Conference Papers Year : 2024

Enhancing the ACME Protocol to Automate the Management of All X.509 Web Certificates

David Morales
Ahmad Samer Wazan
David W. Chadwick
  • Function : Author
  • PersonId : 1509115
April Maramara
  • Function : Author
  • PersonId : 1509116
Kalil Cabral
  • Function : Author
  • PersonId : 1509117

Abstract

X.509 Public Key Infrastructures (PKIs) are widely used for managing X.509 Public Key Certificates (PKCs) to allow for secure communications and authentication on the Internet. PKCs are issued by a trusted third-party Certification Authority (CA), which is responsible for verifying the certificate requester’s information. Recent developments in web PKI show a high proliferation of Domain Validated (DV) certificates but a decline in Extended Validated (EV) certificates, indicating poor authentication of the entities behind web services. The ACME protocol facilitates the deployment of Web Certificates by automating their management. However, it is only limited to DV certificates. This paper proposes an enhancement to the ACME protocol for automating all types of Web X.509 PKCs by using W3C Verifiable Credentials (VCs) to assert a requester’s claims. We argue that any CA’s requirements for issuing a PKC can be expressed as a set of VCs, returned in a Verifiable Presentation (VP). We propose a generic communication workflow to request and present VPs, and provide proof-of-concept of the viability of our approach.
Embargoed file
Embargoed file
1 10 10
Year Month Jours
Avant la publication
Friday, January 1, 2027
Embargoed file
Friday, January 1, 2027
Please log in to request access to the document

Dates and versions

hal-04953440 , version 1 (18-02-2025)

Licence

Identifiers

Cite

David Morales, Ahmad Samer Wazan, David W. Chadwick, Romain Laborde, April Maramara, et al.. Enhancing the ACME Protocol to Automate the Management of All X.509 Web Certificates. 38th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC), Jun 2023, Poznan, Poland. pp.265-278, ⟨10.1007/978-3-031-56326-3_19⟩. ⟨hal-04953440⟩
0 View
0 Download

Altmetric

Share

More