Looking inside an SSL Certificate with OpenSSL

[@PracticalNetworking]

*Full Course & OpenSSL Cheat Sheet available here:* classes.pracnet.net/courses/openssl-training *Practical TLS -- The ultimate SSL Deep Dive course available here:* classes.pracnet.net/courses/practical-tls

[@OmariRose1]

I just purchased your courses because I like to support all the high quality content you are producing. Thank you so much, Ed.

[@PracticalNetworking]

Thank you, Omari. That is very kind of you =).

[@radhakrishna2501]

Thanks a lot Ed !!!! your ssl videos are helping me a lot in my day to day tasks at work. Please make more videos on Network Security I'm a racker too :)

[@PracticalNetworking]

If you use OpenSSL at work, I would strongly encourage you to check out the full course. Or even the Practical TLS course (which includes the OpenSSL course as a bonus). Glad you enjoyed it. Rackspace will probably subsidize the cost of the training =). Cheers, fellow Racker!

[@justin.emmons]

Good stuff

[@PracticalNetworking]

Thank you, Justin!

[@Satyajeevanmarg19]

Very helpful video 👍🏻👍🏻

[@PracticalNetworking]

Thank you, Kuldeep =)

[@jamess1081]

I read "The OpenSSL Management Committee on behalf of the OpenSSL Project is pleased to announce that the OpenSSL 3.0 FIPS Provider has had its FIPS 140-2 validation certificate issued by NIST & CSE." However, the NIST website has "Caveat : No assurance of the minimum strength of generated keys." What does that mean ?

[@allenperera6158]

Hi Ed, sorry to disturb you again. There's an itch i need to scratch for years. Let's say i am downloading at 300Mbps, then I put a 10/100Mbps switch in between. So of course I will only get ~100Mbps downloads. What happens to the ~200Mbps? Does it get discarded or the Switch will tell the router it only needs 100Mbps?

[@PracticalNetworking]

If the Switch is full duplex, it can sustain 100mbps download & 100mbps upload at the same time (200mbps total throughput, but no more than 100 at a time in any given direction). When the link is first connected, Ethernet will negotiate and identify the maximum transfer rate is 100mbps. If the bottleneck was more than one physical hop away, then the excess would be simply be discarded.

[@allenperera6158]

@@PracticalNetworking thanks! Really appreciate it.

[@frempongadarkwa2232]

Great

[@PracticalNetworking]

[@allenperera6158]

Hi Ed, I was wondering if you know whether, in a switch with two inter Vlan subnets; Let’s say a host in subnet A goes crazy and broadcasts a lot of rubbish traffic, will hosts in subnet B receive the broadcasts?

[@PracticalNetworking]

If a Switch is doing "Inter VLAN Routing", then it is acting like a Router, and therefore blocking broadcasts from traveling between VLANs. More details about L3 Switches here: *www.practicalnetworking.net/stand-alone/routing-between-vlans/#l3switch*

[@allenperera6158]

@@PracticalNetworking But if it is blocking broadcasts, then how am I able to ping another host from another VLAN? As I understand it, to ping another host, my PC will first send out a broadcast ARP prior to sending the first ping request

[@PracticalNetworking]

@@allenperera6158 Ahh, but what is the target of the ARP Request =). You'll find your answer in this video: kzbin.info/www/bejne/gHqci6BoqceIpac

[@allenperera6158]

@@PracticalNetworking i think I've understood it. thanks.

[@PracticalNetworking]

@@allenperera6158 You're welcome!