1

As the title, when a server has a long list of certificates, supposed their total size is over 16KBytes, how to pack them into a TLSplaintext? If we can't, please tell me how to seperate the certificate chain into different TLSplaintexts?

I ask because in RFC 2246, the size of a 'Certificate' package could reach 2^24 bytes. That is over the maximum size allowed in a TLSPlaintext; 2^14+5 bytes. The standard does not mention how we can split the package when the size of a 'Certificate' package is over 2^14+5. That confuses me a lot.

4

0 回答 0