Method, apparatus, and electronic device for communication between blockchain nodes, and method, apparatus, and electronic device for blockchain-based certificate management

1. A computer-implemented method, comprising:

receiving, at a second node in a blockchain, a first communication request sent from a first node in the blockchain, wherein the first communication request includes a digital certificate of the first node, and wherein the digital certificate of the first node is stored in the blockchain,

wherein the digital certificate is issued by a certificate authority distinct from the blockchain, and wherein the digital certificate comprises a certificate version number, certificate holder information, certificate authority information, a certificate validity period, or a combination therefore;

accessing, by the second node based on the first communication request, certificate validity information associated with one or more nodes in the blockchain including the first node, wherein the certificate validity information is stored in the blockchain, and wherein the certificate validity information reflects validity status information of digital certificates of the one or more nodes in the blockchain;

verifying, by the second node based on the first communication request and the accessed certificate validity information, whether the digital certificate of the first node is valid; and

in response to verifying that the digital certificate of the first node is valid, establishing, by the second node, a communication connection to the first node.

2. The computer-implemented method of claim 1 , wherein establishing, by the second node, a communication connection to the first node comprises:

sending, by the second node, a second communication request to the first node, wherein the second communication request includes a digital certificate of the second node, and wherein the second communication request and the certificate validity information are usable by the first node to verify that the digital certificate of the second node is valid; and

subsequent to verifying that the digital certificate of the first node is valid and in response to the first node verifying that the digital certificate of the second node is valid, establishing a communication connection between the first node and the second node.

3. The computer-implemented method of claim 1 , wherein the certificate validity information records an invalid digital certificate that is revoked for the first node, and wherein verifying, by the second node based on the first communication request and the accessed certificate validity information, whether the digital certificate of the first node is valid comprises:

determining, by the second node based on the certificate validity information stored in the blockchain, that the digital certificate of the first node is recorded in the certificate validity information; and

in response to determining that the digital certificate of the first node is recorded in the certificate validity information, verifying that the digital certificate of the first node is invalid.

4. The computer-implemented method of claim 1 , wherein the certificate validity information records a valid digital certificate for the first node, and wherein verifying, by the second node based on the first communication request and accessed certificate validity information, whether the digital certificate of the first node is valid comprises:

determining, by the second node based on the certificate validity information stored in the blockchain, that the digital certificate of the first node is recorded in the certificate validity information; and

responsive to determining that the digital certificate of the first node is recorded in the certificate validity information, verifying that the digital certificate of the first node is valid.

5. The computer-implemented method of claim 1 , wherein the method comprises, prior to receiving, at the second node, the first communication request:

storing the digital certificate of the first node in the blockchain;

determining a validity status of the digital certificate of the first node; and

writing the determined validity status of the digital certificate of the first node into the certificate validity information.

6. The computer-implemented method of claim 1 , wherein the first communication request received by the second node is sent by the first node based on the SSL protocol, the TLS protocol, or a combination thereof.

7. The computer-implemented method of claim 1 , wherein the certificate validity information comprises a valid certificate list and a revoked certificate list.

8. A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising:

receiving, at a second node in a blockchain, a first communication request sent from a first node in the blockchain, wherein the first communication request includes a digital certificate of the first node, and wherein the digital certificate of the first node is stored in the blockchain,

wherein the digital certificate is issued by a certificate authority distinct from the blockchain, and wherein the digital certificate comprises a certificate version number, certificate holder information, certificate authority information, a certificate validity period, or a combination therefore;

accessing, by the second node based on the first communication request, certificate validity information associated with one or more nodes in the blockchain including the first node, wherein the certificate validity information is stored in the blockchain, and wherein the certificate validity information reflects validity status information of digital certificates of the one or more nodes in the blockchain;

verifying, by the second node based on the first communication request and the accessed certificate validity information, whether the digital certificate of the first node is valid; and

in response to verifying that the digital certificate of the first node is valid, establishing, by the second node, a communication connection to the first node.

9. The non-transitory, computer-readable medium of claim 8 , wherein establishing, by the second node, a communication connection to the first node comprises:

sending, by the second node, a second communication request to the first node, wherein the second communication request includes a digital certificate of the second node, and wherein the second communication request and the certificate validity information are usable by the first node to verify that the digital certificate of the second node is valid; and

subsequent to verifying that the digital certificate of the first node is valid and in response to the first node verifying that the digital certificate of the second node is valid, establishing a communication connection between the first node and the second node.

