By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

Proof of ownership of private key by client

0

AWS screenshot In the screenshot above of the AWS website, it says that "Server challenges the client for proof of ownership of the private key that corresponds to the public key contained in the certificate."

Can anyone explain how the public key present in the device certificate (along with the already present device certificate which is signed by private key) acts as the proof of ownership of the private key by the client.

Topics
Internet of Things (IoT)Security, Identity, & Compliance
Tags
AWS IoT CoreAWS Certificate ManagerTransport Layer Security (TLS)
Language
English
Shubham
asked 4 months ago323 views
1 Answer
2

Hi. This is an aspect of mutual TLS rather than anything specific to AWS IoT Core. Please refer to this high level description of the sequence: https://en.wikipedia.org/wiki/Transport_Layer_Security#Client-authenticated_TLS_handshake

In particular:

The client sends a CertificateVerify message, which is a signature over the previous handshake messages using the client's certificate's private key. This signature can be verified by using the client's certificate's public key. This lets the server know that the client has access to the private key of the certificate and thus owns the certificate.

profile pictureAWS
EXPERT
Greg_B
answered 4 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content