How One Way and Two Way SSL Work| Mutual SSL Explained

Detailed description of 1-Way and 2-Way SSL and how SSL/TLS handshake works.

[NivedanNadaraj]

Good one thank you. Does the server use trust store or Identity key store to present its certificate? Guessing it’s identity keystore?

[preetshah]

Hello,
Can anyone show the source code of the above explained handshake? Where it is located on the client's end that performs all these ops?

[Nikhil-fmii]

I am just curious to know if we are supposed to close the connection once the data exchange post step 11 is finished.

[navinstylesnavinstyles]

it very clear to understand myself, thanks

[Phanindra]

can you please share an example, if 2 way ssl need to be established what are the steps to follow to do so, using openssl...

[wiesskonstantin]

What is missing here is: What is the role of the private keys on server and client side. From your explanation it is not clear why private keys are needed at all

[MukeshKumar-pxtl]

Thank you !
i want to secure udp socket connection between a client and server . how do i can do that . your help will be appreciated .

[junaid_qadir]

Assalam o Alaikom, bro would you give us a practical demo on this lecture?

[gsd]

@tutorials Pedia - what is the difference between mutual SSL and mutual TLS? which one is more robust for API integration?

[danielciprus]

Man, I usually skip on indian videos but thank you for nice and simple explanation about mTLS. I really enjoyed it and took few notes !

[Theashutoshv]

can situation be like where Root CA and server certifcate no intermediate certificate will the connection and communication happen

[ciccccio]

So if tibco works in this way and I use a leaf certificate signed with a CA that is about to expire, do I have to trust my leaf again with a new CA or can I replace the root CA?

[bennettmagy]

In this protocol what proof does the server have that the client possesses the private key associated with the certificate they presented?

The client encrypts the pre master secret with the server public key, so this only works if server actually possesses the private key but the described protocol doesn't seem to make use of the client private key at all

[damanimilind]

Hello in 2 way SSL you have shown client and server example, but it should be server on both sides, because you just explained that 2 ways SSL happens between server to server .

[ade]

step seven - should be "encrypting" it with server's public key - not "signing"

[abhishekbahuguna]

I dont think it is correct to say in one-way authentication only client authenticates ..It entirely depends how configuration has been in for TLS. If we have enabled <authenticate peer certs>, authentication of peer will happen, else not. So it doesn't matter if I am a Client or a Server, it is about the local settings