I should mention at this point that self-signed certificates work in exactly the same way as ca signed certificates.
2
AspectWerkz还支持其他方法调用签名,不过需要多做一些配置工作。
AspectWerkz also supports other method call signatures, though with a little added effort required in terms of the configuration.
3
那么用来签名的密钥就有可能会被 CA 内部工作的人员窃取,他们随后就可以使用任何人的名字来创建任意的证书。
Then it becomes possible for the signing key to be stolen by someone within the CA's work sphere who could then create arbitrary certificates with almost anyone's name.