Remote Key Server, a solution to manage TLS private keys and certificates in a distributed system

The Remote Key Server is a solution to manage TLS private keys and certificates in a distributed system. Distribution of sensitive material, especially private keys, requires to take care of the access, the storage, and the duration of the storage of this secrets on server nodes. In the context of a Content Delivery Network, HTTPS traffic requires to handle multiple content providers certificates and private_keys and distribute them across all the CDN nodes. This leads to difficult challenges over the secret managements and particularly security concerns with nodes storing every secret locally for an indefinite amount of time. The RKS proposes a simple model to:
  • secure secret distribution by limiting secret access to registered nodes only,
  • limit secret storage duration on a node to a configurable time to live,
  • ease secret management by providing a single configuration endpoint via API,
  • add crisis management solution to cut access to the RKS to specific nodes or an entire CDN in case of emergency.
The RKS is based on the Hashicorp Vault Open Source Software and provides an API on top of Vault's. For more information go to Remote Kay Server on GitHub (published under Mozilla Public License 2.0).

Recent posts / Page 6

  1. The Remote Key Server is a solution to manage TLS private keys and certificates in a distributed system. Distribution of sensitive material, especially private keys, requires to take care of the access, the storage, and the duration of the storage of this secrets on server nodes. In the context of a Content Delivery Network, HTTPS […]

  2. OW2con is the annual event of the OW2 community, it brings together technology experts, software architects, IT developers, project managers and decision-makers from all around the world. It will take place on June 17-18, 2020, this time fully online. The central theme of OW2online’20 is: “The Challenges of Full-Stack Open Source“. This background theme refers to […]

  3. FOSSology (from FOSS: Free and open-source software) is an open source license compliance software system and toolkit. As a toolkit you can run license, copyright and export control scans from the command line. As a system, a database and web ui are provided to give you a compliance workflow. Both functionalities of FOSSology are effectively used […]

  4. ETSI’s NGSI-LD primer ETSI has published a primer (manual for beginners) on NGSI-LD – a standard used in FIWARE platform and also Thing’in platform. The primer is focused on using NGSI-LD API in the context of FIWARE context-broker but it may be useful for other usage of NGSI-LD. Orange is member of ETSI and FIWARE […]

  5. Galera Operator makes it easy to manage highly-available Galera clusters deployed to Kubernetes and automates tasks related to operating a Galera cluster. Galera is a popular, free, open-source, multi-master system for mySQL, MariaDB and Percona XtraDB databases. Galera Operator is tested and built for MariaDB. Today, Galera Operator can: Create and Destroy Galera clusters from […]

  6. The Linux Foundation Networking (LFN) Developer & Testing Forum took place on 13-16 January 2020 in Prague, Czech Republic co-hosted with GSMA. It brought together more than 200 developers of the whole telco industry around ONAP, CNTT and OPNFV projects, with a special focus on VNF compliance and verification testing. This technical gathering provides a […]

  7. The seventh edition of Eclipse IoT Day Grenoble took place on February 14th, with an agenda focused on IoT (Internet of Things), Edge Computing and the Eclipse Foundation. Orange has strongly participated to the event by being part of the selection committee, sponsoring the conference and presenting two speeches: Heterogeneous Device Management with Eclipse OM2M […]

  8. The NMaaS (Network Monitoring as a Service) is an open source platform which enables to deploy and manage containerized applications on a pool of servers. This environment is oriented towards the management of network tests, of which it will graphically report the metrics collected in real time. It is more precisely a collection of open […]

  9. The French Windsurf Championships (1–3 November 2019) were an opportunity to experiment with the deployment and use of an aerial network. The new connectivity bubble concept made it possible to add a network coverage dedicated to broadcasting an immersive video on the site of the sporting event. The solution was developed based on open-source software […]

  10. OpTISAM is a tool for real-time and dynamic usage measurement and compliance verification, from classical architectures (standalone servers, laptops) to cloud/IoT environments. It optimizes the deployment of proprietary software (under its own license), based on predefined and adjustable scenarios. Visit OpTIMSAM repositories on GitHub: optisam-backend, optisam-ui. The code is published under Apache 2.0 license.