Certificate management method and device, electronic equipment and storage medium

Abstract

The embodiment of the invention discloses a certificate management method and device, electronic equipment and a storage medium. The method comprises the following steps: determining a target public key corresponding to the second encryption mode from the corresponding relationship between the encryption mode included in the target certificate issuing record corresponding to the certificate identifier and the public key, and adjusting a target byte representing a public key attribute in the full-text byte based on the target public key so as to enable the public key attribute represented by the adjusted target byte to be matched with the target public key, generating a new certificate according to the adjusted full-text byte, and issuing the new certificate to the node, the certificate identifier of the new certificate being the same as the certificate identifier of the original certificate. In the embodiment of the invention, the certificate identifier and the identity field attributeof the issued new certificate are the same as those of the original certificate, the consistency of identity verification between the new certificate and the original certificate is ensured, and theswitching use of the certificate between the first system corresponding to the first encryption mode and the second system corresponding to the second encryption mode is realized.

Description

technical field [0001] The present application relates to the field of computer technology, and in particular to a certificate management method, device, electronic equipment and storage medium. Background technique [0002] A digital certificate is a certificate issued by an authoritative organization (that is, a certificate management organization) and used to prove the identity of a user on the network. The process of issuing a digital certificate may also be called a certification authority (Certification Authority, CA) process. The traditional certificate issuing system includes the root CA and the multi-level CAs under the root CA. The root CA is the most trusted certificate issuing authority in the certificate issuing system and can issue certificates independently. The root CA generates certificates through self-signing and does not require Certificates are issued by other CA organizations. CA institutions at other levels can issue certificates to them by their sup...

AI Technical Summary

Problems solved by technology

When the device accesses the second system through the new certificate, the second system needs to re-authenticate the new certificate because the certificate identifier and the attributes of the identity field included in the new certificate issued by the certificate management authority are different from the original certificate. , the equipment and services represented by the verification result of the new certificate by the second system are different from the original certificate, and the identity verification consistency between the new certificate and the original certificate cannot be guaranteed

Images