Morten Bo Nielsen – mon@eal.dk 1/8

PKI and certificates

ITT2 IT security

2014S

Morten Bo Nielsen – mon@eal.dk 2/8

Certificates

Think “signature”With name

And validation

Morten Bo Nielsen – mon@eal.dk 3/8

Assignment X.509 Format

1)Go to https://google.dk2)Save certificate as .pem3)openssl x509 -in star.google.dk.pem -noout -text4)What information is in it

http://en.wikipedia.org/wiki/X.509

Morten Bo Nielsen – mon@eal.dk 4/8

CertificateAuthorities

Morten Bo Nielsen – mon@eal.dk 5/8

Assignment: Treasure hunting

What is is in /etc/ssl/certs

/etc/ssl/private/etc/ssh

Morten Bo Nielsen – mon@eal.dk 6/8

Root CA

Morten Bo Nielsen – mon@eal.dk 7/8

Assignment: Set up your own

Create a CA root certificate (hint)Make a signed certificate

Have someone check that it is valid (hint)

Morten Bo Nielsen – mon@eal.dk 8/8

Credits & licences● Content by Morten Bo Nielsen

License: Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Unported License. (http://creativecommons.org/licenses/by-nc-sa/3.0/)

● EAL logo might be an issue, please check before you use it