ssl - 请求的完整性/X509 备用名称/扩展信息

Question

我假设存在针对请求或 X509 证书中的主题和扩展信息的修改保护措施是否正确？

这个签名只是嵌入在 ASN.1 编码中的另一个元素？

Answer 1

阐述@Eugene 的评论:

RFC 5280 Internet X.509 公钥基础结构证书和证书吊销列表 (CRL) 配置文件将证书指定为:

Certificate  ::=  SEQUENCE  {
    tbsCertificate       TBSCertificate,
    signatureAlgorithm   AlgorithmIdentifier,
    signatureValue       BIT STRING  }

TBSCertificate  ::=  SEQUENCE  {
    version         [0]  EXPLICIT Version DEFAULT v1,
    serialNumber         CertificateSerialNumber,
    signature            AlgorithmIdentifier,
    issuer               Name,
    validity             Validity,
    subject              Name,
    subjectPublicKeyInfo SubjectPublicKeyInfo,
    issuerUniqueID  [1]  IMPLICIT UniqueIdentifier OPTIONAL,
                         -- If present, version MUST be v2 or v3
    subjectUniqueID [2]  IMPLICIT UniqueIdentifier OPTIONAL,
                         -- If present, version MUST be v2 or v3
    extensions      [3]  EXPLICIT Extensions OPTIONAL
                         -- If present, version MUST be v3
    }

Am I correct in assuming that there's protection against the modification of both the subject and the extension information in a request or X509 certificate?

我不确定您的确切意思是哪种请求，但在 X509 证书中 subject 和 extensions 都是 tbsCertificate 的一部分> 由 signatureValue 签名，这确实是一种防止修改的保护措施。