Secure Sockets Layer (SSL)

1
Secure Sockets Layer (SSL)

• Fred Schank
• Kevin Wetter

2
Introduction

• SSL Where does it fit in?
• SSL Handshake Process
• Handling Certificates
• Example

3
SSL

• Non-secure request
• Secure request

4
Ciphers

• No encryption
• Stream Ciphers
• RC4 with 40-bit keys
• RC4 with 128-bit keys

• CBC Block Ciphers
• RC2 with 40 bit key
• DES with 40 bit key
• DES with 56 bit key
• Triple-DES with 168 bit key
• Idea (128 bit key)
• Fortezza (96 bit key)

5
SSL Handshake
6
Certificates

• Digital form of identifying a node
• Comprised of
• Location Info
• Name Info
• Fingerprint Info
• CA Info

7
Certificate Authorities (CAs)

• Issues certificates to trusted sites for a fee
• Common CAs
• Verisign
• InterSSL
• WorldTrust
• NOTE Anyone can act as a CA
• popular browsers only trust certain CAs

8
Issuing a Certificate

• Create a request for signing
• gt openssl req -new gt new.cert.csr
• Remove passphrase from key
• gt openssl rsa -in privkey.pem -out new.cert.key
• Sign the certificate
• gt openssl x509 -in new.cert.csr -out
  new.cert.cert -req -signkey new.cert.key -days 365

9
Configuring Apache

• /etc/httpd/conf.d/ssl.conf
• SSL config file for Apache
• Changes
• SSLCertificateFile /etc/httpd/conf/ssl.crt/new.cer
  t.cert
• Specifies where servers certificate is
• SSLCertificateKeyFile /etc/httpd/conf/ssl.crt/new.
  cert.key
• Specifies where servers private key is

10
Example

• http//134.198.161.101