CODEWITHSUNDEEP
javassl
Hamza Yerlikaya
Hamza Yerlikaya

Reputation: 49329

Using SSL Socket for identifying clients

Can SSL sockets be used to identify clients? What i am thinking of is, can i configure an SSL socket to only accept connections from clients that have a certificate that i create beforehand?

Upvotes: 2

Views: 336

Answers (2)

user207421
user207421

Reputation: 310903

NB it can't be a certificate that you create. By the nature of PKI the client has to create his own private key and certificate.

Upvotes: 2

Alexey Kalmykov
Alexey Kalmykov

Reputation: 1958

Typically SSL is used only when the server is authenticated (the client knows the server's identity), but the client remains unauthenticated or anonymous. But SSL can be easily used for authentication of clients. The only requirement is that client also holds a certificate. By verifying a client's certificate against Certification Authority you can authenticate your client.

Upvotes: 3

Related Questions