Methods and systems for secure communications using a local certification authority
View Patent ↗A local network traffic processor and an application are resident on a common computer system. The application is configured to trust a server certificate issued by a local network traffic processor, the local network traffic processor operatively being paired with a remote network traffic processor. A proxy server certificate, generated using identification information of a server associated with the remote network traffic processor and signed by the local certification authority, is used to establish a secure session between a local network traffic processor and the application.
1. A method comprising:
determining that a local network traffic processor and a networked application are installed on a common trusted host;
in response to the determination, configuring the networked application to trust a server proxy certificate generated, using a server identifier, for a server associated with a remote network traffic processor that is issued and signed by a local certification authority unique to and associated with the local network traffic processor, the local network traffic processor operatively being paired with the remote network traffic processor to perform a network traffic processing function; and
using a proxy server certificate to establish a secure session between the local network traffic processor and the networked application.
2. The method of claim 1 , wherein the determination that the local network traffic processor is on a trusted host comprises determining that the local network traffic processor and the application are resident on a common computer system that is the trusted host.
3. The method of claim 1 , wherein the application comprises an SSL-enabled browser application and the configuring of the application to trust the server proxy certificate includes configuring the SSL-enabled application to trust an authority.
4. The method of claim 3 , wherein the configuring of the SSL-enabled application to trust the authority includes adding a certification authority (CA) certificate for the authority to a trusted certificate store used by the SSL-enabled application.
5. The method of claim 1 , including:
generating a private/public key pair for the server;
providing the public key of the private/public key pair to the authority; and
issuing the proxy server certificate, comprising the public key of the server signed using the private key of the authority, from the authority.
6. The method of claim 1 , including:
receiving, from the remote network traffic processor and at the local network traffic processor, a server identifier; and
generating the proxy server certificate at the authority using a private key of the local network traffic processor that is unique to the local network traffic processor.
7. The method of claim 6 , wherein the server identifier for a server comprises at least one of a common name or an alternate name of the server.
8. The method of claim 1 , wherein the local network traffic processor comprises a local traffic accelerator that operatively accelerates network traffic communicated with a remote traffic accelerator.
9. The method of claim 1 , wherein the authority forms part of the local network traffic processor.
10. A system comprising:
a configuration application to:
install a local network traffic processor and an networked application on a common trusted computer system; and
configure the networked application to trust a server certificate of the local network traffic processor, the local network traffic processor operatively being paired with a remote network traffic processor,
a local certification authority (CA), unique to and associated the local network traffic processor, to issue and sign a proxy server certificate using a server identifier for a server associated with the remote network traffic processor; and
the networked application to use the proxy server certificate to establish a secure session between the local network traffic processor and the networked application.
11. The system of claim 10 , wherein the networked application comprises a browser application and the configuring of the networked application to trust the server certificate includes configuring the browser application to trust the local CA.
12. The system of claim 10 , wherein the configuration application is to add a certification authority certificate for the local CA to a trusted certificate store used by the networked application.
13. The system of claim 10 , including:
generating a private/public key pair for the server;
providing at least the public key of the private/public key pair to the local certification authority; and
issuing the proxy server certificate from the local CA.
14. The system of claim 10 , including:
receiving, from the remote network traffic processor and at the local network traffic processor, the server identifier; and
generating the proxy server certificate at the local certification authority (CA) using a key pair generated for the server.
15. The system of claim 10 , wherein the local network traffic processor comprises a local traffic accelerator that operatively accelerates network traffic communicated with a remote traffic accelerator.
16. The system of claim 10 , wherein the local CA forms part of the local network traffic processor.
17. The system of claim 10 , wherein the server identifier for the server comprises at least one of a common name, an alternate name or an X509 attribute of the server.
18. A non-transitory machine-readable medium storing instructions that, when executed by a computer system, cause the computer system to perform a method comprising:
configuring a networked application to trust a proxy server certificate, using a server identifier for a server associated with a remote network traffic processor, that is issued and signed by a local certification authority, unique to and associated with a local network traffic processor installed on a common trusted host with the networked application, the local network traffic processor operatively being paired with the remote network traffic processor; and
using a proxy server certificate to establish a secure session between the local network traffic processor and the networked application.
19. A method comprising:
configuring a networked application to trust a proxy server certificate using a server identifier for a server associated with a remote network traffic processor, that is issued and signed by a local certification authority, unique to and associated with a local network traffic processor installed on a common trusted host with the networked application, the local network traffic processor operatively being paired with the remote network traffic processor; and
using a proxy server certificate to establish a secure session between local network traffic processor and the networked application.
20. The method of claim 19 , wherein the networked application comprises an SSL-enabled browser application and the configuring of the networked application to trust the server proxy certificate includes configuring the SSL-enabled application to trust the local certification authority.
21. The method of claim 19 , comprising:
generating a private/public key pair for a server;
providing the public key of the private/public key pair to the local certification authority; and
issuing the proxy server certificate, comprising the public key of the server signed using
the private key of the local certification authority, from the local certification authority.
22. The method of claim 21 , wherein the configuring of the SSL-enabled application to trust the local certification authority includes adding a certification authority (CA) certificate for the local certification authority to a trusted certificate store used by the SSL-enabled application.
23. The method of claim 19 , comprising:
receiving, from the remote network traffic processor and at the local network traffic processor, a server identifier; and
generating the proxy server certificate at the certification authority using a private key of the local network traffic processor that is unique to the local network traffic processor.
24. The method of claim 19 , wherein the local network traffic processor comprises a local traffic accelerator that operatively accelerates network traffic communicated with a remote traffic accelerator.