VTCA Architecture

1
VTCA Architecture
Virginia Tech Root CA 4069 bit
Va Tech Class 1 Server CA 4096 bit
Windows 2K3 CA ?
S/MIME CA
User CA 2048 bit
Server Certificates
Personal Certificates
S/MIME Certificates
2048 bit
1024 bit
1024 bit
2
Client SSL Authentication
3
Certificate Verification

• There are number of tests to verify the
  authenticity and validity of a certificate
• Validity period
• CRL checking
• Verify Certificate chain
• Certificate signature
• .

4
Chain Verification
5
Solution

• We used the following in our test
• Redhat Linux 8.0
• Java SDK 1.4.1.5
• Bouncy Castle JCE 1.2.1
• Certificate Chain
• 4096 bit Root CA certificate 4096 bit
  subordinate Server CA certificate 2048 bit
  server certificate.
• Dummy client