10. The non-transitory, computer-readable medium of claim 8 , wherein the certificate validity information records an invalid digital certificate that is revoked for the first node, and wherein verifying, by the second node based on the first communication request and the accessed certificate validity information, whether the digital certificate of the first node is valid comprises:

determining, by the second node based on the certificate validity information stored in the blockchain, that the digital certificate of the first node is recorded in the certificate validity information; and

in response to determining that the digital certificate of the first node is recorded in the certificate validity information, verifying that the digital certificate of the first node is invalid.

11. The non-transitory, computer-readable medium of claim 8 , wherein the certificate validity information records a valid digital certificate for the first node, and wherein verifying, by the second node based on the first communication request and accessed certificate validity information, whether the digital certificate of the first node is valid comprises:

determining, by the second node based on the certificate validity information stored in the blockchain, that the digital certificate of the first node is recorded in the certificate validity information; and

responsive to determining that the digital certificate of the first node is recorded in the certificate validity information, verifying that the digital certificate of the first node is valid.

12. The non-transitory, computer-readable medium of claim 8 , wherein the operations comprise, prior to receiving, at the second node, the first communication request:

storing the digital certificate of the first node in the blockchain;

determining a validity status of the digital certificate of the first node; and

writing the determined validity status of the digital certificate of the first node into the certificate validity information.

13. The non-transitory, computer-readable medium of claim 8 , wherein the first communication request received by the second node is sent by the first node based on the SSL protocol, the TLS protocol, or a combination thereof.

14. The non-transitory, computer-readable medium of claim 8 , wherein the certificate validity information comprises a valid certificate list and a revoked certificate list.

15. A computer-implemented system, comprising:

one or more computers; and

one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising:

receiving, at a second node in a blockchain, a first communication request sent from a first node in the blockchain, wherein the first communication request includes a digital certificate of the first node, and wherein the digital certificate of the first node is stored in the blockchain,

wherein the digital certificate is issued by a certificate authority distinct from the blockchain, and wherein the digital certificate comprises a certificate version number, certificate holder information, certificate authority information, a certificate validity period, or a combination therefore;

accessing, by the second node based on the first communication request, certificate validity information associated with one or more nodes in the blockchain including the first node, wherein the certificate validity information is stored in the blockchain, and wherein the certificate validity information reflects validity status information of digital certificates of the one or more nodes in the blockchain;

verifying, by the second node based on the first communication request and the accessed certificate validity information, whether the digital certificate of the first node is valid; and

in response to verifying that the digital certificate of the first node is valid, establishing, by the second node, a communication connection to the first node.

16. The computer-implemented system of claim 15 , wherein establishing, by the second node, a communication connection to the first node comprises:

sending, by the second node, a second communication request to the first node, wherein the second communication request includes a digital certificate of the second node, and wherein the second communication request and the certificate validity information are usable by the first node to verify that the digital certificate of the second node is valid; and

subsequent to verifying that the digital certificate of the first node is valid and in response to the first node verifying that the digital certificate of the second node is valid, establishing a communication connection between the first node and the second node.

17. The computer-implemented system of claim 15 , wherein the certificate validity information records an invalid digital certificate that is revoked for the first node, and wherein verifying, by the second node based on the first communication request and the accessed certificate validity information, whether the digital certificate of the first node is valid comprises:

determining, by the second node based on the certificate validity information stored in the blockchain, that the digital certificate of the first node is recorded in the certificate validity information; and

in response to determining that the digital certificate of the first node is recorded in the certificate validity information, verifying that the digital certificate of the first node is invalid.

18. The computer-implemented system of claim 15 , wherein the certificate validity information records a valid digital certificate for the first node, and wherein verifying, by the second node based on the first communication request and accessed certificate validity information, whether the digital certificate of the first node is valid comprises:

determining, by the second node based on the certificate validity information stored in the blockchain, that the digital certificate of the first node is recorded in the certificate validity information; and

responsive to determining that the digital certificate of the first node is recorded in the certificate validity information, verifying that the digital certificate of the first node is valid.

19. The computer-implemented system of claim 15 , wherein the operations comprise, prior to receiving, at the second node, the first communication request:

storing the digital certificate of the first node in the blockchain;

determining a validity status of the digital certificate of the first node; and

writing the determined validity status of the digital certificate of the first node into the certificate validity information.

20. The computer-implemented system of claim 15 , wherein the first communication request received by the second node is sent by the first node based on the SSL protocol, the TLS protocol, or a combination thereof.