本文探讨了一种设备通过扮演自己的证书权威机构，如何与另一设备建立安全连接。首先，设备生成自签名根证书，将长期公钥绑定到设备身份。然后，它以信任的方式提供根证书，并利用长期私钥签发短期身份证书。第一设备通过发送新创建的证书进行自我认证。
摘要：
A first device with a changing identity establishes a secure connection with a second device in a network by acting as its own certificate authority. The first device issues itself a self-signed root certificate that binds an identity of the first device to a long-term public key of the first device. The root certificate is digitally signed using a long-term private key, where the long-term public key and the long-term private key form a public/private key pair. The first device provides its root certificate to the second device in any trusted manner. The first device can then create a certificate for one or more short-term identities acquired by the first device and sign the newly-created certificate using the long-term private key. The first device can authenticate itself to the second device by sending the newly-created certificate to the second device.
展开
扫一扫
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
