Hi in security chapter, why do we create client certificates for private key . i . . .

Kubernetes
#1

kanchana:
hi in security chapter, why do we create client certificates for private key . it should be public key right.
i am confused.
whether certificates are created with private or public key??

#2

Deekshith Hadil:
Certificates are created in pairs. So both should exist.

#3

kanchana:
But only private key is sent in CSR

#4

kanchana:
so i am confused

#5

Deekshith Hadil:
Here is how you create a priate/public key pair.

  1. Create private key.
  2. Using private key, create CSR.
  3. Send this CSR to certificate provider who will sign it using CA and will send you the public key.
    this is a typical process involved when you want to have a certificate for your website which shows green in browser. Here, the process is kind of same, but all these are done by our selves.

You might want to go through tls security section over and over again. It is beautifully explained here.

#6

kanchana:
thank you will check again