Raritan PX3TS, Руководство пользователя

Страница: 808 / 842

Appendix I: Additional PX3TS Information
784
TLS Certificate Chain
A TLS server sends out a certificate to any client attempting to connect to
it. The receiver determines whether a TLS server can be trusted by
verifying that server's certificate, using the certificate (chain) stored on
the receiver.
Therefore, to successfully connect to a TLS server, you must upload a
valid certificate or (partial) certificate chain to the receiver.
The uploaded certificate (chain) must contain all missing certificates
"related to" that TLS server's certificate in some way. Otherwise, the
connection made to that TLS server will fail.

For information on how the uploaded certificate (chain) is related to
a TLS server's certificate, see
What is a Certificate Chain (on page
783).

For an example of creating and uploading a TLS certificate to PX3TS,
see
Illustration - GMAIL SMTP Certificate Chain
(on page 787).
What is a Certificate Chain
If you are familiar with a certificate chain, you can ignore this topic
and refer to
Illustration - GMAIL SMTP Certificate Chain (on page
787).
A certificate or a chain of certificates is used for trusting a TLS server
that you want to connect.
The receiver, such as PX3TS, can trust a TLS server only after an
appropriate certificate (chain) which is "related to" that TLS server's
certificate is uploaded to the receiver.
How a certificate chain is generated:
To explain how a TLS server's certificate is "related to" the certificate
(chain) that is uploaded to the receiver, we assume that there are three
"related" certificates.

Certificate C. The certificate issued to the TLS server you want to
connect.
'Certificate C' is issued by the certificate authority (CA) entity called
'Issuer B'.

Certificate B. The certificate issued to 'Issuer B'.
'Certificate B' is issued by a CA entity called 'Issuer A', and it is an
intermediate certificate.