Systems and methods for automating cloud-based code-signing services
View Patent ↗A computer-implemented method for automating cloud-based code-signing services may include identifying, at a cloud-based code-signing service, an automatically generated request from a signing automation agent on a remote client to sign at least one file. The method may further include verifying a security credential that authorizes the remote client to access the cloud-based code-signing service. The method may also include receiving, at the cloud-based code-signing service, the file from the signing automation agent. The method may additionally include signing, by the cloud-based code-signing service, the file. The method may further include sending the signed file from the cloud-based code-signing service to the remote client. Various other methods, systems, and computer-readable media are disclosed.
1. A computer-implemented method for automating cloud-based code-signing services, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising:
identifying, at a cloud-based code-signing service, an automatically generated request from a signing automation agent on a remote client to sign at least one file, the signing automation agent comprising a software module;
verifying a security credential that authorizes the remote client to access the cloud-based code-signing service, the security credential having been submitted by the signing automation agent for verification by the cloud-based code-signing service;
receiving, at the cloud-based code-signing service, the file from the signing automation agent;
signing, by the cloud-based code-signing service, the file;
sending the signed file from the cloud-based code-signing service to the remote client.
2. The computer-implemented method of claim 1 , wherein:
an automated build tool comprises the signing automation agent;
the automated build tool is configured to automatically sign the file via the cloud-based code-signing service as part of a build process that builds the file via a series of one or more code-building steps.
3. The computer-implemented method of claim 1 , further comprising requesting, by the cloud-based code-signing service, second factor authentication from a code-signing administrator.
4. The computer-implemented method of claim 3 , further comprising receiving, at the cloud-based code-signing service, second factor authentication from the code-signing administrator.
5. The computer-implemented method of claim 4 , wherein signing the file comprises signing the file with a production certificate after receiving second factor authentication from the code-signing administrator.
6. The computer-implemented method of claim 1 , wherein signing the file comprises signing the file with a test certificate when no second factor authentication occurs.
7. The computer-implemented method of claim 1 , wherein:
the signing automation agent comprises a file-sharing module that is configured to share files with the cloud-based code-signing service;
identifying the automatically generated request from the signing automation agent comprises receiving the file from the file-sharing module.
8. The computer-implemented method of claim 7 , wherein verifying the security credential comprises verifying a secure connection between the file-sharing module and the cloud-based code-signing service.
9. The computer-implemented method of claim 7 , wherein sending the signed file from the cloud-based code-signing service to the automated signing agent comprises sharing the signed file with the file-sharing module.
10. A system for automating cloud-based code-signing services, the system comprising:
an identification module, stored in memory, that identifies, at a cloud-based code-signing service, an automatically generated request from a signing automation agent on a remote client to sign at least one file, the signing automation agent comprising a software module;
a verification module, stored in memory, that verifies a security credential that authorizes the remote client to access the cloud-based code-signing service, the security credential having been submitted by the signing automation agent for verification by the cloud-based code-signing service;
a reception module, stored in memory, that receives the file from the signing automation agent;
a signature module, stored in memory, that signs, by the cloud-based code-signing service, the file;
a transfer module, stored in memory, that sends the signed file from the cloud-based code-signing service to the remote client;
at least one physical processor that executes the identification module, the verification module, the reception module, the signature module, and the transfer module.
11. The system of claim 10 , wherein:
an automated build tool comprises the signing automation agent;
the automated build tool is configured to automatically sign the file via the cloud-based code-signing service as part of a build process that builds the file via a series of one or more code-building steps.
12. The system of claim 10 , wherein the verification module further requests, by the cloud-based code-signing service, second factor authentication from a code-signing administrator.
13. The system of claim 12 , wherein the verification module further receives, at the cloud-based code-signing service, second factor authentication from the code-signing administrator.
14. The system of claim 13 , wherein the signature module signs the file with a production certificate after the verification module receives second factor authentication from the code-signing administrator.
15. The system of claim 10 , wherein the signature module signs the file with a test certificate when no second factor authentication occurs.
16. The system of claim 10 , wherein:
the signing automation agent comprises a file-sharing module that is configured to share files with the cloud-based code-signing service;
the identification module identifies the automatically generated request by receiving the file from the file-sharing module.
17. The system of claim 16 , wherein the verification module verifies the security credential by verifying a secure connection between the file-sharing module and the cloud-based code-signing service.
18. The system of claim 16 , wherein the transfer module sends the signed file from the cloud-based code-signing service to the automated signing agent by sharing the signed file with the file-sharing module.
19. A non-transitory computer-readable medium comprising one or more computer-executable instructions that, when executed by at least one processor of a computing device, cause the computing device to:
identify, at a cloud-based code-signing service, an automatically generated request from a signing automation agent on a remote client to sign at least one file, the signing automation agent comprising a software module;
verify a security credential that authorizes the remote client to access the cloud-based code-signing service, the security credential having been submitted by the signing automation agent for verification by the cloud-based code-signing service;
receive, at the cloud-based code-signing service, the file from the signing automation agent;
sign, by the cloud-based code-signing service, the file;
send the signed file from the cloud-based code-signing service to the remote client.
20. The non-transitory computer-readable medium of claim 19 , wherein the one or more computer-executable instructions cause the computing device to request, by the cloud-based code-signing service, second factor authentication from a code-signing administrator.