Method, apparatus, and electronic device for communication between blockchain nodes, and method, apparatus, and electronic device for blockchain-based certificate management
A first communication request including a digital certificate of a first node sent from the first node in a blockchain is received at a second node in the blockchain, where the digital certificate of the first node is stored in the blockchain. Certificate validity information stored in the blockchain and associated with the nodes in the blockchain is accessed by the second node based on the first communication request, where the certificate validity information reflects the validity status information of digital certificates of the nodes in the blockchain. A verification of whether the digital certificate of the first node is valid is performed by the second node based on the first communication request and the accessed certificate validity information. A communication connection to the first node is established by the second node in response to verifying that the digital certificate of the first node is valid.
1. A computer-implemented method, comprising:
receiving, at a first node in a blockchain, from a certificate authority distinct from the blockchain, a digital certificate of a second node in the blockchain and new validity status information of the digital certificate,
wherein the digital certificate comprises at least one of a certificate version number, certificate holder information, certificate authority information, and a certificate validity period;
storing, by the first node, the digital certificate in the blockchain;
accessing, by the first node, certificate validity information associated with each node in the blockchain, wherein the certificate validity information is stored in the blockchain, and wherein the certificate validity information reflects validity status information of digital certificates of each node in the blockchain;
determining, by the first node, that the new validity status information comprises certificate revocation information; and
in response to determining that the new validity status information comprises certificate revocation information, updating the certificate validity information to indicate that the digital certificate is invalid.
2. The computer-implemented method of claim 1 , comprising:
receiving, by the first node, from the second node, a communication request, wherein the communication request comprises the digital certificate;
accessing the certificate validity information stored on the blockchain; and
determining, based on the certificate validity information, that the digital certificate is invalid.
3. The computer-implemented method of claim 2 , wherein the communication request is sent by the second node based on Secure Sockets Layer (SSL) protocol or Transport Layer Security (TLS) protocol.
4. The computer-implemented method of claim 1 , wherein the certificate validity information comprises a valid certificate list and a revoked certificate list.
5. The computer-implemented method of claim 4 , wherein updating the certificate validity information comprises updating the revoked certificate list to indicate that the digital certificate is invalid.
6. A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising:
receiving, at a first node in a blockchain, from a certificate authority distinct from the blockchain, a digital certificate of a second node in the blockchain and new validity status information of the digital certificate,
wherein the digital certificate comprises at least one of a certificate version number, certificate holder information, certificate authority information, and a certificate validity period;
storing, by the first node, the digital certificate in the blockchain;
accessing, by the first node, certificate validity information associated with each node in the blockchain, wherein the certificate validity information is stored in the blockchain, and wherein the certificate validity information reflects validity status information of digital certificates of each node in the blockchain;
determining, by the first node, that the new validity status information comprises certificate revocation information; and
in response to determining that the new validity status information comprises certificate revocation information, updating the certificate validity information to indicate that the digital certificate is invalid.
7. The non-transitory, computer-readable medium of claim 6 , wherein the operations comprise:
receiving, by the first node, from the second node, a communication request, wherein the communication request comprises the digital certificate;
accessing the certificate validity information stored on the blockchain; and
determining, based on the certificate validity information, that the digital certificate is invalid.
8. The non-transitory, computer-readable medium of claim 7 , wherein the communication request is sent by the second node based on Secure Sockets Layer (SSL) protocol or Transport Layer Security (TLS) protocol.
9. The non-transitory, computer-readable medium of claim 6 , wherein the certificate validity information comprises a valid certificate list and a revoked certificate list.
10. The non-transitory, computer-readable medium of claim 9 , wherein updating the certificate validity information comprises updating the revoked certificate list to indicate that the digital certificate is invalid.
11. A computer-implemented system, comprising:
one or more computers; and
one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising:
receiving, at a first node in a blockchain, from a certificate authority distinct from the blockchain, a digital certificate of a second node in the blockchain and new validity status information of the digital certificate,
wherein the digital certificate comprises at least one of a certificate version number, certificate holder information, certificate authority information, and a certificate validity period;
storing, by the first node, the digital certificate in the blockchain;
accessing, by the first node, certificate validity information associated with each node in the blockchain, wherein the certificate validity information is stored in the blockchain, and wherein the certificate validity information reflects validity status information of digital certificates of each node in the blockchain;
determining, by the first node, that the new validity status information comprises certificate revocation information; and
in response to determining that the new validity status information comprises certificate revocation information, updating the certificate validity information to indicate that the digital certificate is invalid.
12. The computer-implemented system of claim 11 , wherein the operations comprise:
receiving, by the first node, from the second node, a communication request, wherein the communication request comprises the digital certificate;
accessing the certificate validity information stored on the blockchain; and
determining, based on the certificate validity information, that the digital certificate is invalid.
13. The computer-implemented system of claim 12 , wherein the communication request is sent by the second node based on Secure Sockets Layer (SSL) protocol or Transport Layer Security (TLS) protocol.
14. The computer-implemented system of claim 11 , wherein the certificate validity information comprises a valid certificate list and a revoked certificate list.
15. The computer-implemented system of claim 14 , wherein updating the certificate validity information comprises updating the revoked certificate list to indicate that the digital certificate is invalid.