up vote 0 down vote favorite
share [g+] share [fb]

Scenario :

2 Certification Authorities used for Openvpn - one CA for client certs and another CA for server certs.

Question :

Say the CA handing out client certificates is compromised - assuming a mitm captures the traffic can the clients information be decrypted considering the CA giving out server certs (along with the server crt/key) is still confidential?

link|improve this question
70% accept rate
feedback

1 Answer

up vote 0 down vote accepted

No - they would need the server key.

link|improve this answer
So the user cert/key provides authentication only and the server key/cert provides confidentiality? – Hilt86 Oct 7 '10 at 2:56
Correct........ – c10k Consulting Oct 7 '10 at 2:57
Thanks for your answer :) – Hilt86 Oct 21 '10 at 12:39
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.