Is there a difference between the standard web client/server certificates and
server-server certificates? Our customer has asked for server-server and
wants to know if this is different from generating public/private keys in the
standard way for web connections.

A "server certificate" is used to identify a machine. A "client certificate"
is generally used to identity a user (rather than a machine). I assume
that's what you mean when you talk about "web client/server certificates"

On the public internet, eg when you do online banking or shopping at
Amazon.com, there is only one certificate used - the server's certificate.
The client does not have to identify itself using a cert.

If you need two machines to mutually identify each other, then you would use
two server certificates - one issued to each machine.

Cheers
Ken

[quoted text, click to view]