[Cloud Computing]Mechanisms: Certificate Authority

最新推荐文章于 2020-02-17 18:21:12 发布

转载最新推荐文章于 2020-02-17 18:21:12 发布 · 393 阅读

文章标签：

#云计算 #云计算机制

Cloud Computing 专栏收录该内容

94 篇文章

订阅专栏

本文介绍了公共密钥基础设施(PKI)中的核心组件——证书权威机构(CA)。CA负责签署数字证书及证书撤销列表(CRL)，确保信息安全可靠。文章还解释了注册权威机构(RA)的角色及其如何验证证书信息的有效性和准确性。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

Certificate Authority

The certificate authority, or certification authority, is the public key infrastructure (PKI) entity that digitally signs certificates and certificate revocation lists (CRLs). The CA generates some certificate information but is primarily responsible for collecting information from authorized sources and entering that information into a certificate before signing.

The CA digitally signs and issues a subscriber's certificate when authorized by the appropriate trusted person or process, called a registration authority (RA). The RA ensures that only valid and appropriate information is included in the certificate and maintains evidence that due diligence was exercised in confirming the information to the required assurance level of the PKI.

Figure 1 - An example of a certificate authority as part of a public key infrastructure (PKI).

Figure 1 shows a certificate authority issuing certificates and CRLs as part of a PKI. The PKI must be operated in accordance with a certificate policy and certificate practice statement (CPS) that establishes the security assurance level of the issued certificates. Periodic audits are performed to confirm that the PKI is being operated in accordance with their CPS.