Extensible unified multi-service certificate and certificate revocation list management

A computer program product, comprising:

• at least one non-transitory computer readable medium storing program code for managing digital certificates on a computerized platform, the program code, when executed by processing circuitry, causing the processing circuitry to:
• install a set of network services on the computerized platform, each one of the network services in the set of network services comprising an application program executing in the computerized platform that performs secure communications over a communication network that is connected to the computerized platform,
• maintain at least one certificate store configured and arranged to store digital certificates and certificate revocation lists in the computerized platform, a set of digital certificates used by the network services, and a set of certificate revocation lists, each one of the network services requiring that at least one of the digital certificates in the set of digital certificates be maintained on the computerized platform for the network service to perform secure communications over the communication network, and each one of the certificate revocation lists comprising a list of digital certificates that have been revoked, and
• manage, through a single access point on the computerized platform providing access to the certificate store, the set of digital certificates and the set of certificate revocation lists maintained in the certificate store, the single access point comprising an application programming interface that receives certificate commands from multiple components executing in the computerized platform, the multiple components executing in the computerized platform from which the certificate commands are received by the application programming interface including the set of network services installed on the computerized platform, certificate management graphical user interface logic that receives certificate commands from a graphical user interface displayed in a display device of the computerized platform, and certificate command-line interface logic that receives certificate commands from a command-line interface displayed in the display device of the computerized platform, the set of digital certificates and the set of certificate revocation lists being managed through the single access point at least in part by:
• assigning one or more tags to each digital certificate in the set of digital certificates, one of the tags assigned to each digital certificate indicating at least one network service in the set of network services that uses the digital certificate to perform secure communications over the communication network using a communication protocol that is based on public-key cryptography,
• assigning one or more tags to each certificate revocation list in the set of certificate revocation lists, one of the tags assigned to each certificate revocation list comprising a service tag indicating at least one network service in the set of network services that uses the certification revocation list,
• performing a set of certificate management operations on the digital certificates, in response to receipt of corresponding commands from the multiple components through the application programming interface, at least one of the certificate management operations selecting a subset of the digital certificates from the set of digital certificates using at least one of the tags assigned to the digital certificates, and
• performing a set of certificate revocation list management operations through the single access point to the certificate store, at least one of the certificate revocation list management operations selecting a subset of the certificate revocation lists from the set of certificate revocation lists using at least one of the tags assigned to the certificate revocation lists.

A computerized platform, comprising:

• processing circuitry;
• a display device;
• and
• at least one memory having program code stored thereon for managing digital certificates on a computerized platform, wherein the program code, when executed by the processing circuitry, causes the processing circuitry to:
• install a set of network services on the computerized platform, each one of the network services in the set of network services comprising an application program executing in the computerized platform that performs secure communications over a communication network that is connected to the computerized platform,
• maintain at least one certificate store configured and arranged to store digital certificates and certificate revocation lists in the computerized platform, a set of digital certificates used by the network services, and a set of certificate revocation lists, each one of the network services requiring that at least one of the digital certificates in the set of digital certificates be maintained on the computerized platform for the network service to perform secure communications over the communication network, and each one of the certificate revocation lists comprising a list of digital certificates that have been revoked, and
• manage, through a single access point on the computerized platform providing access to the certificate store, the set of digital certificates and the set of certificate revocation lists maintained in the certificate store, the single access point comprising an application programming interface that receives certificate commands from multiple components executing in the computerized platform, the multiple components executing in the computerized platform from which the certificate commands are received by the application programming interface including the set of network services installed on the computerized platform, certificate management graphical user interface logic that receives certificate commands from a graphical user interface displayed in the display device of the computerized platform, and certificate command-line interface logic that receives certificate commands from a command-line interface displayed in the display device of the computerized platform, the set of digital certificates and the set of certificate revocation lists being managed through the single access point at least in part by:
• assigning one or more tags to each digital certificate in the set of digital certificates, one of the tags assigned to each digital certificate indicating at least one network service in the set of network services that uses the digital certificate to perform secure communications over the communication network using a communication protocol that is based on public-key cryptography,
• assigning one or more tags to each certificate revocation list in the set of certificate revocation lists, one of the tags assigned to each certificate revocation list comprising a service tag indicating at least one network service in the set of network services that uses the certification revocation list,
• performing a set of certificate management operations on the digital certificates, in response to receipt of corresponding commands from the multiple components through the application programming interface, at least one of the certificate management operations selecting a subset of the digital certificates from the set of digital certificates using at least one of the tags assigned to the digital certificates, and
• performing a set of certificate revocation list management operations through the single access point to the certificate store, at least one of the certificate revocation list management operations selecting a subset of the certificate revocation lists from the set of certificate revocation lists using at least one of the tags assigned to the certificate revocation lists.