SSL/TLS

SSL #

Secure Sockets Layer

  • Process:
    1. Client requests access to an SSL-secured server
    2. Server sends the client a copy of the SSL Certificate
    3. The SSL client checks the certificate against CA roots
    4. Client negotiates a symmetric-key cipher for use in the session
    5. Session is now secure with an encrypted tunnel
  • SSL is limited to HTML , FTP , SMTP , and a few older TCP applications.

TLS #

Transport Layer Security

Designed as an upgrade to SSL.

  • Used to secure a variety of TCP/IP applications including VOIP , VPN , HTTPS , and EAP-TLS (wireless networking).

OpenSSL #