IP Library Granted Patent US 11,438,179
Granted Patent B2
US 11,438,179 · App. 16/876,664 · Granted Sep 6, 2022

Certificate renewal process outside application server environment

Inventor: Priyanka Tripathi (Bangalore, IN)
Assignee: Kyndryl, Inc.
H04L9/3263H04L9/0819H04L63/0428H04L63/0823
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,438,179
App. No.
16/876,664
Granted
Sep 6, 2022
Kind
B2
Abstract

A computer-implemented method, a system, and a computer program product for renewing a digital certificate. According to an embodiment of the present invention, the computer-implemented method comprises copying a digital certificate, from a first computer, onto a second computer, and requesting, from the second computer, renewal of the digital certificate by a certificate authority. The method further comprises loading a renewed digital certificate from the certificate authority, and saving the renewed digital certificate on the second computer. The renewed digital certificate is checked, on the second computer, for specified conditions, and the renewed digital certificate is copied from the second computer onto the first computer.

Claims (33)

1. A computer-implemented method comprising:

copying a keystore file including a digital certificate, from a first computer, onto a second computer, said first computer comprising a web server hosting a plurality of web server applications and said digital certificate enabling secure encrypted communication between a web server application and a client browser;

requesting, from the second computer, renewal of the digital certificate by creating, by the second computer, a certificate renewal request and submitting, by the second computer, the certificate renewal request to a certificate authority;

loading a renewed digital certificate from the certificate authority;

saving the renewed digital certificate on the second computer including adding the renewed digital certificate to the copy of the keystore file on the second computer;

checking the renewed digital certificate, on the second computer, for specified conditions; and

copying the renewed digital certificate from the second computer onto the first computer.

2. The method according to claim 1 , wherein the copying a digital certificate, from a first computer, onto a second computer includes adding the copy of the digital certificate to a specified file on the second computer.

3. The method according to claim 2 , wherein the saving the renewed digital certificate on the second computer includes adding the renewed digital certificate to the specified file on the second computer.

4. The method according to claim 3 , wherein the copying the renewed digital certificate from the second computer onto the first computer includes copying the specified file from the second computer onto the first computer.

5. The method according to claim 4 , wherein:

the copying a digital certificate, from a first computer, onto a second computer includes copying a defined file including the digital certificate, from the first computer, onto the second computer; and

the copying the specified file from the second computer onto the first computer includes overwriting the defined file on the first computer with the copy of the specified file from the second computer.

6. The method according to claim 1 , wherein the copying the renewed digital certificate from the second computer onto the first computer includes copying the renewed digital certificate from the second computer onto the first computer after the checking the renewed digital certificate, on the second computer, for specified conditions.

7. The method according to claim 1 , wherein said digital certificate is a secure sockets layer (SSL) digital certificate associated with a SSL computing device.

8. The method according to claim 1 , wherein said web application servers execute a virtual machine instance.

9. The method according to claim 7 , wherein the keystore file comprising one or more private keys and one or more digital certificates that contain corresponding public keys for the SSL computing device.

10. A system comprising:

a system computer for copying a keystore file including a digital certificate, from another computer, onto the system computer, said another computer comprising a web server hosting a plurality of web server applications and said digital certificate enabling secure encrypted communication between a web server application and a client browser; requesting renewal of the digital certificate by creating, by the system computer, a certificate renewal request and submitting, by the system computer, the certificate renewal request to a certificate authority; loading a renewed digital certificate from the certificate authority; saving the renewed digital certificate including adding the renewed digital certificate to the copy of the keystore file on the system computer; checking the renewed digital certificate for specified conditions; and copying the renewed digital certificate onto the another computer.

11. The system according to claim 10 , wherein the system computer adds the copy of the digital certificate to a specified file on the system computer.

12. The system according to claim 11 , wherein the system computer adds the renewed digital certificate to the specified file on the system computer.

13. The system according to claim 10 , wherein said digital certificate is a secure sockets layer (SSL) digital certificate associated with a SSL computing device.

14. The system according to claim 10 , wherein said web application servers execute a virtual machine instance.

15. The system according to claim 13 , wherein the keystore file comprising one or more private keys and one or more digital certificates that contain corresponding public keys for the SSL computing device.

16. A computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to:

copy a keystore file including a digital certificate, from a first computer, onto a second computer, said first computer comprising a web server hosting a plurality of web server applications and said digital certificate enabling secure encrypted communication between a web server application and a client browser;

request, from the second computer, renewal of the digital certificate by creating, by the second computer, a certificate renewal request and submitting, by the second computer, the certificate renewal request to a certificate authority;

load a renewed digital certificate from the certificate authority;

save the renewed digital certificate on the second computer including adding the renewed digital certificate to the copy of the keystore file on the second computer;

check the renewed digital certificate, on the second computer, for specified conditions; and

copy the renewed digital certificate from the second computer onto the first computer.

17. The computer program product according to claim 16 , wherein copying the digital certificate, from the first computer, onto the second computer includes adding the copy of the digital certificate to a specified file on the second computer.

18. The computer program product according to claim 17 , wherein saving the renewed digital certificate on the second computer includes adding the renewed digital certificate to the specified file on the second computer.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 18, 2021
From: INTERNATIONAL BUSINESS MACHINES CORPORATION
To: KYNDRYL, INC.
Reel/Frame 058213/0912 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 18, 2020
From: TRIPATHI, PRIYANKA
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 052688/0427 →