Automatically determining an acceptable crl size based on system capability
AssigneeRed Hat, Inc.
InventorAndrew Wnuk
Life of this patent
Estimating the term…
Abstract
A certificate revocation list (CRL) deployment system loads a portion of test data that represents revoked certificates into a cache at periodic intervals and generates a CRL for a corresponding periodic interval using the test data that is loaded in the cache at that corresponding periodic interval. The CRL deployment system determines a CRL size that the server computing system is capable to support using the generated CRLs and notifies a user of the CRL size that the server computing system is capable to support.
Claims20
A method, implemented by a server computing system programmed to perform the following, comprising:
- loading, by the server computing system, a portion of test data that represents revoked certificates into a cache at periodic intervals;
- generating, by the server computing system, a CRL for a corresponding periodic interval using the test data that is loaded in the cache at that corresponding periodic interval;
- determining, by the server computing system, a CRL size that the server computing system is capable to support using the generated CRLs;
- and
- notifying, by the server computing system, a user of the CRL size that the server computing system is capable to support.
A system comprising:
- a persistent storage unit to store test data that represents revoked certificates for determining an acceptable size of a certificate revocation list (CRL) for a server;
- a cache;
- and
- a CRL deployment system, coupled to the persistent storage unit and cache, to load a portion of the test data into the cache at periodic intervals, to generate a CRL for a corresponding periodic interval using the test data that is loaded in the cache at that corresponding periodic interval, to determine a CRL size that the server is capable to support using the generated CRLs, and to notify a user of the CRL size that the server is capable to support.
A computer-readable storage medium including instructions that, when executed by a computer system, cause the computer system to perform a set of operations comprising:
- loading a portion of test data that represents revoked certificates into a cache at periodic intervals;
- generating a CRL for a corresponding periodic interval using the test data that is loaded in the cache at that corresponding periodic interval;
- determining a CRL size that the server computing system is capable to support using the generated CRLs;
- and
- notifying a user of the CRL size that the server computing system is capable to support.
Dependencies are inferred from the claim text.