopedia

This is an old revision of this page, as edited by Ekoontz (talk | contribs) at 23:23, 18 July 2008. The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

This diagram is missing a few things:

1. Message direction. There is no indication of the direction of messages. 2. "demand client zertificate" is really called "CertificateRequest" 3. Immediately after "demand client zertificate", there should be a "ServerHelloDone" message. 4. Given that the client response to the ServerHello consists of 5 messages, the server generally does not check the client certificate immediately upon receipt of that message. 5. Client certificate is shown as being sent twice, "client certificate" and "client certifikate (encrypted with Private Key Client)". This is wrong. The client certificate is sent over once, and is not encrypted with any private key. The client certificate includes the public key. 6. The "change to encrpted connection with (MS)", is really the ChangeCipherSpec record. 7. The "end SSL handshake", is really the Finished handshake message.

This diagram should not be used.


Also not clear what the acronyms such as "RNc" mean : diagram needs a legend to explain these.Ekoontz (talk) 23:23, 18 July 2008 (UTC)[reply]