Table of Contents
Advertisement
Figure 6-5
RADVISION | Deployment Guide for SCOPIA TIP Gateway Version 8.0
–
An intermediate certificate vouching for the trustworthiness of CA3, signed by trusted
CA1. This is used to trust SCOPIA Management's identity certificate, which is signed by
CA3.
–
A root certificate from CA1 verifying CA1's identity, self-signed by trusted CA1. This is
used by the gateway to verify the intermediate certificate, which is signed by CA1.
•
Mutually unknown CAs
In the final scenario, both components use certificates signed by CA's which are not
recognized by each other. In this case, there needs to be two intermediate certificates,
one for each of the untrusted CAs, to vouch for their authenticity.
For example, in
Figure 6-5 on page
by CA4, an unknown CA, while SCOPIA Management's certificate is signed by CA3, also
untrusted. This would require five certificates to be uploaded to SCOPIA Management and
three for the gateway
Signature of Both Certificates are from Untrusted CAs
When CA3 is untrusted by the gateway and CA4 is untrusted by SCOPIA
6-4 on page
48), the certificates to upload to the SCOPIA Management are:
–
A certificate identifying SCOPIA Management, signed by CA3, a CA unknown to the
gateway. This is sent to the gateway as part of the TLS negotiation.
–
An intermediate certificate vouching for the trustworthiness of CA3, signed by trusted
CA1. This is used to trust SCOPIA Management's identity certificate, which is signed by
CA3.
–
A root certificate from CA1 verifying CA1's identity, self-signed by trusted CA1. This is
used by SCOPIA Management to authenticate CA3's intermediate certificate, which
was signed by CA1.
–
A root certificate from CA2 verifying CA2's identity, self-signed by trusted CA2. This is
used by SCOPIA Management to authenticate CA4's intermediate certificate, which is
signed by CA2.
–
An intermediate certificate vouching for the trustworthiness of CA4, signed by trusted
CA2. This is used to trust the gateway's identity certificate, which is signed by CA4.
49, the certificate identifying the gateway is signed
(Figure 6-5 on page
49).
Management(Figure
Securing Your Video Network Using TLS | 49
Advertisement
Table of Contents
