android - https双向认证的证书是由CA机构生成的吗？

Question

客户端的https的双向认证的证书是由CA机构生成的，还是只有自己生成的证书才需要双向认证？

Answer 1

Can also be generated by openssl tool

Answer 2

Personal opinion: Two-way authentication and one-way authentication have different functional requirements. The former requires the server to authenticate the client to improve security; the latter requires complete trust in the client, after all, sometimes it is to protect user data. And it has nothing to do with whether it is issued by the CA organization.

The above may not be accurate and is only based on personal knowledge and discussion.

Answer 3

That is to say, the server certificate and the client certificate are two certificates, and both need to be applied for, right?

Answer 4

It is certified by CA and generated locally using openssl tool.