Dear all,

 

Thank you very much for your time to read this message. Thank you

All, I have qustion about certificate that we build in openser in order the openser support TLS. They are CA root certificate and client/server certificate.

Here is my question:

1. What is certificate file that we have got after running ./gen_rootca.sh belogs to?

   I mean, what is cacert.pem, 01.pem, cakey.pem belongs to? Is it belongs to server? and for what does it use?

2. What is certificate file that we have got after runnign ./gen_usercert.sh belongs to?

   I mean, what is user-cert.pem,user-privkey.pem, user-calist.pem belongs to? Is it belongs to server or client? and what does it use?

3. What is TLS belongs to? It  belongs to TCP protocol or UDP protocol?

 

I do hope anybody can help me and give me an answer. Please..

Thank you.

 

Regards,

 

 

Ferianto