This week's giveaway is in the Android forum.
We're giving away four copies of Android Security Essentials Live Lessons and have Godfrey Nolan on-line!
See this thread for details.
The moose likes Security and the fly likes regarding  ssl Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login


Win a copy of Android Security Essentials Live Lessons this week in the Android forum!
JavaRanch » Java Forums » Engineering » Security
Bookmark "regarding  ssl" Watch "regarding  ssl" New topic
Author

regarding ssl

chennai Kumar
Ranch Hand

Joined: Jun 04, 2005
Posts: 72
hello all,
I have doubt in ssl, what is difference between creating our own ssl certificate using keytool and third party certification,such as versign.
whether webserver not providing good secure layer or not???
In which circumstance need to go third party ???
thanks in advance
abiram kumar.p
Ulf Dittmer
Marshal

Joined: Mar 22, 2005
Posts: 41182
    
  45
Technically there is no difference. Practically there are a few:
  • Self-made certificates are free; Verisign et al. charge you money (although Thawte lets you create them for personal use for free)
  • Browsers know about Verisign, Thawte and other well-known signers, but they don't know about you. If a certificate is presented from a signer the browser doesn't know, a dialog will be shown to the user asking him to confirm that he trusts this signer. (If you're using Firefox, go to Options > Advanced > Security > View Certificates > Authorities to see who is and isn't known.)


  • Ping & DNS - my free Android networking tools app
    chennai Kumar
    Ranch Hand

    Joined: Jun 04, 2005
    Posts: 72
    Hello all,
    Thanks Ulf Dittmer.I have another doubt in SSL

    while using SSL server generates public and private keys

    What algorithm used for generate the above keys?

    How public and private keys are generated?


    thanks in advance
    Abiramkumar P
    Ulf Dittmer
    Marshal

    Joined: Mar 22, 2005
    Posts: 41182
        
      45
    A Google search finds many introductions to SSL.

    The server does not generate keys, though, it merely uses them.
    [ June 21, 2006: Message edited by: Ulf Dittmer ]
     
    I agree. Here's the link: http://aspose.com/file-tools
     
    subject: regarding ssl
     
    Similar Threads
    Statistics
    uploading file using ssl
    SSL authentication without CA
    which protocol to use
    Giving color and font in JSP