Unconfigured Ad Widget

Collapse

Wanting to learn more about x.509 Certificates

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Prepped and ready
    • Jun 2013
    • 951

    Wanting to learn more about x.509 Certificates

    In the near future I will have more time on my hands and figured I would learn something new. So I would like to learn more about Certificate keys and x.509 seems to cover them all.

    Ive been looking for a good online school and/or even a good book to buy, but there are no real reviews on either to which is good or bad.

    So seeking a little guidence as to where to start. Tha ks for any help.
  • #2
    HecklerNKoch
    Member
    • Jan 2016
    • 428

    You really need to narrow down the scope otherwise you would be undertaking a serious academic endeavor.


    As dry as it sounds, at least skim through these:


    This memo profiles the X.509 v3 certificate and X.509 v2 certificate revocation list (CRL) for use in the Internet. An overview of this approach and model is provided as an introduction. The X.509 v3 certificate format is described in detail, with additional information regarding the format and semantics of Internet name forms. Standard certificate extensions are described and two Internet-specific extensions are defined. A set of required certificate extensions is specified. The X.509 v2 CRL format is described in detail along with standard and Internet-specific extensions. An algorithm for X.509 certification path validation is described. An ASN.1 module and examples are provided in the appendices. [STANDARDS-TRACK]

    This memo profiles the X.509 v3 certificate and X.509 v2 CRL for use in the Internet. [STANDARDS-TRACK]

    This document presents a framework to assist the writers of certificate policies or certification practice statements for participants within public key infrastructures, such as certification authorities, policy authorities, and communities of interest that wish to rely on certificates. In particular, the framework provides a comprehensive list of topics that potentially (at the writer's discretion) need to be covered in a certificate policy or a certification practice statement. This document supersedes RFC 2527.

    This document presents a framework to assist the writers of certificate policies or certification practice statements for certification authorities and public key infrastructures. In particular, the framework provides a comprehensive list of topics that potentially (at the writer's discretion) need to be covered in a certificate policy definition or a certification practice statement. This memo provides information for the Internet community.



    I would say after you've skimmed through those make yourself a compare and contrast chart noting the differences between RFC 2527 and 3647.

    If you don't narrow down your scope ... you'll be studying everything from PKI Based Protocols, to Management Systems to its implementation, its deployment, its design...

    You could grab a flash drive, make a live CD of Debian, install OpenSSL, configure it and practice setting things up there.

    You can't go wrong with this:

    Implementing SSL / TLS Using Cryptography and PKI [Davies, Joshua] on Amazon.com. *FREE* shipping on qualifying offers. Implementing SSL / TLS Using Cryptography and PKI


    But keep going back to those four RFCs and outline them as if preparing for an exam.

    Comment

    • #3
      Satex
      CGN/CGSSA Contributor
      CGN Contributor
      • Feb 2006
      • 3501

      You don't need a proper school. Many of the big organizations provide online white papers. The basic is that an x509 certificate is the public key for asymmetric encryption. They are used to establish trust chains.

      Google is your friend: https://adamtheautomator.com/x-509-c...cate-tutorial/

      Comment

      Working...
      UA-8071174-1