CODEWITHSUNDEEP
opensslcertificate
Ashwin
Ashwin

Reputation: 13537

Creating your own ca with open ssl in windows

A question I have is that, when a certificate is signed by a ca what actually happens. Does the ca use his private key to hash or something like that?

Upvotes: 0

Views: 245

Answers (1)

Bruno
Bruno

Reputation: 122649

The CA sets the content of the X.509 certificate (see TBScertificate sequence), including its own Subject DN as the certificate Issuer DN (same for alternative names, if any).

Then, it signs the certificate to form the Certificate sequence: it sets the signature type and fills in the signature which it has produced using its private key. For example, if the signature type is SHA-1 with RSA (quite common), it will produce a SHA-1 hash/digest of TBScertificate and sign it using its (RSA) private key.

Upvotes: 1

Related Questions