SSL Presentation
Practical SSL With Apache and PHP
Part I: The Players
Basics: Hashing
Basics: Symmetric Encryption
Basics: Asymmetric Encryption
Certificates
Certificate Authorities
Transport Layer Security
TLS: What It Does
TLS: The Handshake Protocol
TLS: Server Handshake Response
TLS: Server Certificate
TLS: Server Certificate Verification
TLS: Root Certificates
TLS: Failed Verification
TLS: Client Handshake Response
TLS: Handshake Wrapup
TLS: Record Protocol
TLS: Record Protocol (cont'd)
Apache's mod_ssl
OpenSSL
PHP's OpenSSL Support
The Big Picture
Part II: SSL-enabled Webservers
HTTPS Requirements
Using PHP to simplify PKI
A Local Certificate Authority
A New Server Certificate
Global SSL Directives
A Passphrase Dialog
Apache Per-host SSL Directives
Cipher Suite
Cross Your Fingers
Revoking A Server Certificate
Part III: Application Level SSL
Example: Stored Secrets
Class openSSL
Signing
Encrypting
Decrypting
Verifying
Checking The Key Passphrase
Parsing X.509 Data
Discussion
Thank You!
Resources
Download