Dynamically generating and injecting trusted root certificates
AssigneeInternational Business Machines Corporation
InventorEtai Lev-Ran
Life of this patent
Estimating the term…
Abstract
In an example computer-implemented method, a trusted root certificate for an application running in a container is dynamically generated. The generated trusted root certificate is injected at runtime. The generated certificate is dynamically added to a list of trusted root certificates. A proxy associated with the application instance is authenticated based on the generated root trust certificate.
Claims19
A system, comprising:
- a hardware processor to:
- dynamically generate a trusted root certificate for an application instance running in a container in response to detecting a new workload;
- intercept a request for a trusted certificate from the application instance;
- inject, via the hardware processor, the generated trusted root certificate at runtime in response to detecting the request for the trusted certificate from the application instance;
- provide the generated certificate to the application instance, wherein the application instance is to authenticate a proxy associated with the application instance based on the dynamically generated root trust certificate;
- and
- dynamically add the generated certificate to an index file of trusted root certificates in response to detecting a request for the index file.
A computer-implemented method, comprising:
- dynamically generating a trusted root certificate for an application instance running in a container in response to detecting a new workload;
- intercepting a request for a trusted certificate from the application instance;
- injecting, via a hardware processor, the generated trusted root certificate at runtime in response to detecting the request for the trusted certificate from the application instance;
- providing the generated certificate to the application instance, wherein the application instance is to authenticate a proxy associated with the application instance based on the dynamically generated root trust certificate;
- and
- dynamically adding the generated trusted root certificate to an index file of trusted certificates in response to detecting a request for the index file.
A computer program product, the computer program product comprising a computer-readable storage medium having program code embodied therewith, wherein the computer readable storage medium is not a transitory signal per se, the program code executable by a processor to cause the processor to:
- dynamically generate a trusted root certificate for an application instance running in a container in response to detecting a new workload;
- intercept a request for a trusted certificate from the application instance;
- inject the generated trusted root certificate at runtime in response to detecting the request for the trusted certificate from the application instance;
- providing the generated certificate to the application instance, wherein the application instance is to authenticate a proxy associated with the application instance based on the dynamically generated root trust certificate;
- and
- dynamically add the generated certificate to an index file of trusted root certificates in response to detecting a request for the index file.
Dependencies are inferred from the claim text.