Method and system for issuing CA certificate

Abstract

The invention discloses a method and a system for issuing a CA certificate. This method is as follows: 1) The domain name owner submits the CA certificate application for the domain name to the CA registrar proxy server; if the audit is passed, the domain name is submitted to the CA issuing indicator; 2) After the issuing indicator generates an issuing record for the domain name Notify the CA registration authority server to sign the domain name, and return the signature information to the issuing indicator; 3) The issuing indicator updates the issuing record and returns success information to the registrar proxy server; 4) The registrar proxy server sends the signature information to The domain name owner; 5) The domain name owner sends the signature information to the DNS server to configure the corresponding TXT record; 6) The registrar server queries the DNS server for the TXT record of the domain name, and if there is the domain name signature information, the CA The certificate is issued to the domain name owner; otherwise, the CA certificate is refused. The present invention can reduce the occurrence of wrongly issued domain names.

Description

technical field [0001] The invention relates to a method and a system for reducing wrong issuance of CA certificates, and belongs to the technical field of computer networks. Background technique [0002] CA certificates are usually issued to authorized users. This certificate is usually bound to a specific domain name in order to establish a secure TLS or SSL connection. Since the CA often cannot determine whether a specific user has an association or management relationship with a specific domain name, the CA often issues certificates for specific domain names to some malicious users by mistake, and these domain names do not belong to malicious users. Malicious users usually use some forged or illegal materials to prove that they are the owner of a specific domain name, and the CA organization cannot distinguish whether these materials are forged or illegal, so they mistakenly issue the CA certificate of the specific domain name to those who do not own the specific domain...

AI Technical Summary

Problems solved by technology

[0004] In order to solve the problem of wrongly issuing certificates to malicious users who claim to own a specific domain name but do not actually own a specific domain name, the present invention provides a method and system for reducing wrongly issued CA certificates. Compliance with domain name certificates issued by high-level agencies to reduce the occurrence of wrongly issued domain names

Images