TC65 JAVA User's Guide
Strictly confidential / Released
s
private key from owner of the certificate
CA Root
Certificate
(X.509)
self singned
public key from owner of the certificate (CA)
asja
|
|
|
|
|
|
|
|
|
|
|
|
|
| te |
|
|
|
|
|
|
|
|
|
|
|
|
| a | |
|
|
|
|
|
|
|
|
|
|
|
| c |
| |
|
|
|
|
|
|
|
|
|
|
| fi |
|
| |
|
|
|
|
|
|
|
|
|
| ti |
|
|
| |
|
|
|
|
|
|
|
|
| r |
|
|
|
| |
|
|
|
|
|
|
|
| e |
|
|
|
|
| |
|
|
|
|
|
|
| c |
|
|
|
|
|
| |
|
|
|
|
|
| r |
|
|
|
|
|
|
| |
|
|
|
|
| e |
|
|
|
|
|
|
|
| |
|
|
|
| v |
|
|
|
|
|
|
|
|
| |
|
|
| r |
|
|
|
|
|
|
|
|
|
| |
|
| e |
|
|
|
|
|
|
|
|
|
|
| |
| s |
|
|
|
|
|
|
|
|
|
|
|
| |
s |
|
|
|
|
|
|
|
|
|
|
|
|
| |
a |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
vasecuritycertificate
HTTPS Server
TCP/IP Connection
Module
test whether
certificates are identical
Figure 41: Mode 2 - Java Security activated (server certificate = certificate into module)
chain of certificates
private key from owner of the server certificate
Server
Certificate
(X.509)
signature of
the CA
public key from owner of the certificate
CA signed the server certificate
CA Root
Certificate
(X.509)
self singned
public key from owner of the certificate (CA)
private key from owner of the CA certificate
a s j a va
s e c u r i t y c e r t i f i c a t e
HTTPS Server
TCP/IP Connection
Module
test whether | create certificate chain and check these | |
certificates |
|
|
are identical | Server | CA root |
| ||
| Certificate | Certificate |
Figure 42: Mode 2 - Java Security activated
(server certificate and self signed root certificate in module form a chain)
TC65 JAVA User's Guide_V05 | Page 71 of 90 | 26.09.2005 |
