Methods for establishing a connection to a server with a cached certificate and devices thereof
Methods, non-transitory computer readable media, network traffic manager apparatuses, and systems that assist with establishing a connection to a server with a certificate includes receiving a request for establishing an encrypted connection and obtaining a certificate responsive to the received request. Next, the network traffic manager apparatus generates a content cache key for the obtained certificate. Next, the network traffic manager apparatus retrieves a data structure in the cache using the generated content cache key for the obtained certificate. The retrieved data structure is generated and stored in the cache during a previous established encrypted connection. The data structure comprises of extracted data from a previous certificate. Then, the network traffic manager apparatus initiates encryptographic operations using the retrieved data structure from the cache.
1 . A method for establishing a connection to a server with a certificate, the method implemented by a network traffic management system comprising one or more network traffic apparatuses, client devices, or server devices, the method comprising:
receiving a request for establishing an encrypted connection and obtaining a certificate responsive to the received request;
generating a content cache key for the obtained certificate;
retrieving, from the cache, a data structure comprising extracted data from a previous certificate using the generated content cache key for the obtained certificate, wherein the retrieved data structure is generated by:
validating the previous certificate by contacting an associated server to confirm accuracy of the extracted data; and
storing the previous certificate and the data structure comprising the verified extracted data in the cache during a previous established encrypted connection; and
initiating encryptographic operations using the retrieved data structure from the cache.
2 . The method as set forth in claim 1 , further comprising:
receiving the previous certificate for establishing the encrypted connection;
generating a previous content cache key using the previous certificate;
caching the data structure in the cache using the previous content cache key, wherein the data structure is generated using extracted data from the previous certificate and a revocation status; and
initiating encryptographic operations using the data structure.
3 . The method as set forth in claim 2 , wherein the certificate or the previous certificate is received by a client and the certificate or the previous certificate is a client certificate.
4 . The method as set forth in claim 2 , wherein the certificate or the previous certificate is received by a server and the certificate or the previous certificate is a server certificate.
5 . The method as set forth in claim 2 , wherein the data structure includes an expiration date extracted from the previous certificate, and wherein the stored data structure is updated using data extracted from the certificate when the expiration date is after a current date.
6 . A non-transitory computer readable medium having stored thereon instructions for establishing a connection to a server with a certificate comprising executable code which when executed by one or more processors, causes the processors to:
receive a request for establishing an encrypted connection and obtaining a certificate responsive to the received request;
generate a content cache key for the obtained certificate;
retrieve, from the cache, a data structure comprising extracted data from a previous certificate wherein the retrieved data structure is generated by:
validating the previous certificate by contacting an associated server to confirm accuracy of the extracted data; and
storing the previous certificate and the data structure comprising the verified extracted data in the cache during a previous established encrypted connection; and
initiate encryptographic operations using the retrieved data structure from the cache.
7 . The medium as set forth in claim 6 , wherein the executable code which when executed by the processors, further causes the processors to:
receive the previous certificate for establishing the encrypted connection;
generate a previous content cache key using the previous certificate;
cache the data structure in the cache using the previous content cache key, wherein the data structure is generated using extracted data from the previous certificate and a revocation status; and
initiate encryptographic operations using the data structure.
8 . The medium as set forth in claim 6 , wherein the certificate or the previous certificate is received by a client and the certificate or the previous certificate is a client certificate.
9 . The medium as set forth in claim 6 , wherein the certificate or the previous certificate is received by a server and the certificate or the previous certificate is a server certificate.
10 . The medium as set forth in claim 9 , wherein the data structure includes an expiration date extracted from the previous certificate, and wherein the stored data structure is updated using data extracted from the certificate when the expiration date is after a current date.
11 . A network traffic manager apparatus, comprising memory comprising programmed instructions stored in the memory and one or more processors configured to be capable of executing the programmed instructions stored in the memory to:
receive a request for establishing an encrypted connection and obtaining a certificate responsive to the received request;
generate a content cache key for the obtained certificate;
retrieve, from the cache, a data structure comprising extracted data from a previous certificate using the generated content cache key for the obtained certificate, wherein the retrieved data structure is generated by:
validating the previous certificate by contacting an associated server to confirm accuracy of the extracted data; and
storing the previous certificate and the data structure comprising the verified extracted data in the cache during a previous established encrypted connection; and
initiate encryptographic operations using the retrieved data structure from the cache.
12 . The device as set forth in claim 11 , wherein the one or more processors are further configured to be capable of executing the programmed instructions stored in the memory to:
receive the previous certificate for establishing the encrypted connection;
generate a previous content cache key using the previous certificate;
cache the data structure in the cache using the previous content cache key, wherein the data structure is generated using extracted data from the previous certificate and a revocation status; and
initiate encryptographic operations using the data structure.
13 . The device as set forth in claim 11 , wherein the certificate or the previous certificate is received by a client and the certificate or the previous certificate is a client certificate.
14 . The device as set forth in claim 11 , wherein the certificate or the previous certificate is received by a server and the certificate or the previous certificate is a server certificate.
15 . The device as set forth in claim 14 , wherein the data structure includes an expiration date extracted from the previous certificate, and wherein the stored data structure is updated using data extracted from the certificate when the expiration date is after a current date.
16 . A network traffic management system, comprising one or more traffic management apparatuses, client devices, or server devices, the network traffic management system comprising memory comprising programmed instructions stored thereon and one or more processors configured to be capable of executing the stored programmed instructions to:
receive a request for establishing an encrypted connection and obtaining a certificate responsive to the received request;
generate a content cache key for the obtained certificate;
retrieve, from the cache, a data structure comprising extracted data from a previous certificate using the generated content cache key for the obtained certificate, wherein the retrieved data structure is generated by:
validating the previous certificate by contacting an associated server to confirm accuracy of the extracted data; and
storing the previous certificate and the data structure comprising the verified extracted data in the cache during a previous established encrypted connection; and
initiate encryptographic operations using the retrieved data structure from the cache.
17 . The network traffic management system of claim 16 , wherein the one or more processors are further configured to be capable of executing the programmed instructions stored in the memory to:
receive the previous certificate for establishing the encrypted connection;
generate a previous content cache key using the previous certificate;
cache the data structure in the cache using the previous content cache key, wherein the data structure is generated using extracted data from the previous certificate and a revocation status; and
initiate encryptographic operations using the data structure.
18 . The network traffic management system of claim 16 , wherein the certificate or the previous certificate is received by a client and the certificate or the previous certificate is a client certificate.
19 . The network traffic management system of claim 16 , wherein the certificate or the previous certificate is received by a server and the certificate or the previous certificate is a server certificate.
20 . The network traffic management system of claim 19 , wherein the data structure includes an expiration date extracted from the previous certificate, and wherein the stored data structure is updated using data extracted from the certificate when the expiration date is after a current date.