1) Administrator generate a pair of private key and public key for secure SSH to server authorize
2) Server generate a pair of private key and public key, and sent a signing request with CSR and public key to Certificate Authority(CA)
3) Certificate Authority(CA) generate a pair of private key and public key(known by all user browser authority), using private key signed certificate(CSR signing request from server) and sent back to server
4) Server using the CA signed certificate and public key to reply the Users https request
5) Users using the known CA public key to validate the CA signed certificate and get server public key
6) Users generate the symmetric key and encrypted by the server public key and sent back to the server
7) Server using the private key to decrypted and retrieve the symmetric key
8) the symmetric key is used for communicate going forward the security between users and servers
9) Summaries








No comments:
Post a Comment