Certificates required by the client to connect to the CSSMTP server via -AT-TLS

Products

• Top Secret

Issue/Introduction

What certificates are required on the CSSMTP's server keyring for AT-TLS?

Environment

Release : 16.0

Component :

Resolution

 
It depends. on the following:
 
1. Will there be client authentication to CSSMTP?
 
2. Will there be server authentication to CSSMTP?
 
3. Or both?
 
If using client authentication, the client application will need a client certificate on its keyring and the CSSMTP server's keyring will need the client and root certificate.
 
If using server authentication, the client application will need the root certificates on its keyring and the CSSMTP server's keyring will need just the root.  
 
If the CSSMTP server will be doing both, then both the client certificates and root certificates will be needed on the client application's keyring and the CSSMTP server's keyring.