authenticate--To
prove the identity of an entity using the certificate of an identity and a secret that the identity poses (usually the private
key corresponding to the public key in the certificate).
CA
--Certificate Authority. A CA is an entity that issues digital certificates (especially X.509 certificates) and vouches for
the binding between the data items in a certificate.
CA
authentication
--The user manually approves a certificate from a root CA. Usually a fingerprint of the certificate is presented to the user,
and the user is asked to accept the certificate based on the fingerprint. The certificate of a root CA is signed by itself
(self-signed) so that it cannot be automatically authenticated using the normal certificate verification process.
CRL
--certificate revocation list. A CRL is a data structure that enumerates digital certificates that have been invalidated by
their issuer prior to when they were scheduled to expire.
enrollment
--A router receives its certificate through the enrollment process. The router generates a request for a certificate in a
specific format (known as PKCS #10). The request is transmitted to a CA, which grants the request and generates a certificate
encoded in the same format as the request. The router receives the granted certificate and stores it in an internal database
for use during normal operations.
certificate--A
data
structure
defined
in
International
Organization
for
Standardization
(ISO)
standard
X.509
to
associate
an
entity
(machine
or
human)
with
the
public
key
of
that
entity.
The
certificate
contains
specific
fields,
including
the
name
of
the
entity.
The
certificate
is
normally
issued
by
a
CA
on
behalf
of
the
entity.
In
this
case
the
router
acts
as
its
own
CA.
Common
fields
within
a
certificate
include
the
distinguished
name
(DN)
of
the
entity,
the
DN
of
the
authority
issuing
the
certificate,
and
the
public
key
of
the
entity.
LDAP
--Lightweight Directory Access Protocol. A LDAP is a protocol that provides access for management and browser applications
that provide read-and-write interactive access to the X.500 directory.
Feedback