Try OpenEdge Now
skip to main content
Core Business Services - Security and Auditing
Security : Secure Sockets Layer (SSL) : SSL session components : Keys and certificates
 
Keys and certificates
The cryptographic keys and digital certificates that are used during an SSL session are:
*Asymmetric keys — The private (server) and public (client) keys used to allow an SSL client to authenticate the identity of an SSL server.
*Digital (public-key) certificates and store — Electronic documents used to store and access public keys and information for SSL client and server authentication. For more information, see Digital certificates and certificate store.
*"Master secret" — A secret session symmetric key shared between the SSL client and server that is exchanged using asymmetric cryptography and is used to generate the session-specific data encryption keys.
*Symmetric keys — Generated by the "master secret" and used for symmetric encryption and decryption of data exchanged between the client and server. These keys are unique for the current connection between an SSL client and server.
*"MAC secrets" — Generated by the "master secret," these are secret symmetric keys used for Message Authentication Code (MAC) operations on the client and server. The MAC provides the data integrity between the SSL client and server. These keys are unique for the current connection between an SSL client and server.
*Other values — Miscellaneous generated values to aid session cryptography and message transport.