Share your experience in implementing custom SSL certificates for authorization on the site?

PS In addition to WebMoney, someone did it at all?

  • As far as I imagine SSL they are not for authorization on the site. SSL is a cryptographic protocol between the client and the server, the base for this protocol is the certificate. Based on this certificate, the data is encrypted, so it has nothing to do with the site directly. Or something I do not understand? - Dex
  • WebMoney in the Light interface uses the user's certificate as far as I know. - vit1251
  • Yes, you are well known. It is quite convenient. Unfortunately, I have no experience in implementing such a thing, but I know that this method of authorization is quite standard and you can read the literature on the subject related to the technologies you use. Typically, authorization using certificates is supported at the web server level. - cy6erGn0m
  • What interests me in this case, but how are personal certificates distributed? - Dex
  • Well, certificates, as already indicated in the answer - they are not ssl, but x.509. Verify the authenticity of the server (if necessary by the client) by verifying those who signed the certificate (chain of signatories). There are a number of organizations / sites that (for money) can sign it to you and you can provide your certificate (usually your site to customers) for verification. - alexlz

1 answer 1

If on php, then there is a function

openssl_x509_parse()

The certificate itself is somewhere in $ _SERVER