** SSL Certificate & Digital Certificates

[jegathees_waran]

Hi Friends,

How do we distinguish SSL certificate and Digital Certificate? I understand (reading helps) both serves the same purpose , then what is the importances of those ?

Kindly reply.

Kind Regards,

Jeg P.

[Former Member · Accepted solution]

Hi,

http://help.sap.com/saphelp_nw04/helpdata/en/62/881e3e3986f701e10000000a114084/frameset.htm

Thanks,

Madhu

[jegathees_waran]

Hi Prateek,

I agreed your point. Given below are my understandings

SSL certificate is used for mainly authentication purpose. We need to import this certificate in J2EE engine. If the host runs on both ABAP and JAVA stack, we need to configure certificate in both the stack.Like digital certificates it is need not required to mention public key and private key of SSL in sender/receiver agreement.

Are the above points are correct ...?

Kindly reply.

[prateek]

If the host runs on both ABAP and JAVA stack, we need to configure certificate in both the stack

It depends upon ur requirement. If u want that the adapers of both Java and Abap engine communicate using SSL, only then it has to be configured on both stack.

it is need not required to mention public key and private key of SSL in sender/receiver agreement.

Not exactly. The details have to be provide in the agreement or communication channel as per their config requirements. e.g in case of some external adapters like seeburger, some config in agreements are required.

Regards,

Prateek

[jegathees_waran]

Hi friends,

Thanks for your reply. But, still I am not clear the following points.

1. SSL Certificate has public key and private key and Digitial Certificate also public key and private key.Both purposes are secure data transmission. Where do we distinguish this exactly ?

2. For Digital Signature, we specifiy Private Key and Certificate in Sender Agreement/Receiver Agreement. Likewise, where do we specifiy SSL certificate keys ?

Kindly clarify, friends.

Kind Regards,

Jeg P.

[prateek]

As I said earlier, there is no difference between both the type of certificates. The difference is only the terminology in various scenarios. The SSL certificates in turn are the digital certificates.

Regards,

Prateek

[Former Member]

HI

A digital certificate is an electronic "credit card" that establishes your credentials when doing business or other transactions on the Web. It is issued by a certification authority (CA). It contains your name, a serial number, expiration dates, a copy of the certificate holder's public key (used for encrypting messages and digital signatures), and the digital signature of the certificate-issuing authority so that a recipient can verify that the certificate is real. Some digital certificates conform to a standard, X.509. Digital certificates can be kept in registries so that authenticating users can look up other users' public keys.

Certificates are issued by Certifying Authority(CA) for people or an organization. This is used to identify unique person or unique organization.

Secure Sockets Layer (SSL), are cryptographic protocols that provide secure communications on the Internet for such things as web browsing, e-mail, Internet faxing, instant messaging and other data transfers.

Also look at these links

http://www.abanet.org/scitech/ec/isc/dsg-tutorial.html

http://mindprod.com/jgloss/certificate.html

Please go through these links and i am sure they will help you in some ways.

http://help.sap.com/saphelp_nw04/helpdata/en/a8/882a40ce93185de10000000a1550b0/content.htm

https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/db3d8798-0701-0010-9781-8a6...

https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/092dddc6-0701-0010-268e-fd6...

https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/b2a56861-0601-0010-bba1-e37...

http://help.sap.com/saphelp_nw04/helpdata/en/62/881e3e3986f701e10000000a114084/frameset.htm

cheers

[Former Member]

Hi,

SSL

Secure Sockets Layer (SSL), are cryptographic protocols that provide secure communications on the Internet for such things as web browsing, e-mail, Internet faxing, instant messaging and other data transfers. There are slight differences between SSL and TLS, but they are essentially the same.

Digital Certificate

In cryptography, a public key certificate (or identity certificate) is an electronic document which incorporates a digital signature to bind together a public key with an identity u2014 information such as the name of a person or an organization, their address, and so forth. The certificate can be used to verify that a public key belongs to an individual.

In a typical public key infrastructure (PKI) scheme, the signature will be of a certificate authority (CA). In a web of trust scheme, the signature is of either the user (a self-signed certificate) or other users ("endorsements"). In either case, the signatures on a certificate are attestations by the certificate signer that the identity information and the public key belong together.

[prateek]

Digital certificate is a broader term used for authentication purpose and issued by many Certification Authorities (CA)

When u use these certificate in ur SSL setup, e.g. transmission of financial data on SSL layer, then the same digital certificate can also be called as an SSL certificate. So there doesn;t exist any major difference between the two

Regards,

Prateek