ibm-information-center/dist/eclipse/plugins/i5OS.ic.rzain_5.4.0.1/rzainserverauth.htm

49 lines
3.1 KiB
HTML

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html lang="en-us" xml:lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="security" content="public" />
<meta name="Robots" content="index,follow" />
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
<meta name="DC.Type" content="concept" />
<meta name="DC.Title" content="Server authentication" />
<meta name="abstract" content="With server authentication, the client will ensure that the server certificate is valid and that it is signed by a certificate authority (CA) which the client trusts." />
<meta name="description" content="With server authentication, the client will ensure that the server certificate is valid and that it is signed by a certificate authority (CA) which the client trusts." />
<meta name="DC.Relation" scheme="URI" content="rzainconcepts.htm" />
<meta name="copyright" content="(C) Copyright IBM Corporation 2002, 2006" />
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2002, 2006" />
<meta name="DC.Format" content="XHTML" />
<meta name="DC.Identifier" content="serverauth" />
<meta name="DC.Language" content="en-us" />
<!-- All rights reserved. Licensed Materials Property of IBM -->
<!-- US Government Users Restricted Rights -->
<!-- Use, duplication or disclosure restricted by -->
<!-- GSA ADP Schedule Contract with IBM Corp. -->
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
<link rel="stylesheet" type="text/css" href="./ic.css" />
<title>Server authentication</title>
</head>
<body id="serverauth"><a name="serverauth"><!-- --></a>
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
<h1 class="topictitle1">Server authentication</h1>
<div><p>With server authentication, the client will ensure that the server
certificate is valid and that it is signed by a certificate authority (CA)
which the client trusts.</p>
<p> SSL will use asymmetric cryptography and handshake protocol flows to generate
a symmetric key which will be used only for this unique SSL session. This
key is used to generate a set of keys which are used for encrypting and decrypting
data which will flow over the SSL session. Subsequently, when an SSL handshake
has completed, one or both ends of the communication link will have been authenticated.
Additionally, a unique key will have been generated to encrypt and decrypt
the data. Once the handshake is completed then application layer data will
flow encrypted across that SSL session.</p>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzainconcepts.htm" title="SSL concepts includes supplemental information, providing some basic building blocks for the Secure Sockets Layer (SSL) protocols.">Concepts</a></div>
</div>
</div>
</body>
</html>