Public key infrastructure exchange using netconf for Openflow enabled switches
Generating PKI credentials for authenticating a networking appliance attempting to attach to a network includes: receiving a certificate signing request (CSR) from the networking appliance, wherein the CSR comprises credential data associated with an identity of the networking appliance; generating an appliance certificate based on the credential data and a certificate authority (CA) certificate associated with the computer; and returning the appliance certificate to the networking appliance.
1. A computer implemented method for generating PKI credentials for authenticating a networking appliance attempting to attach to a network, comprising:
sending, by the computer, to the networking appliance an instruction to generate a certificate signing request (CSR);
receiving, by the computer, the certificate signing request (CSR) from the networking appliance,
wherein the CSR comprises credential data associated with an identity of the networking appliance;
generating, by the computer, an appliance certificate based on the credential data and a certificate authority (CA) certificate associated with the computer; and
returning, by the computer, the appliance certificate to the networking appliance, wherein returning the appliance certificate comprises generating a NETCONF message encapsulating the appliance certificate.
2. The method of claim 1 , wherein the credential data comprises identity data encrypted using a private key associated with the networking appliance.
3. The method of claim 2 , wherein the credential data comprises a public key associated with the private key.
4. The method of claim 1 , wherein the CSR is encapsulated in a NETCONF message.
5. The method of claim 1 , wherein the networking appliance comprises a virtual switch.
6. The method of claim 1 , comprising:
saving, by the computer, the appliance certificate in a database accessible by the computer.
7. The method of claim 1 , comprising:
saving, by the computer, the CSR in a database accessible by the computer.
8. The method of claim 1 , wherein the computer comprises a software-defined-networking controller.
9. A system for generating PKI credentials for authenticating a networking appliance attempting to attach to a network, comprising:
a memory device storing executable instructions; and
a processor in communication with the memory device, wherein executing the executable instructions by the processor causes the processor to:
send to the networking appliance an instruction to generate a certificate signing request (CSR);
receive the certificate signing request (CSR) from the networking appliance,
wherein the CSR comprises credential data associated with an identity of the networking appliance;
generate an appliance certificate based on the credential data and a certificate authority (CA) certificate associated with the computer; and
return the appliance certificate to the networking appliance, wherein returning the appliance certificate comprises generating a NETCONF message encapsulating the appliance certificate.
10. The system of claim 9 , wherein the credential data comprises identity data encrypted using a private key associated with the networking appliance.
11. The system of claim 10 , wherein the credential data comprises a public key associated with the private key.
12. The system of claim 9 , wherein the CSR is encapsulated in a NETCONF message.
13. The system of claim 9 , wherein the networking appliance comprises a virtual switch.
14. The system of claim 9 , wherein executing the executable instructions by the processor causes the processor to:
save the appliance certificate in a database accessible by the processor.
15. The system of claim 9 , wherein executing the executable instructions by the processor causes the processor to:
save the CSR in a database accessible by the processor.
16. The system of claim 9 , comprising a software-defined-networking controller.
17. A computer implemented method for generating PKI credentials for authenticating a networking appliance attempting to attach to a network, comprising:
sending, by the computer, to the networking appliance an instruction to generate a certificate signing request (CSR);
receiving, by the computer, the certificate signing request (CSR) from the networking appliance,
wherein the CSR comprises credential data associated with an identity of the networking appliance and wherein the CSR is encapsulated in a NETCONF message;
generating, by the computer, an appliance certificate based on the credential data and a certificate authority (CA) certificate associated with the computer; and
returning, by the computer, the appliance certificate to the networking appliance.
18. A system for generating PKI credentials for authenticating a networking appliance attempting to attach to a network, comprising:
a memory device storing executable instructions; and
a processor in communication with the memory device, wherein executing the executable instructions by the processor causes the processor to:
send to the networking appliance an instruction to generate a certificate signing request (CSR) wherein the CSR is encapsulated in a NETCONF message;
receive the certificate signing request (CSR) from the networking appliance,
wherein the CSR comprises credential data associated with an identity of the networking appliance;
generate an appliance certificate based on the credential data and a certificate authority (CA) certificate associated with the computer; and
return the appliance certificate to the networking appliance.