Multi-algorithm key generation and certificate install
Techniques are disclosed for generating multiple key pairs using different algorithms and similarly installing certificates signed using the different algorithms. A customer server receives a selection of algorithms for generating a public/private key pair (e.g., RSA, ECC, DSA, etc.). The customer server generates key pairs for each selection and also generates corresponding certificate signing requests (CSR). The customer server sends the CSRs to a certificate authority (CA). The CA generates certificates associated with algorithm and sends the certificates to the customer server. The customer server may prompt a user to select one or more of the certificates to install, and upon receiving the selection, the customer installs the certificates.
1. A method for concurrently requesting multiple certificates from a certificate authority (CA), the method comprising:
receiving a selection of a plurality of signing algorithms to use in generating a plurality of public/private key pairs, a selection of a key size for each of the plurality of signing algorithms, and a selection of a plurality of hashing algorithms to use in generating a plurality of digital certificates;
receiving information common to the plurality of digital certificates;
generating the plurality of public/private key pairs using the selection of the plurality of signing algorithms and the selection of the plurality of key sizes, each respective public/private key pair of the plurality of public/private key pairs being generated for association with one of the plurality of digital certificates and having a particular key size based on the selection of the key size for a signing algorithm of the plurality of signing algorithms used to generate the respective public/private key pair; and
for each public key in the plurality of public/private key pairs, generating a certificate signing request (CSR) that includes the common information and an identification of a hashing algorithm of the plurality of hashing algorithms to be used in generating a digital certificate in response to the CSR.
2. The method of claim 1 , further comprising, for each CSR generated, transmitting the CSR to a certificate authority (CA).
3. The method of claim 2 , further comprising:
receiving a digital certificate from the CA for each CSR transmitted to the CA; and
installing each digital certificate received from the CA.
4. The method of claim 1 , wherein the plurality of signing algorithms includes at least one of RSA, ECDH, ECDSA, or Diffie-Hellman and the plurality of hashing algorithms includes at least one of SHA224, SHA226, SHA384, or SHA512.
5. The method of claim 1 , wherein the information common to the plurality of digital certificates includes domain and organization information.
6. Computer-readable storage media storing instructions, which, when executed by one or more processors, cause the one or more processors to perform an operation for concurrently requesting multiple certificates from a certificate authority (CA), the operation comprising:
receiving a selection of a plurality of signing algorithms to use in generating a plurality of public/private key pairs, a selection of a key size for each of the plurality of signing algorithms, and a selection of a plurality of hashing algorithms to use in generating a plurality of digital certificates;
receiving information common to the plurality of digital certificates;
generating the plurality of public/private key pairs using the selection of the plurality of signing algorithms and the selection of the plurality of key sizes, each respective public/private key of the plurality of public/private key pairs being generated for association with one of the plurality of digital certificates and having a particular key size based on the selection of the key size for a signing algorithm of the plurality of signing algorithms used to generate the respective public/private key pair; and
for each public key in the plurality of public/private key pairs, generating a certificate signing request (CSR) that includes the common information and an identification of a hashing algorithm of the plurality of hashing algorithms to be used in generating a digital certificate in response to the CSR.
7. The computer-readable storage media of claim 6 , wherein the operation further comprises, for each CSR generated, transmitting the CSR to a certificate authority (CA).
8. The computer-readable storage media of claim 7 , wherein the operation further comprises:
receiving a digital certificate from the CA for each CSR transmitted to the CA; and
installing each digital certificate received from the CA.
9. The computer-readable storage media of claim 8 , wherein each respective digital certificate is installed using a process corresponding to a signing algorithm of the plurality of signing algorithms associated with the respective digital certificate.
10. The computer-readable storage media of claim 8 , wherein installing at least one digital certificate includes installing one or more intermediate digital certificates.
11. The computer-readable storage media of claim 6 , wherein the plurality of signing algorithms includes at least one of RSA, ECDH, ECDSA, or Diffie-Hellman and the plurality of hashing algorithms includes at least one of SHA1, SHA224, SHA226, SHA384, or SHA512.
12. The computer-readable storage media of claim 6 , wherein the information common to the plurality of digital certificates includes domain and organization information.
13. A system, comprising:
one or more processors; and
non-transitory, computer-readable storage media storing computer-executable instructions, which, when executed by the one or more processors, cause one or more processors to perform an operation for concurrently requesting multiple certificates from a certificate authority (CA), the operation comprising:
receiving a selection of a plurality of signing algorithms to use in generating a plurality of public/private key pairs, a selection of a key size for each of the plurality of signing algorithms, and a selection of a plurality of hashing algorithms to use in generating a plurality of digital certificates;
receiving information common to the plurality of digital certificates;
generating the plurality of public/private key pairs using the selection of the plurality of signing algorithms the selection of the plurality of key sizes, each respective public/private key pair of the plurality of public/private key pairs being generated for association with one of the plurality of digital certificates and having a particular key size based on the selection of the key size for a signing algorithm of the plurality of signing algorithms used to generate the respective public/private key pair; and
for each public key in the plurality of public/private key pairs, generating a certificate signing request (CSR) that includes the common information and an identification of a hashing algorithm of the plurality of hashing algorithms to be used in generating a digital certificate in response to the CSR.
14. The system of claim 13 , wherein the operation further comprises, for each CSR generated, transmitting the CSR to a certificate authority (CA).
15. The system of claim 14 , wherein the operation further comprises:
receiving a digital certificate from the CA for each CSR transmitted to the CA; and
installing each digital certificate received from the CA.
16. The system of claim 15 , wherein each respective digital certificate is installed using a process corresponding to a signing algorithm of the plurality of signing algorithms associated with the respective digital certificate.
17. The system of claim 15 , wherein installing at least one digital certificate includes installing one or more intermediate digital certificates.
18. The system of claim 13 , wherein the information common to the plurality of digital certificates includes domain and organization information.