SSLTRUST (JANUS DEFINE parameter) - Revision history

JAL: remove displaytitle

2016-06-08T00:01:27Z

remove displaytitle

← Older revision		Revision as of 00:01, 8 June 2016
Line 1:		Line 1:
	~~{{DISPLAYTITLE:SSLTRUST}}~~
	<span class="pageSubtitle">SSLTRUST — Trust communication partner certificate</span>		<span class="pageSubtitle">SSLTRUST — Trust communication partner certificate</span>

JAL: misc cleanup

2016-05-17T19:55:38Z

misc cleanup

← Older revision		Revision as of 19:55, 17 May 2016
Line 3:		Line 3:

	==Description==		==Description==
	<var>SSLTRUST</var> is a parameter on the <var>[[JANUS DEFINE]]</var> command~~, which~~ indicates that a certificate from the other side of a TLS/SSL connection is not required to be signed by a certifying authority that has been added to the port by a [[JANUS ADDCA]] command. This parameter is available in Model 204 7.7 and later.		<var>SSLTRUST</var> is a parameter on the <var>[[JANUS DEFINE]]</var> command. It indicates that a certificate from the other side of a TLS/SSL connection is not required to be signed by a certifying authority that has been added to the port by a <var>[[JANUS ADDCA]]</var> command. This parameter is available in Model 204 7.7 and later.

	Note ~~that it~~ is a bad idea to use this parameter in production systems or systems where security is important as it defeats one of the protections of TLS/SSL &~~ndash~~; the validation of the other side of a connection. It is probably an especially bad idea for server ports as it completely defeats the utility of client certificates for user validation &~~ndash~~; anyone can produce a certificate with any content if the certificate is not required to be signed by a known certifying authority.		<p class="note"><b>Note:</b> It is a bad idea to use this parameter in production systems or systems where security is important: it defeats one of the protections of TLS/SSL — the validation of the other side of a connection. It is probably an especially bad idea for server ports, as it completely defeats the utility of client certificates for user validation — anyone can produce a certificate with any content if the certificate is not required to be signed by a known certifying authority. </p>

	The main purpose of <var>SSLTRUST</var> is ~~simply~~ experimentation. It might also be useful for problem diagnosis or perhaps bootstrapping a connection to a known server/client.		The main purpose of <var>SSLTRUST</var> is experimentation. It might also be useful for problem diagnosis or perhaps bootstrapping a connection to a known server/client.

			[[Category:JANUS DEFINE parameters]]

Alex: Created page with "{{DISPLAYTITLE:SSLTRUST}} SSLTRUST — Trust communication partner certificate ==Description== `SSLTRUST` is a parameter on the..."

2016-05-17T15:04:47Z

Created page with "{{DISPLAYTITLE:SSLTRUST}} <span class="pageSubtitle">SSLTRUST — Trust communication partner certificate</span> ==Description== <var>SSLTRUST</var> is a parameter on the..."

New page

{{DISPLAYTITLE:SSLTRUST}}
<span class="pageSubtitle">SSLTRUST — Trust communication partner certificate</span>

==Description==
<var>SSLTRUST</var> is a parameter on the <var>[[JANUS DEFINE]]</var> command, which indicates that a certificate from the other side of a TLS/SSL connection is not required to be signed by a certifying authority that has been added to the port by a [[JANUS ADDCA]] command. This parameter is available in Model 204 7.7 and later.

Note that it is a bad idea to use this parameter in production systems or systems where security is important as it defeats one of the protections of TLS/SSL – the validation of the other side of a connection. It is probably an especially bad idea for server ports as it completely defeats the utility of client certificates for user validation – anyone can produce a certificate with any content if the certificate is not required to be signed by a known certifying authority.

The main purpose of <var>SSLTRUST</var> is simply experimentation. It might also be useful for problem diagnosis or perhaps bootstrapping a connection to a known server/client.

SSLTRUST (JANUS DEFINE parameter) - Revision history

JAL: remove displaytitle

JAL: misc cleanup

Alex: Created page with "{{DISPLAYTITLE:SSLTRUST}} SSLTRUST — Trust communication partner certificate ==Description== SSLTRUST is a parameter on the..."

Alex: Created page with "{{DISPLAYTITLE:SSLTRUST}} SSLTRUST — Trust communication partner certificate ==Description== `SSLTRUST` is a parameter on the..."