《信息安全导论》课件第12章 (2).pptVIP

传输层安全TLSThesamerecordformatastheSSLrecordformat.DefinedinRFC2246.SimilartoSSLv3.Differencesinthe:versionnumbermessageauthenticationcodepseudorandomfunctionalertcodesciphersuitesclientcertificatetypescertificate_verifyandfinishedmessagecryptographiccomputationspaddingTLS的伪随机函数SSL/TLSEnhancedTCP-basedApplicationProtocolsServiceName Port SecuredServicehttps 443/tcp httpprotocoloverTLS/SSLsmtps 465/tcp smtpprotocoloverTLS/SSLnntps 563/tcp nntpprotocoloverTLS/SSLsshell 614/tcp SSLshellldaps 636/tcpldapprotocoloverTLS/SSLftps-data 989/tcp ftpprotocol,data,overTLS/SSLftps 990/tcp ftp,control,overTLS/SSLtelnets 992/tcp telnetprotocoloverTLS/SSLimaps 993/tcp imap4protocoloverTLS/SSLircs 994/tcp ircprotocoloverTLS/SSLpop3s 995/tcp pop3protocoloverTLS/SSL思考题1.在应用层实现安全服务与在网络层实现安全服务有何不同?2.IPSEC是由哪两大部分构成的?有哪两种工作模式?3.什么是SA?4.实现VPN的安全协议有哪些?5.IPSec和TLS在安全服务方面有什么不同？**AsterixObelixconnobelixconnasterix

leftid=@ leftid=@

leftcert=asterix.pem leftcert=obelix.pem

left=………………. left=……………….

leftsubnet=………. leftsubnet=……….

rightid=@ rightid=@

rightrsasigkey=%cert rightrsasigkey=%cert

right=…………….. right=……………..

rightsubnet=…….. rightsubnet=……..

auto=start auto=startIdefixconnroadwarrriorconnasterix

leftid=@ leftid=@

leftcert=asterix.pem leftcert=idefix.pem

left=