Tag Info

New answers tagged


If you're just looking for confirmation that the context has logical values being set, then I could say it does. Can't say I know anything about doing this in python though.


The certificate is not encrypted. It contains signatures (basically hashes) that are encrypted with the private key. The public key can decrypt that and the hash can be verified. In SSL/TLS there is a signature that the client supplies via private key to prove they are the owner, and the CA has signed it the cert with their private key, which can be ...


Depending on resources available on nodes and whether you are going to implement anything yourself, racoon and ipsec could be a solution. It supports nodes with x.509 certificates issued by a local CA. Please note this question is not simple at all.


Key exchange is notoriously hard to get right, and I strongly recommend not to do your own (unless your security requirements are really minimal). For example, what you propose does not provide forward security, which is generally considered of great importance in key exchange protocols. The good news is that there is a paper doing exactly what you need; ...

Top 50 recent answers are included