Scenario :

2 Certification Authorities used for Openvpn - one CA for client certs and another CA for server certs.

Question :

Say the CA handing out client certificates is compromised - assuming a mitm captures the traffic can the clients information be decrypted considering the CA giving out server certs (along with the server crt/key) is still confidential?


No - they would need the server key.

  • So the user cert/key provides authentication only and the server key/cert provides confidentiality? – Hilton D Oct 7 '10 at 2:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.