x509certificate - How can I make sure that the remote certificate (public key) is issued/signed by my root ca? -
in server side, have self-signed ca (certificate , private key). use them issue device certificate, , want make sure if remote cert not signed ca, there exception.
i'm referring links below, seems don't work me, please help:
c# how can validate root-ca-cert certificate (x509) chain?
verify remote server x509certificate using ca certificate file
when receive device certificate, validate signature using ca certificate. that's need (yet need remember when ca certificate expires , reissue it, have either replace device certificates or validate device certificate several cas ensure allow device certificate signed previous ca certificate.
Comments
Post a Comment