US 12,463,994 B1
Handling of certificates by intermediate actors
Theron Tock, Mountain View, CA (US); Vimalkumar Jeyakumar, Los Altos, CA (US); Harish Kumar Bharat Singh, Pleasanton, CA (US); Ying Xie, Cupertino, CA (US); Vikram Kapoor, Cupertino, CA (US); and Yijou Chen, Cupertino, CA (US)
Assigned to Fortinet, Inc., Sunnyvale, CA (US)
Filed by LACEWORK, INC., Mountain View, CA (US)
Filed on Jan. 26, 2023, as Appl. No. 18/160,213.
Application 18/160,213 is a continuation in part of application No. 17/810,946, filed on Jul. 6, 2022, granted, now 11,895,135.
Application 17/810,946 is a continuation of application No. 17/704,981, filed on Mar. 25, 2022, abandoned.
Application 17/704,981 is a continuation in part of application No. 17/196,887, filed on Mar. 9, 2021, granted, now 11,689,553.
Application 17/196,887 is a continuation of application No. 16/459,207, filed on Jul. 1, 2019, granted, now 10,986,114, issued on Apr. 20, 2021.
Application 16/459,207 is a continuation of application No. 16/134,821, filed on Sep. 18, 2018, granted, now 10,419,469, issued on Sep. 17, 2019.
Claims priority of provisional application 63/240,818, filed on Sep. 3, 2021.
Claims priority of provisional application 62/650,971, filed on Mar. 30, 2018.
Claims priority of provisional application 62/590,986, filed on Nov. 27, 2017.
Int. Cl. H04L 29/06 (2006.01); G06F 9/455 (2018.01); G06F 9/54 (2006.01); G06F 16/901 (2019.01); G06F 16/9038 (2019.01); G06F 16/9535 (2019.01); G06F 16/9537 (2019.01); G06F 21/57 (2013.01); H04L 9/40 (2022.01); H04L 43/045 (2022.01); H04L 43/06 (2022.01); H04L 67/306 (2022.01); H04L 67/50 (2022.01); G06F 16/2455 (2019.01)
CPC H04L 63/1425 (2013.01) [G06F 9/455 (2013.01); G06F 9/545 (2013.01); G06F 16/9024 (2019.01); G06F 16/9038 (2019.01); G06F 16/9535 (2019.01); G06F 16/9537 (2019.01); G06F 21/57 (2013.01); H04L 43/045 (2013.01); H04L 43/06 (2013.01); H04L 63/10 (2013.01); H04L 67/306 (2013.01); H04L 67/535 (2022.05); G06F 16/2456 (2019.01)] 18 Claims
OG exemplary drawing
 
1. A method of handling of certificates by intermediate actors, the method comprising:
receiving, by a proxy and from a client, a client certificate and a first private key, wherein the client certificate comprises a short-term client certificate;
generating, by the proxy and based on the client certificate and the first private key, an intermediate certificate;
generating, by the proxy and in response to a request from the client to connect to a destination, an alternate certificate for the destination;
providing, to the client, a certificate chain comprising the alternate certificate, the intermediate certificate, and the client certificate;
receiving, from the client, a long-term client certificate and a second private key, wherein the long-term client certificate comprises a trusted root for the client;
generating the short-term client certificate and the first private key, wherein the short-term client certificate is signed using the second private key; and
providing, to the client, the short-term client certificate and the first private key.