 
 
  !"# $
%&'(&')*++,$-.(
$,$/01'023)4+
CÔNG NGHỆ TLS
50)
NỘI DUNG
!67!"7!8
# !" $
9
:;<
(=>?@
ABC?@
DBC7
:EF@GH
1. Giao thức TLS là gì?

@IJ@K@LMMFL#%G>@N:GO@IBPQRFSGO
HT@)MM

T@:HFSUVKDBCW@X:

Chứng thựcYUVZ:[F@::\

Bảo mậtTQU]@Q^::\

Bảo đảm tính toàn vẹn?@TQU]@Q^::\
# !" $
_
!67!"7!8

2. Lịch sử phát triển của TLS
# !" $
8

QU]HW`^IMK@M(GGF@KG!""8

=aG!""bcd[F@e= fF)MMJ)ghNQij@ZGC=\
QOkEFFlZ@@IB\

!6J_!N:>Q>FQU][FLQmh(998b=!G!"""QR:GW
?@W_6

!!J_9NQU][FLQmh(8_8b=8G966b

!9J__Nmh(a98b:=nG966n
!67!"7!8
NỘI DUNG
!67!"7!8
# !" $
a
:;<
(=>?@
ABC?@
DBC7
:EF@GH
3. Các thành phần của TLS:
!67!"7!8
# !" $
b


@ImMB

@I@BK@HM
!67!"7!8
# !" $
o
4. Giao thức TLS Record
5. Giao thức TLS Handshake:
!67!"7!8
# !" $
n

@Q\Ud:U]

@Q\IBC
Giai đoạn
thương
lượng
!67!"7!8
# !" $
"
5.1. Client hello
!67!"7!8
# !" $
!6

Client D GO  p G@  ClientHello QR q= Q
W@S?@@I7GZr]cGO
Gi KstFc GOB@K==WOGGiUd
=jQU]r]

5.2. Server hello
!67!"7!8
# !" $
!!

Serveru:\WvpServerHello, W@uG
W@IcGiKstFcWOGGiUd=
jw:k@QU]clientQU@@
5.3. Certificate
!67!"7!8
# !" $
!9

ServerDp CertificateuG !Fr=I
client

Server D  p ServerKeyExchange H  p
Certificate HTI@BY:EF

ServerLF>FSLIJ(1NwclientQRHsZ
R QU]  @ W I kc KD BC  p
CertificateRequest
5.4. Server Hello Done
!67!"7!8
# !" $
!_

ServerDp ServerHelloDoneQRWZQik
E[F=;Ud:U]


ClientuWvp ClientCertificateZI@SL
I?@G=LH=
5.5. Client Key Exchange
!67!"7!8
# !" $
!8

ClientD  p ClientKeyExchange GZ R Z I@ M$@KMMMc
HZ@TH@eHTZ;M$@KMMMQU]GiZ@Wv=KD
BCHZ@TH@?@SLI?@MM

ClientDpCertificateVerifycZ:GOYHx=pU
ZKDBCHZ@WXGSLI?@:M(YHxLZR
QU]q=Wv=KDBCHZ@TH@?@SLI:M
yFLKz{KMMWQU]:MFLHZ@WXGK`
YFSLIQZ

@FQZcclientserverKzKDBC=KstFM$@KMMMQR
X=G@KMKMMJWXGXNS=BY:EFHZ@H=QU]KD
BCHsLQyFqFS=wWXGXL
5.6. Change Cipher Spec
!67!"7!8
# !" $
!a

ClientDGOWG@ChangeCipherSpec?LF
QRG=L?Wv|wW}LVcGQyFGTZ
W\QyFKzQU]IkJQU]GiZ@FZUd
:U]yQyFQZN|
5.7. Client Finished

!67!"7!8
# !" $
!b

ClientDGOpFinishedQiGiZ@cZZI@GO
=WG$1(=pUd:U]U

ServerGipFinished?@H=q=
=WGP$1(QZ
5.8. Change Cipher Spec
!67!"7!8
# !" $
!o

ServerDGOWG@ChangeCipherSpec?LF
QR:MWv|wW}LVcGQyFGTZ
W\QyFKzQU]IkJQU]GiZ@FZUd
:U]yQyFQZN|
5.9. Server Finished
!67!"7!8
# !" $
!n

ServerDpFinished GiZ@?@XG;

ClientkEKkGiq=Udk
Giai đoạn ứng dụng
!67!"7!8
# !" $
!"


\VQRGLc|[F=;Ud:U]|QiQU]S@IIBCQU]HX\

(=pIBC@Q^Y@:MKMM~KzQU]GiZ@Xq=UTW=
hKMB?@{
NỘI DUNG
!67!"7!8
# !" $
96
:;<
(=>?@
ABC?@
DBC7
:EF@GH
6. Các ứng dụng của TLS
!67!"7!8
# !" $
9!

(=IBCUdG\QED[F:xK

QiQU]kEOiGOKsBk=>GyGGiFuG`

(=:;ZRKDBCUE'McceF=I?@7

$K•€B•KQU@sqD:x?@:GGO>?@ZMFM(@M:?@G;

(=:;2M:ZRKDBCGOUEQU]:)BL

@R;BFLE


>FS=;BFLE•MW>Q}LQyFr]$‚::@hM•qW9r]!6c
)MMgq:Mn€B•Ko€B•KMM966nm9r]!9'M@!6r]!9
NỘI DUNG
!67!"7!8
# !" $
99
:;<
(=>?@
ABC?@
DBC7
:EF@GH
7. Cài SSL cho website
!67!"7!8
# !" $
9_

$`)MMMM$@@M

$`ML?@€MWKMGFs

:^:88_

(@W 2ML MFLc BU MFM(GGF@Kc SMM(M•@M RG` (M•@M
)K@::@€‚@BcSMq

(M:MMBM[FMK@BK@::MM•@McMq

(•:MM•@M


ShK
8. Cài đJt Apache Webserver hM trợ SSL
!67!"7!8
# !" $
98

(=@H@M>Qe

GBƒKK:ƒ9nnƒ!___@‚J77•••GBKK:N

MKK:ƒ6"o@‚J77•••MKK:N

@@Mƒ!___@‚JN

M:a$BF:MMKK::UEkE=FGi=2gc$2acm1c

%B

U@H@MM:U

(@H@M'M

„BMKK:ƒ6"o

„M:(•FM(ƒ€)_9ƒƒM•q…7MKK:

„GK†B‡GK
8. Cài đJt Apache Webserver hM trợ SSL
!67!"7!8
# !" $

9a

(@H@MGBKK:

„B7GBƒKK:ƒ9nnƒ!___

„•FM#•ƒ@@M…7@@Mƒ!_98
ƒƒ•#KK:…7MKK:ƒ6"bW
ƒƒM•q…7FK7:@:7@@M
ƒƒM@W:MƒK@MB…KK:
•
(Qe1@M
•
„B7@@Mƒ!_98
•
„G@HM
•
„G@HMM•@M
•
„G@HMK@::