Red Hat, Inc.

Stephen John Gallagher

Dmitri Pal

Simo Sorce

David Howells

John Ross Dennis

Yassir Elley

A computing machine creates a local certificate authority (CA) that has certificate signing authority, creates a certificate signing request (CSR) that includes data of a local service that is hosted by the computing machine, creates a service certificate for the local service using at least a portion of the data in the CSR, signs the service certificate using a private key of the local CA, and provides the service certificate to the local service. The private key is stored locally on the computing machine.

Creating a digital certificate for a service using a local certificate authority

According to one example, a method performed by a computing system includes determining that a size of key data to be stored within a kernel memory is greater than a threshold value. The threshold value is based on a size value associated with maintaining the key data outside of the kernel memory. The method further includes allocating a block of memory within a volatile memory store, the block of memory being outside the kernel memory, storing the key data within the block of memory, and storing, within the kernel memory, a pointer to the key data.

Kernel key handling

A user credential comprising a user password and a one-time password (OTP) may be provided to access a computing system. The user password is authenticated and the network connection status of the computing system is determined. If the computing system is offline, the user password and the OTP are stored in memory and the user is granted a first level of access to the computing system. Upon detecting that the network connection status of the computing system has changed to online, the user password and the OTP are provided to an authentication server for authentication. If the authentication of the user password and the OTP is successful, the user is granted a second level of access to the computing system, the second level of access being higher than the first level of access.

Password authentication

A policy manager running on a client device receives policy data from a domain controller comprising a directory server and a file server. The client device runs an operating system that does not natively support policy retrieval from the directory server and file server. The policy manager identifies a policy type of the received policy data and identifies a policy processing plug-in associated with the identified policy type. The policy processing plug-in is connected to the operating system on the client device through a plug-in interface. The policy manager provides the received policy data to the identified policy processing plug-in for processing.

Adopting policy objects for host-based access control

A computing machine creates a temporary certificate authority (CA) hosted locally by the computing machine, creates a service certificate for a local service being hosted by the computing machine, and signs the service certificate using a private key of the temporary CA. The private key is stored locally on the computing machine. The computing machine removes signing authority of the temporary CA, and provides the service certificate to the local service.

Creating a digital certificate for a service using a local certificate authority having temporary signing authority

An event logging interface on a computer system is used to record an event when an application hosted by the computer system encounters the event. The event logging interface receives data pertaining to an event from the application. Using the event logging interface, the computer system determines a logical target of the event, and determines one or more physical destinations referenced by the logical target. The data is then dispatched to one of the physical destinations.

Event logging application programming interface (API)

A method and system to refresh a data entry in a cache before the data entry expires. The system includes a client computing system coupled to a server via a network connection. In response to a request for data access, the client computing system locates a data entry in a cache and determines whether the data entry in the cache has exceeded a refresh timeout since a last update of the data entry. If the data entry in the cache has exceeded the refresh timeout, the client computing system retrieves the data entry found in the cache in response to the request without waiting for the data entry to be refreshed, and requests a refresh of the data entry from the server via the network connection.

Growing community of inventors

Methuen, MA, United States of America

Stephen John Gallagher