How One Way and Two Way SSL Work| Mutual SSL Explained

Detailed description of 1-Way and 2-Way SSL and how SSL/TLS handshake works.
For more detailed overview of One Way and Two Way SSL: visit tutorialspedia....
To learn how to generate self-signed certificate visit: tutorialspedia....

[@wiesskonstantin]

What is missing here is: What is the role of the private keys on server and client side. From your explanation it is not clear why private keys are needed at all

[@preetshah8945]

Hello,
Can anyone show the source code of the above explained handshake? Where it is located on the client's end that performs all these ops?

[@navinstylesnavinstyles2967]

it very clear to understand myself , thanks

[@go_better]

Thanks! Very informative tutorial.

[@TutorialsPediaVideos]

Glad that it helped.

[@Phanindra421]

can you please share an example, if 2 way ssl need to be established what are the steps to follow to do so, using openssl...

[@TutorialsPediaVideos]

Dear Sai,
In case of two way SSL, both client & server will have to share public certificate with each other and both will maintain their keystores and truststores on respective sides.

[@Phanindra421]

@@TutorialsPediaVideos yes we did but unfortunately we r missing the client certificate when making a httpWebRequest using c#code we were given with api url, key and we r passing the certificate...

[@diegoramos27]

@@Phanindra421 did you find any tutorial for 2 way ssl?

[@StayForAWhile]

@@Phanindra421 I have the same requirement, how did configure this ? Can you please help me?

[@Phanindra421]

@@StayForAWhile this process is involved
1. first service owners will create their message and then
2. we as a receiver we need to encrypt and share the message with openSSL then
3. the same message will be used to create certificate by the service owners.
and share to the receiver....
thus the process works.
all the best .

[@NivedanNadaraj]

Good one thank you. Does the server use trust store or Identity key store to present its certificate? Guessing it’s identity keystore?

[@Theashutoshv89]

can situation be like where Root CA and server certifcate no intermediate certificate will the connection and communication happen

[@Nikhil-fm4ii]

I am just curious to know if we are supposed to close the connection once the data exchange post step 11 is finished.

[@ade1963]

step seven - should be "encrypting" it with server's public key - not "signing"

[@AvocadoGCC]

exactly what I want to point out.

[@gsd888]

@tutorials Pedia - what is the difference between mutual SSL and mutual TLS? which one is more robust for API integration?

[@TutorialsPediaVideos]

TLS is a successor to SSL and is more secure. You can read more in my article below:
tutorialspedia.com/ssl-vs-tls-what-is-the-difference-between-ssl-and-tls/

[@MukeshKumar-px4tl]

Thank you !
i want to secure udp socket connection between a client and server . how do i can do that . your help will be appreciated .

[@ciccccio1]

So if tibco works in this way and I use a leaf certificate signed with a CA that is about to expire, do I have to trust my leaf again with a new CA or can I replace the root CA?

[@junaid_qadir]

Assalam o Alaikom, bro would you give us a practical demo on this lecture?

[@damanimilind8203]

Hello in 2 way SSL you have shown client and server example , but it should be server on both sides , because you just explained that 2 ways SSL happens between server to server .

[@TutorialsPediaVideos]

Yes It is for B2B but when two servers communicate, they act as client role and server role on either side depending on request flows. So technically, they have both roles.

[@bennettmagy8215]

In this protocol what proof does the server have that the client possesses the private key associated with the certificate they presented?
The client encrypts the pre master secret with the server public key, so this only works if server actually possesses the private key but the described protocol doesn't seem to make use of the client private key at all

[@jv-mz7yr]

the client generates the pre master secret and needs to send it securely to the server so both sides can generate a shared secret symmetric key. The Client proves it's identity with the help of a trusted signed cert it presents the server.

[@sriramkannan317]

Nice

[@cashcow3996]

awesome

[@HighlifeC]

Thanks... It helped.

[@TutorialsPediaVideos]

You are welcome.

[@riderblack6401]

Thank you!!!

[@danielciprus]

Man, I usually skip on indian videos but thank you for nice and simple explanation about mTLS. I really enjoyed it and took few notes !

[@TutorialsPediaVideos]

Thanks Dan for your blunt yet honest feedback. By the way I am Pakistani not Indian :)

[@danielciprus]

@@TutorialsPediaVideos hehe, yeah .. this is why people do not like me: my running mouth :-). Regardless man, really nice and educating video. Good work !

[@Larryjazzy271]

Best video on TLS and mTLS hands down

[@Larryjazzy271]

Please can you give a typical example of what a service to service or B2B Application is? I suppose that's where mTLS can be used in practice.

[@TutorialsPediaVideos]

An example is the integration with some enterprises application like CRM system, billing system etc.

[@Larryjazzy271]

@@TutorialsPediaVideos For example would a billing application talking to a procurement application be referred to as service to service communication?

[@TutorialsPediaVideos]

Yes.

[@abhishekbahuguna7858]

I dont think it is correct to say in one-way authentication only client authenticates ..It entirely depends how configuration has been in for TLS. If we have enabled , authentication of peer will happen, else not. So it doesn't matter if I am a Client or a Server , it is about the local settings