Management of digital certificate with repeated rollback
The present disclosure generally relates to systems and methods for the gradual application of a new digital certificate to a service endpoint or server, with repeated rollbacks to an old digital certificate, whereby the new certificate is applied to a service endpoint and automatically rolled back to the previous certificate after an amount of time. After a period that corresponds to a set amount of time minus the time the new certificate was applied to the endpoint, the process starts again, except with an increased period of time for the new certificate.
1. A network service comprising:
an interface component implemented in a computing device having a memory, a processor and computer-executable instructions, the interface component for receiving Transport Layer Security (TLS) initiation requests from a requesting device, wherein the requesting device is configured with current TLS pinning criteria specifying one or more TLS certificate attributes associated with a first TLS certificate; and
a TLS certificate management component implemented in a computing device having a memory, a processor and computer-executable instructions, the TLS certificate management component for:
obtaining a second TLS certificate from a TLS certificate authority, wherein the second TLS certificate does not satisfy the current TLS pinning criteria implemented by the requesting device;
determining a TLS certificate rollback schedule, wherein the TLS certificate rollback schedule defines a plurality of TLS certificate rollback time windows for processing TLS initiation requests from the requesting device, wherein individual TLS certificate rollback time windows define a first time window for responding to TLS initiation requests with the first TLS certificate and a second time window for responding to TLS initiation requests with the second TLS certificate;
successively applying the plurality of TLS certificate rollback time windows defined in the TLS certificate rollback schedule; and
causing permanent application of the second TLS certificate upon completion of the successively applied plurality of TLS certificate rollback time windows.
2. The network service as recited in claim 1 , wherein the individual TLS certificate rollback time windows correspond to a total fixed time period.
3. The network service as recited in claim 2 , wherein the total fixed time period is 60 minutes.
4. The network service as recited in claim 1 , wherein the second time window in the successively applied TLS rollback time windows is defined according to a fixed schedule.
5. The network service as recited in claim 4 , wherein the fixed schedule defines an increase in the second time window as a multiple of a previous second TLS time window.
6. A method for implementing Transport Layer Security (TLS) certificate management comprising:
obtaining an updated TLS certificate from a TLS certificate authority, wherein the updated TLS certificate does not satisfy current TLS pinning criteria implemented by a requesting device;
implementing a TLS certificate rollback schedule, wherein the TLS certificate rollback schedule defines a plurality of TLS certificate rollback time windows for processing TLS initiation requests from the requesting device; and
causing permanent application of the updated TLS certificate upon completion of the TLS certificate rollback schedule.
7. The method as recited in claim 6 , wherein individual TLS rollback time windows define a first time window for responding to TLS initiation requests with a rollback TLS certificate and a second time window for responding to TLS initiation request with the updated TLS certificate.
8. The method as recited in claim 7 , wherein the individual TLS rollback time windows correspond to a total fixed time period.
9. The method as recited in claim 7 , further comprising:
successively applying the plurality of TLS certificate rollback time windows defined in the TLS certificate rollback schedule, wherein the second time window in the successively applied TLS rollback time windows is defined according to a fixed schedule.
10. The method as recited in claim 9 , wherein the fixed schedule defines an increase in the second TLS time window as a multiple of a previous second time window.
11. The method as recited in claim 9 , wherein the fixed schedule defines an increase in the second time window according to a non-linear increase.
12. The method as recited in claim 9 , wherein the fixed schedule defines at least one of the second time windows as a value communicated to requesting devices.
13. The method as recited in claim 6 , wherein implementing a TLS certificate rollback schedule includes implementing the TLS certificate rollback schedule based on implementation criteria.
14. A non-transitory computer-readable medium storing computer-executable instructions that, when executed by a network service, cause the network service to perform operations including:
implementing a Transport Layer Security (TLS) certificate rollback schedule responsive to receipt of an updated TLS certificate from a TLS certificate authority, wherein the TLS certificate rollback schedule defines a plurality of TLS certificate rollback time windows for processing TLS initiation requests from a requesting device-according to at least one of a rollback TLS certificate or the updated TLS certificate; and
causing permanent application of the updated TLS certificate upon completion of the TLS certificate rollback schedule.
15. The non-transitory computer-readable medium as recited in claim 14 , wherein individual TLS rollback time windows define a first time window for responding to TLS initiation requests with a rollback TLS certificate and a second time window for responding to a plurality of TLS initiation requests with the updated TLS certificate.
16. The non-transitory computer-readable medium as recited in claim 15 , wherein the individual TLS rollback time windows correspond to a total fixed time period.
17. The non-transitory computer-readable medium as recited in claim 16 , further comprising:
successively applying the plurality of TLS certificate rollback time windows defined in the TLS certificate rollback schedule, wherein the second time window in the successively applied TLS rollback time windows correspond is defined according to a fixed schedule.
18. The non-transitory computer-readable medium as recited in claim 17 , wherein the fixed schedule defines an increase in the second time window as a multiple of a previous second time window.
19. The non-transitory computer-readable medium as recited in claim 17 , wherein the fixed schedule defines an increase in the second time window according to a non-linear increase.
20. The non-transitory computer-readable medium as recited in claim 17 , wherein the fixed schedule defines at least one of the second time windows as a value communicated to requesting devices.
21. The non-transitory computer-readable medium as recited in claim 14 further comprising;
obtaining a command to interrupt the TLS certificate rollback schedule; and
causing permanent application of the updated TLS certificate responsive to the command to interrupt the TLS certificate rollback schedule.