并且,正如我们可以从本系列的第2部分有关数字证书的讨论中看到的一样,服务器还必须要在握手过程中提供安全证书。
And, as you might recall from the digital certificates discussion in Part 2 of this series, the server must also provide the security certificate used during the handshake.
由于本文重点要介绍在握手过程中服务器数字证书的处理,因此让我们来深入介绍一下握手是如何工作的。
Since this article focuses on handling the server's digital certificate during the handshake, let's go into depth as to how the handshake works.
服务器可以包括对客户机的数字证书的请求,这一点是可选的。
The Server can optionally include a request for the Client's digital certificate.
对称算法将使用服务器的数字证书中的公钥。
The asymmetric algorithm USES the public key in the server's digital certificate.
SSL使用数字证书为加密、服务器验证以及客户机验证(可选)提供密钥交换服务。
SSL USES digital certificates to exchange keys for encryption, server authentication, and optionally, client authentication.
此时服务器还会发送自己的数字证书。
It's at this time that the server also sends its digital certificate.
获取SSL服务器(队列管理器)和SSL客户机(JMS客户机)的数字证书。
Obtaining a digital certificate for the SSL server (queue manager) and the SSL client (JMS client).
客户机使用自己的私钥对这个hash值进行签名,并将签名后的数据和数字证书发送给服务器。
The client signs the hash using the client's private key and sends the signed data and the digital certificate to the server.
可信的证书权威机构发布数字证书,它们被用来鉴别用户和组织访问Web站点,e - mail服务器和其他安全系统的权限。
Trusted certificate authorities issue digital certificates, which are then used to authenticate users and organizations for access to Web sites, E-mail servers, and other secure systems.
当客户机接收到服务器端的hello消息之后,数字证书就要进行验证了。
Once the server's hello message is received, the digital certificate is verified.
所有其他的安全机制(数字证书、SSL、WS - Security等)都是由客户机和服务器运行时系统所提供的增值功能。
All other security mechanisms (digital certificates, SSL, WS-Security, etc.) are value-added features offered by client and server JAX-RPC run-time systems.
SSL服务器还发送一个会话标识、一个随机字节字符串以及它的数字证书。
It also sends a session ID, a random byte string, and its digital certificate.
另外,如果服务器请求数字证书的话,客户机可能会发送它的数字证书。
In addition, the Client might send its digital certificate, if it was requested by the Server.
在等待证书发布的同时,您可以创建一个自签名的数字证书来测试客户机与服务器之间的SSL会话。
While waiting for an issued certificate, you can create a self-signed digital certificate to test SSL sessions between clients and the server.
借助服务器的数字证书,客户机还可以验证服务器的身份。
With the server's digital certificate, the client can also verify the server's identity.
SSL使用加密技术、数字签名和数字证书,在客户端和服务器之间提供消息隐私、消息完整性和相互验证。
SSL USES encryption techniques, digital signatures and digital certificates to provide message privacy, message integrity and mutual authentication between clients and servers.
这个秘密值会对服务器的数字证书进行加密,并发送给服务器用于验证客户机的身份。
This secret value is encrypted to the server's digital certificate and sent to the server for verification that everything is as it should be.
一般而言,由于应用服务器通常不颁发数字证书,因此需要从外部证书颁发机构获取数字证书。
Typically, since application servers generally do not provide the issuing of digital certificates, you would be required to obtain digital certificates from external certification authorities.
秘钥使用从服务器的数字证书处获取的SSL 服务器的公钥对自己进行加密。
The secret key is itself encrypted using the SSL Server's public key obtained from the Server's digital certificate.
通过使用数字证书构建校园网服务器安全、校园网电子邮件安全、校园网一卡通等系统的安全。
Through using the digital certificates to structure systematic security, such as campus network's server security, E-mail security, All-purpose Card and so on.
身份认证服务器提供口令认证和数字证书认证两种方式。
Identification authentication server provides password authentication and digital certificate authentication.
身份认证服务器提供口令认证和数字证书认证两种方式。
The Design and Implementation of user authentication System based on digital certification;
身份认证服务器提供口令认证和数字证书认证两种方式。
The Design and Implementation of user authentication System based on digital certification;
应用推荐