Difference between revisions of "IT-Security"
Jump to navigation
Jump to search
Samerhijazi (talk | contribs) (→Initial) |
Samerhijazi (talk | contribs) (→Initial) |
||
| Line 5: | Line 5: | ||
* https://www.learninjava.com/convert-p12-to-jks-and-pem-to-jks/ | * https://www.learninjava.com/convert-p12-to-jks-and-pem-to-jks/ | ||
| − | = | + | =Cryptographic (Keys & Certificates)= |
* SSL & TLS are the same. SSL is the old name. TLS is the updated version of SSL. | * SSL & TLS are the same. SSL is the old name. TLS is the updated version of SSL. | ||
* X.509 Certificates encoding formats and file extensions. | * X.509 Certificates encoding formats and file extensions. | ||
| − | |||
| − | |||
| − | |||
* (PKCS) Public Key Cryptography Standards >>> are binary files. These are the newer format of .pfx files. #12 is the 12th version of the standard. | * (PKCS) Public Key Cryptography Standards >>> are binary files. These are the newer format of .pfx files. #12 is the 12th version of the standard. | ||
* (PEM) Privacy Enhanced Mail >>> are text file alternative to PKCS format. | * (PEM) Privacy Enhanced Mail >>> are text file alternative to PKCS format. | ||
| + | * We can use .pem for all artifacts. It is recommended to use for certificate (.cer, .crt) and for public or private keys (.key). | ||
<pre class="text"> | <pre class="text"> | ||
* Base64-ASCII: PEM >>> *.pem, *.crt, *.cer, *.key | * Base64-ASCII: PEM >>> *.pem, *.crt, *.cer, *.key | ||
| Line 19: | Line 17: | ||
* Binary: PKCS#12 >>> *.pfx, *.p12 | * Binary: PKCS#12 >>> *.pfx, *.p12 | ||
</pre> | </pre> | ||
| + | |||
=KeyStore/TrustStore= | =KeyStore/TrustStore= | ||
* KeyStore: holds onto certificates that identify us. | * KeyStore: holds onto certificates that identify us. | ||
Revision as of 17:23, 21 March 2022
Authentication
Ref.
- https://www.learninjava.com/easy-guide-to-ssl/
- https://badssl.com/
- https://www.learninjava.com/convert-p12-to-jks-and-pem-to-jks/
Cryptographic (Keys & Certificates)
- SSL & TLS are the same. SSL is the old name. TLS is the updated version of SSL.
- X.509 Certificates encoding formats and file extensions.
- (PKCS) Public Key Cryptography Standards >>> are binary files. These are the newer format of .pfx files. #12 is the 12th version of the standard.
- (PEM) Privacy Enhanced Mail >>> are text file alternative to PKCS format.
- We can use .pem for all artifacts. It is recommended to use for certificate (.cer, .crt) and for public or private keys (.key).
* Base64-ASCII: PEM >>> *.pem, *.crt, *.cer, *.key * Base64-ASCII: PKCS#7 >>> *.p7b, *.p7c * Binary: DER >>> *.der, *.cer * Binary: PKCS#12 >>> *.pfx, *.p12
KeyStore/TrustStore
- KeyStore: holds onto certificates that identify us.
- TrustStore: holds onto certificates that identify others.
- Until Java 8, the default KeyStore-Format is JKS. Since Java 9, the default KeyStore-Format is PKCS12.
- Java has bundled a TrustStore called cacerts and it resides in the $JAVA_HOME/jre/lib/security directory
* Certificate: .crt, .pem * Certificate Chain: .crt, .cer, .pem * Public Key: .key, .pem * Private Key: .key, .pem
