How does the SSL protocol work?

SSL connections are always initiated by the client. At the start of the SSL session, an SSL handshake is performed. This handshake generates the encryption parameters for the session.

Explanation Reason: The client submits an HTTPS request.

The server responds to the client and sends the certificate public key to the client.

The client verifies the validity of the certificate's public key.

Once valid, a session key is generated.

Encrypt the session key with the certificate public key and send it to the server.

After receiving the session key encrypted by the public key, the server decrypts it with the private key and returns the session key.

This session key is used by both the client and the server to encrypt the data to be transmitted.

Please click Enter a description.

Workaround: GWORG obtains an SSL certificate.

Here's how the SSL protocol works:

1) Handshake Protocol: This protocol is responsible for the encryption parameters used by the quilt for the session between the client and the server. When an SSL client and server start communicating, they agree on a protocol version, choose the encryption algorithm and authentication method, and use public key technology to generate a shared key.

2) Recording protocol: This protocol is used to exchange application data. Application messages are split into manageable chunks, which can also be compressed, and a MAC (Message Authentication**) is generated, and the result is then encrypted and transmitted.

The receiver accepts the data and decrypts it, validates the MAC, decompresses and reassembles it, and provides the result to the application protocol.

3) Warning Protocol: This protocol is used to indicate at all times when an error occurred or when the session between two hosts was terminated. The handshake steps for SSL communication are as follows:

SSL is a secure communication protocol developed by Netscape.

It can provide strong protection for credit cards and personal information. SSL is a protocol that encrypts the entire session between computers. In SSL, two encryption methods are used: public key and private key.

Basics:

SSL (Secure Socket Layer) mainly uses public key system and digital certificate technology to protect the confidentiality and integrity of information transmission, which cannot guarantee the non-repudiation of information, and is mainly suitable for information transmission between points, commonly used in web server mode.

Advantages of the SSL protocol:

The advantage of the SSL protocol is that it is independent of the application layer protocol. High-level application layer protocols (e.g., HTTP, FTP, TELNET, etc.) can be transparently built on top of the SSL protocol.

The SSL protocol completes the negotiation of encryption algorithms, communication keys, and server authentication before the application layer protocol communicates. After that, the data transmitted by the application layer protocol is encrypted, so that the communication is kept private.

Application of SSL security protocol:

SSL security protocol is also the earliest network security protocol applied to e-commerce in the world, and it is still used by many online stores. When in use, the SSL protocol has been partially improved according to the principle of mail order. In traditional mail-order activities, the customer first looks for product information, then sends money to the merchant, and the merchant then sends the product to the customer.

Here, the merchant can be trusted, so the customer must pay the merchant first. At the beginning of e-commerce, merchants are also worried that customers will not pay after purchase, or use expired and invalid credit cards, so they want the bank to authenticate them. It is in this context that the SSL security protocol is applied to e-commerce.

The so-called SSL is the abbreviation of Secure Socket Layer, which is a security protocol implemented on the transmission communication protocol, SSL widely supports various types of networks, and provides three basic security services, all of which use public key technology.

The architecture of SSL consists of two sub-layers of protocols, the bottom layer of which is the SSL record protocol layer; The upper layer is the SSL Handshake Protocol Layer.

The role of the SSL record protocol layer is to provide basic security services for the higher-layer protocols. The SSL recording protocol is specially designed for the HTTP protocol, which enables the hypertext transmission protocol HTTP to run in SSL. Records and encapsulates various high-level protocols, and implements security-related operations such as compression and decompression, encryption and decryption, calculation, and verification MAC.

The SSL handshake protocol layer includes SSL Handshake Protocol, SSL Change Cipher Spec Protocol, Application Data Protocol, and SSL Alert Protocol. These protocols at the handshake layer are used for the exchange of SSL management information, allowing application protocols to authenticate data transmitted to each other, negotiate cryptographic algorithms, generate keys, and more. The role of the SSL handshake protocol is to coordinate the state of the client and the server, so that both parties can achieve state synchronization.

The main sub-protocols that SSL contains are the Recording Protocol, the Warning Protocol, and the Handshake Protocol.

SSL (Secure Sockets Layer) protocol has become a global standard protocol on the Internet for authenticating users and web browsers, as well as for encrypted communication between browser users and web servers. Simply understood, it is a security protocol for network connection that can protect user information security.

To achieve HTTPS encrypted access, you need to deploy an SSL certificate, which involves the SSL encryption protocol. For example, individuals use domain name DV SSL certificates, while enterprises with high security requirements mostly apply for enterprise ov SSL certificates or enhanced EV SSL certificates, no matter what type of SSL certificate, they are always inseparable from the SSL protocol.

There are still many advantages of the SSL protocol:

1. Authenticate users and servers to ensure that data is sent to the correct client and server;

2. Encrypt data to prevent data from being stolen in the middle;

3. Maintain the integrity of the data and ensure that the data is not changed during transmission.

While the SSL protocol can play a big role and has many advantages, it also has some disadvantages:

1) There is a large vulnerability in the secure connection provided by SSL:

SSL does not provide any security guarantees other than security during transmission, and does not allow customers to know that the merchant is authorized to receive credit card payments, in other words, there is a lack of authentication between the merchant, the customer and the bank. Therefore, it is very likely that bad actors will take advantage of this vulnerability to carry out some fraudulent acts.

