If a TLS context has a keystore but no truststore, what TLS mode is active?

Prepare for the MuleSoft Developer 2 Certification Exam. Access practice quizzes featuring flashcards and multiple choice questions with explanations. Get confident and ready for your certification success!

Multiple Choice

If a TLS context has a keystore but no truststore, what TLS mode is active?

Explanation:
In TLS the keystore holds your own private key and certificate, while the truststore contains certificates you trust from others. If a TLS context has a keystore but no truststore, the side can present its certificate to others, but it cannot verify the other party's certificate because there’s no set of trusted roots to rely on. That means only one side is authenticated—the server to the client—so the connection runs in one-way TLS. Two-way (mutual) TLS would require the ability to verify the client as well, which needs a truststore.

In TLS the keystore holds your own private key and certificate, while the truststore contains certificates you trust from others. If a TLS context has a keystore but no truststore, the side can present its certificate to others, but it cannot verify the other party's certificate because there’s no set of trusted roots to rely on. That means only one side is authenticated—the server to the client—so the connection runs in one-way TLS. Two-way (mutual) TLS would require the ability to verify the client as well, which needs a truststore.

Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy