Unconfigured Ad Widget

Collapse

Wanting to learn more about x.509 Certificates

Collapse
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • #1
    Prepped and ready
    • Jun 2013
    • 951

    Wanting to learn more about x.509 Certificates

    In the near future I will have more time on my hands and figured I would learn something new. So I would like to learn more about Certificate keys and x.509 seems to cover them all.

    Ive been looking for a good online school and/or even a good book to buy, but there are no real reviews on either to which is good or bad.

    So seeking a little guidence as to where to start. Tha ks for any help.
    Tags: None
    • #2
      HecklerNKoch
      Member
      • Jan 2016
      • 428
      You really need to narrow down the scope otherwise you would be undertaking a serious academic endeavor.


      As dry as it sounds, at least skim through these:


      RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
      https://tools.ietf.org/html/rfc5280
      This memo profiles the X.509 v3 certificate and X.509 v2 certificate revocation list (CRL) for use in the Internet. An overview of this approach and model is provided as an introduction. The X.509 v3 certificate format is described in detail, with additional information regarding the format and semantics of Internet name forms. Standard certificate extensions are described and two Internet-specific extensions are defined. A set of required certificate extensions is specified. The X.509 v2 CRL format is described in detail along with standard and Internet-specific extensions. An algorithm for X.509 certification path validation is described. An ASN.1 module and examples are provided in the appendices. [STANDARDS-TRACK]

      RFC 2459: Internet X.509 Public Key Infrastructure Certificate and CRL Profile
      https://tools.ietf.org/html/rfc2459
      This memo profiles the X.509 v3 certificate and X.509 v2 CRL for use in the Internet. [STANDARDS-TRACK]

      RFC 3647: Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework
      https://tools.ietf.org/html/rfc3647
      This document presents a framework to assist the writers of certificate policies or certification practice statements for participants within public key infrastructures, such as certification authorities, policy authorities, and communities of interest that wish to rely on certificates. In particular, the framework provides a comprehensive list of topics that potentially (at the writer's discretion) need to be covered in a certificate policy or a certification practice statement. This document supersedes RFC 2527.

      RFC 2527: Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework
      https://tools.ietf.org/html/rfc2527
      This document presents a framework to assist the writers of certificate policies or certification practice statements for certification authorities and public key infrastructures. In particular, the framework provides a comprehensive list of topics that potentially (at the writer's discretion) need to be covered in a certificate policy definition or a certification practice statement. This memo provides information for the Internet community.



      I would say after you've skimmed through those make yourself a compare and contrast chart noting the differences between RFC 2527 and 3647.

      If you don't narrow down your scope ... you'll be studying everything from PKI Based Protocols, to Management Systems to its implementation, its deployment, its design...

      You could grab a flash drive, make a live CD of Debian, install OpenSSL, configure it and practice setting things up there.

      You can't go wrong with this:

      Implementing SSL / TLS Using Cryptography and PKI: Davies, Joshua: 9780470920411: Amazon.com: Books
      https://www.amazon.com/Implementing-SSL-TLS-Joshua-Davies/dp/0470920416/
      Implementing SSL / TLS Using Cryptography and PKI [Davies, Joshua] on Amazon.com. *FREE* shipping on qualifying offers. Implementing SSL / TLS Using Cryptography and PKI


      But keep going back to those four RFCs and outline them as if preparing for an exam.

        Comment

        • #3
          Satex
          CGN/CGSSA Contributor
          CGN Contributor
          • Feb 2006
          • 3501
          You don't need a proper school. Many of the big organizations provide online white papers. The basic is that an x509 certificate is the public key for asymmetric encryption. They are used to establish trust chains.

          Google is your friend: https://adamtheautomator.com/x-509-c...cate-tutorial/

            Comment

            Previous template Next

            Calguns.net Statistics

            Collapse
            Topics: 1,865,050   Posts: 25,126,443   Members: 355,945   Active Members: 4,078
            Welcome to our newest member, glocksource.

            What's Going On

            Collapse

            There are currently 10315 users online. 94 members and 10221 guests.

            Most users ever online was 239,041 at 10:39 PM on 02-14-2026.

            Working...
            UA-8071174-1