2) SSL doesn't provide good privacy protection:

During the SSL transaction, the consumer needs to transmit all information to the merchant, including payment information and order information. In this process, the merchant can see all the information of the consumer, including the credit card number information, and there is no complete guarantee that the merchant can unconditionally protect the privacy of the consumer.

There are several steps for a client to communicate with a web server using HTTPS:

1) The customer uses the URL of HTTPS to access the web server and asks to establish an SSL connection with the web server.

2) After receiving the client's request, the web server will send a copy of the certificate information (the certificate contains the public key) to the client.

3) The client's browser and the web server begin to negotiate the security level of the SSL connection, that is, the level of information encryption.

4) The client's browser establishes a session key according to the security level agreed by both parties, and then uses the public key of ** to encrypt the session key and transmit it to **.

5) The web server uses its own private key to decrypt the session key.

6) The web server encrypts the communication with the client using the session key.

The above is the working principle of SSL certificate, the use of SSL certificate needs to be applied for in a professional certificate issuing authority, some certificate service providers provide a free version, you can apply for a trial trial. The above information is from the official website of joyssl

The functional implementation of TLS SSL mainly relies on three basic algorithms: hash function hash, symmetric encryption and asymmetric encryption, which uses asymmetric encryption to achieve identity authentication and key negotiation, and the symmetric encryption algorithm uses a negotiated key pair to encrypt data and verify the integrity of information based on the hash function.

The key to solving the above authentication problem is to ensure that the public key obtained is legitimate and able to verify the identity information of the server, for which it is necessary to introduce an authoritative third-party agency responsible for verifying the information of the owner of the public key and issuing authentication"Certificates"At the same time, it can provide users with certificate verification services, that is, PKI system.

The basic principle is that the CA is responsible for reviewing the information and then using the private key for the critical information"Signature", the corresponding public key is exposed, and the client can use the public key to verify the signature. CA can also revoke certificates that have already been issued, the basic way includes two types of CRL files and The specific process is as follows:

It is true that the client and server do not support the general SSL protocol or cipher suite.

HTTPS has gained the most widespread support as one of the best practices for site security. However, in the actual production process, the connection anomaly caused by the failure of the TLS SSL handshake is still very common.

The main function of HTTPS is to create a secure channel based on the TLS SSL protocol on an insecure network to provide a reasonable degree of protection against eavesdropping and man-in-the-middle attacks. Solution:

1. Replace the certificate issued by another CA organization to ensure that the CA root certificate is trusted by default on a specific device.

2. Manually install the CA root certificate and intermediate certificate on the affected device and configure them as trust status.

What encryption algorithms does the SSL protocol support?

1. RSARSA, as an international general algorithm, is based on the assumption of large integer factorization. Assuming that there is no effective algorithm for integer factorization, it is considered that complete decryption of RSA ciphertext is not feasible. A user creates and publishes the sum of the product of two large prime numbers of RSA as a secondary value for their public key.

Key elements must be kept confidential. Everyone can encrypt information with a public key, but only those who understand the key elements can decode the information. Almost every SSL certificate now supports the RSA algorithm.

2. The ECCECC algorithm was put into use in 2004, and the ECC algorithm is based on a finite field, and the elliptic curve cryptography relies on the algebraic structure of the elliptic curve. It is unrealistic to assume that the discrete logarithm of random elliptic curve elements is found to be related to a commonly known basis point. Compared with the RSA algorithm, the ECC algorithm has the advantage of a smaller key, which improves speed and security.

The downside is that not all services and applications are interoperable with ECC-based SSL certificates.

The ECC algorithm has become the mainstream of the new generation of algorithms, with faster encryption speed, higher efficiency, more security, and stronger resistance to attacks, but it is not as extensive as RSA in terms of compatibility.

SSL, or Secure Sockets Layer, is an encryption-based Internet security protocol. It was originally developed by Netscape in 1995 to ensure privacy, authentication, and data integrity in Internet communications. SSL is the precursor to the modern TLS encryption used today.

Hello! SSL certificate is a digital certificate, which mainly gives the function of encrypting transmission and trust of the **https security protocol. SSL certificates have a digital encryption and authentication process, and the encryption protocol can be secured**.

**Implement encrypted transmission

When the user accesses ** through the HTTP protocol, the browser and the server are transmitted in plaintext, which means that the password, account number, transaction records and other confidential information filled in by the user are in plaintext, which may be leaked, stolen, tampered with and used by hackers at any time.

After installing the SSL certificate, use the https encryption protocol to access it, which can activate the relationship between the client browser and the server"SSL encrypted channel"(SSL protocol) to achieve high-strength two-way encrypted transmission to prevent the transmission data from being leaked or tampered with.

Authenticate the real identity of the server

Phishing scams are rampant, and how users can identify if it's phishing.

After deploying the globally trusted SSL certificate, the browser has a built-in security mechanism to check the certificate status in real time, and display the authentication information to the user through the browser, so that the user can easily identify the real identity and prevent phishing.

EV SSL certificate contents

The browser displays a green address bar, a green "lock" security sign, strong 256-bit encryption protection, and the name of the company and the name of the certificate issuing authority.

After using the HTTPS protocol, the SSL certificate can authenticate the real identity of the server, thus preventing phishing forgery.

Increase** access speed

Through the HTTP vs HTTPS comparison test, it is shown that the new generation of HTTP2 protocol using SSL certificates has a much faster access speed than using the HTTP protocol.

Improve the company's brand image and credibility