Harvesting and distributing a certificate based on a DNS name
AssigneeZixCorp Systems, Inc.
InventorsBryan Adam Joyner, Kelly Sue Morrison, David Joseph Robertson
Life of this patent
Estimating the term…
Abstract
According to certain embodiments, a delivery manager comprises an interface and processing circuitry. The interface is configured to receive a certificate that a DNS associates with a DNS name of a first endpoint. The processing circuitry is configured to distribute the certificate to a second endpoint. The second endpoint is configured to store the certificate in a local memory of the second endpoint and, in response to a future determination to establish a connection with the first endpoint, use the certificate from the local memory of the second endpoint to establish transport layer security (TLS) for the connection.
Claims20
A method for use in a delivery manager, the method comprising:
- receiving a certificate that a Domain Name Service (DNS) associates with a DNS name of a first endpoint, wherein the certificate is a new certificate or an updated certificate;
- distributing the certificate to a second endpoint, the second endpoint configured to:
- store the certificate in a local memory of the second endpoint;
- and
- in response to a future determination to establish a connection with the first endpoint, use the certificate from the local memory of the second endpoint to establish transport layer security (TLS) for the connection;
- wherein distributing the certificate to the second endpoint is according to a pre-determined time period that corresponds to a regular interval for distributing any new or updated certificates, or distributing the certificate to the second endpoint is in response to the delivery manager receiving the certificate.
A delivery manager, comprising:
- an interface configured to receive a certificate that a Domain Name Service (DNS) associates with a DNS name of a first endpoint, wherein the certificate is a new certificate or an updated certificate;
- and
- processing circuitry configured to distribute the certificate to a second endpoint, the second endpoint configured to:
- store the certificate in a local memory of the second endpoint;
- and
- in response to a future determination to establish a connection with the first endpoint, use the certificate from the local memory of the second endpoint to establish transport layer security (TLS) for the connection;
- wherein the processing circuitry is configured to distribute the certificate to the second endpoint according to a pre-determined time period that corresponds to a regular interval for distributing any new or updated certificates, or in response to the delivery manager receiving the certificate.
A non-transitory computer readable medium storing logic that, when executed by processing circuitry of a delivery manager, is operable to cause the delivery manager to perform actions comprising:
- receiving a certificate that a Domain Name Service (DNS) associates with a DNS name of a first endpoint, wherein the certificate is a new certificate or an updated certificate;
- distributing the certificate to a second endpoint, the second endpoint configured to:
- store the certificate in a local memory of the second endpoint;
- and
- in response to a future determination to establish a connection with the first endpoint, use the certificate from the local memory of the second endpoint to establish transport layer security (TLS) for the connection;
- wherein distributing the certificate to the second endpoint is according to a pre-determined time period that corresponds to a regular interval for distributing any new or updated certificates, or in response to the delivery manager receiving the certificate.
Dependencies are inferred from the claim text.