Sujet : Re: Chromium and self-signed certificates
De : ldo (at) *nospam* nz.invalid (Lawrence D'Oliveiro)
Groupes : comp.sys.raspberry-piDate : 02. Sep 2024, 04:44:44
Autres entêtes
Organisation : A noiseless patient Spider
Message-ID : <vb3cbc$1r1t9$8@dont-email.me>
References : 1 2 3 4 5 6 7 8 9 10
User-Agent : Pan/0.160 (Toresk; )
On Sun, 1 Sep 2024 22:49:42 -0000 (UTC), bp wrote:
Are the certificates and keys the same between SSH and TLS?
The basic encryption algorithms may be the same, but the usage is a little
different. SSH has no concept of “certificates”, only of “host keys”
versus “user keys”. Each key is of course actually a key pair, consisting
of a public key (freely redistributable, but recipients need to be sure
they get them from a trusted source) and a corresponding private key
(never to be disclosed to anybody else).
There is a file in your SSH client config called “known_hosts”, which
contains the public host keys of all the hosts you’ve previously connected
to; this is used to guard against somebody trying to impersonate any of
those hosts when you next try to connect.