Extended ssl overview

SSL Enhancements Overview

This section indexes an overview to the SSL enhancements to be implemented in future 1.2.# stomp gem versions. These enhancements are in progress or have already been completed on the current master branch.

We assume here that the reader has sufficient knowledge of concepts like:

• Public Key Infrastructure (PKI) operation
• private keys
• public keys
• certificates
• Certificate Authorities (CAs)
• SSL handshake
• Certificate Signing Requests (CSRs)

If that is not the case, a suggested starting point is: Wikipedia TLS Article.

Additional technical information about SSL handshakes, and the various options available to SSL servers and clients should also be reviewed, and is available at Verify Modes.

Enhancement Goals

The goals of these enhancements are:

• retain compatibility with all current client code bases
• provide the capability for clients to exploit the entire functionality exposed by SSL

Overview Information

Review the following pages to fully understand the scope of the enhancements to this gem.

• SSL Use Cases
• 1.1.# and 1.2.0 SSL Capability
• 1.2.1+ SSL Capability

Creating Keys and Certificates for Testing

Review the following page for an example of setting up a test environment:

• SSL Test Environment