ssl - SSL 和证书如何在服务器和浏览器之间工作

Question

我不太了解 SSL 和证书如何在服务器和浏览器之间工作。所以我从这个网站上得到了一些关于这个的文章 http://www.tldp.org/HOWTO/SSL-Certificates-HOWTO/x64.html 他们说的我不是很清楚

他们说

1) A browser requests a secure page (usually https://).

2) The web server sends its public key with its certificate.

3) The browser checks that the certificate was issued by a trusted party 
   (usually a trusted root CA), that the certificate is still valid and that the 
   certificate is related to the site contacted.

4) The browser then uses the public key, to encrypt a random symmetric 
   encryption key and sends it to the server with the encrypted URL required 
   as well as other encrypted http data.

5) The web server decrypts the symmetric encryption key using 
   its private key and uses the symmetric key to decrypt the URL and http data.

6) The web server sends back the requested html document and 
   http data encrypted with the symmetric key.

7) The browser decrypts the http data and html document using 
   the symmetric key and displays the information.

见第2点

浏览器请求一个安全页面，而 Web 服务器只是将没有页面或数据的带有证书的公钥发送给浏览器？

如果可能，请讨论有关浏览器请求任何 https 页面时发生的情况。谢谢

Answer 1

1) A browser requests a secure page (usually https://).

没有。浏览器协商一个 TLS 连接，其中发生了第 2 步和第 3 步以及其他一些步骤。 然后浏览器请求安全页面并发生第 6 步。

2) The web server sends its public key with its certificate.

3) The browser checks that the certificate was issued by a trusted party (usually a trusted root CA), that the certificate is still valid and that the certificate is related to the site contacted.

到此为止。

4) The browser then uses the public key, to encrypt a random symmetric encryption key and sends it to the server with the encrypted URL required as well as other encrypted http data.

5) The web server decrypts the symmetric encryption key using its private key

4和5是彻头彻尾的幻想，不过是常见的错觉。真正发生的是一个 key 协商算法，其精确性质取决于密码套件，但从不涉及传输 session key 。

and uses the symmetric key to decrypt the URL and http data.

6) The web server sends back the requested html document and http data encrypted with the symmetric key.

7) The browser decrypts the http data and html document using the symmetric key and displays the information.

正确。