topic SSL server certificate Query in Application Development and Automation Discussions

SSL server certificate Query

former_member209288 — Thu, 20 Jun 2013 08:13:49 GMT

Hello Experts

Need to know the whether SSL client certificate is based on
SSL server certificate.

Below is a scenario for this.

We have a SSL server certificate from a well-known CA
authority.
Need to create SSL client certificate for the ADS
configuration.
Now in order to be secured enough, need to know that this
certificate will be based on the SSL server certificate which we have acquired
from the trusted CA?
If not then what should be done in order to get a trusted
SSL Client Certificate or the systems (ABAP) own certificate is enough for this
task?

Regards

Prateek

Re: SSL server certificate Query

Former Member — Thu, 20 Jun 2013 10:15:33 GMT

Hi Prateek,

SSL server certificates are usually not the basis for client certificates. Instead you usually have two CAs, a well know CA (often a public CA) for server certificates and an often private CA for client certificates. you can find some info on client certificates on the CAcert wiki pages and more information on X.509 and public key certificates on the english wiki.

Regards,

Patrick

Re: SSL server certificate Query

former_member299422 — Fri, 21 Jun 2013 05:51:05 GMT

thanks patrick that helped. Need some more info.

What if the SSL client certificate is self signed (system's). Will it suffice the purpose of ADS trusted relationship with Java server? Won't there be any security breach?

Regards,

Mayank

Re: SSL server certificate Query

Former Member — Fri, 21 Jun 2013 10:58:05 GMT

Hi Mayank,

a self signed certificate is not automatically insecure. You have the signing process in place, that you can get some idea, whether the claims of certificate are valid. If you created the certificate and later on maintain it in the ADS, there is no need for such 3rd party assurance, as I guess you will know the best, where the certificate belongs to.

As I'm not an expert in ADS and you did not mention, for which purpose you need the certificate. If it is for LDAPS based communication, this tutorial on the internet mayhelp. If not, please provide a bit more info on your use case.

Regards,

Patrick

Re: SSL server certificate Query

former_member299422 — Fri, 21 Jun 2013 11:33:23 GMT

Thanks patrick for helping out here.

Here is our scenario...we have ADS in place (ABAP and JAVA are two independent systems in same domain).

Now the use of ADS here is that it will be used to send the forms (tax) to the end users (ADS_HTTPS connection)

Hence here we use the ABAP SSL client certificate. Please suggest.

Regards,

Mayank

Re: SSL server certificate Query

Former Member — Fri, 21 Jun 2013 13:01:08 GMT

Hi Mayank,

the first question in this case would be, what is the ADS you are referring to.

ADS = Active Directory Services (MS)

ADS = Adobe Document Server

From your last comment I would now assume, you are talking about the document server, right?

If yes, did you check the docs?

If you want to use self signed certificates for authentication, you will need to upload the certificate also into the list of trusted CAs, otherwise you might get a chain-verifier error.

Regards,

Patrick

Re: SSL server certificate Query

former_member299422 — Fri, 21 Jun 2013 13:05:48 GMT

Hi Patrick,

yes i meant Adobe Document Service.

Secondly, i have created a SOAP client certificate in STRUST and have imported the JAVA SSL certificate there. My config has worked well in QA. Now in order to be secured, i raised the above query.

Regards,

Mayank