Showing posts with label mtls. Show all posts
Showing posts with label mtls. Show all posts

Monday, 26 August 2024

Certificate bag attributes in PEM

 https://stackoverflow.com/questions/72866563/what-are-bag-attributes-in-pemfiles-and-do-they-matter-in-the-file-i-mean-can


ag attributes are generated by OpenSSL during PFX conversion to PKCS#1/PKCS#8 PEM private key files. These attributes are not signed and are completely optional. See this thread for more information: What are bag attributes and how can i generate them?

Sunday, 24 March 2024

waht is x509

 https://www.ssl.com/faqs/what-is-an-x-509-certificate/


X.509 is a standard format for public key certificates, digital documents that securely associate cryptographic key pairs with identities such as websites, individuals, or organizations.

Saturday, 23 March 2024

MTLS SSL handshake before https connection established


The client certificate exchange happens during the SSL handshake, before the HTTPS connection is established. It all happens in the browser at layer 5 while your application is working at layer 7. You can't affect client certificate exchange in JavaScript at all.

If the exchange is not happening there is a configuration issue on the server or in the browser. If the client certificate is installed in the browser, it will automatically be sent in response to a matching client certificate request from the server. If that's not happening then something is

https://stackoverflow.com/questions/28033824/sending-client-certificate-via-javascript#:~:text=You%20can't%20affect%20client,certificate%20request%20from%20the%20server.