PKI – Understanding OCSP (Online Certificate Status Protocol #3
Testing the configuration by revoking a certificate What is the status of the certificate on the client? The certutil tool […]
Category: openssl
PKI – Understanding OCSP (Online Certificate Status Protocol #2
Log into the certificate authority (CA) Publish the template Configure the AIA settings on the CA In this example, a […]
PKI – Understanding OCSP (Online Certificate Status Protocol # 1
OCSP (Online Certificate Status Protocol) is a protocol used in Public Key Infrastructure (PKI) systems to check the validity of […]
PKI – Understanding Certificate Revocation List (CRL) – Part 2
What happens on the client side when the certificate is revoked? On the CA side, the certificate is revoked. The […]
PKI – Understanding Certificate Revocation List (CRL) – Part 1
A Certificate Revocation List (CRL) is a critical component of Public Key Infrastructure (PKI) that helps maintain the integrity and […]
Understanding the TLS Handshake using Wireshark – EAP-TLS
Theory EAP-TLS (Extensible Authentication Protocol-Transport Layer Security) is an 802.1X authentication method widely used in enterprise wireless and wired networks […]
Understanding the TLS Handshake using Wireshark – HTTPS
Wireshark is a powerful tool for understanding or troubleshooting TLS/SSL connections, as it allows you to capture, filter, and analyze […]
Using Wireshark to extract certificates from a TLS session
In the context of Public Key Infrastructure (PKI), a certificate is a digital document that binds a public key to […]
OpenSSL #4 – Useful Commands
1. Extract Certificates from PEM and PKCS12 Files Extract a certificate from a PEM file (e.g., .crt, .cer, .pem): Extract […]
OpenSSL # 3 – Creating A Certificate Authority
Create the root CA private key View Contents of the private key openssl rsa -in LABROOTCA-Private.key Generate the CSR Viewing […]