CRYPTOGRAPHIC SERVICE WITH OUTPUT REDIRECTION

摘要

A method is provided for redirecting signed code images. The method includes the steps of receiving a code image from an origin device at a proxy machine, invoking a code signing client at the proxy machine, receiving signing request information indicating a requested cryptographic operation, sending a code signing request to a code signing server, receiving a signed code image at the code signing client from the code signing server, storing the signed code image in a restricted memory, invoking a software repository client at the proxy machine, and sending the signed code image from the restricted memory location to a software repository.

主权项

1. A method of redirecting signed code images, comprising:
receiving a code image from an origin device at a proxy machine; invoking a code signing client at said proxy machine in response to instructions received from said origin device; receiving signing request information at said code signing client from said origin device, said signing request information indicating a requested cryptographic operation; sending a code signing request from said code signing client to a code signing server, wherein said code signing request comprises said code image and said requested cryptographic operations; receiving a signed code image at said code signing client from said code signing server in response to said code signing request; storing said signed code image in a restricted memory location at said proxy machine; invoking a software repository client at said proxy machine with said code signing client; and sending said signed code image from said restricted memory location to a software repository with said software repository client.