Systems and methods for optimizing SSL handshake processing
First Claim
1. A method for enabling efficient SSL handshakes through precomputing of handshake messages, the method comprising:
- (a) receiving, by a device intermediary to a client and a server, a server certificate of the server;
(b) generating, by the device , one or more of;
(i) an SSL server certificate message comprising the received server certificate, (ii) an SSL client certificate request message, and (iii) an SSL hello done message;
(c) storing, by the device , the one or more generated messages prior to receiving an SSL client hello message identifying the server;
(d) receiving, by the device from the client, an SSL client hello message identifying the server; and
(e) transmitting, by the device to the client, an SSL server hello message and at least one of the one or more stored messages.
8 Assignments
0 Petitions
Accused Products
Abstract
A method for enabling efficient SSL handshakes through precomputing of handshake messages, the method includes: receiving, by an appliance, a server certificate identifying a server; generating, by the appliance, at least one of: (i) an SSL server certificate message comprising the received server certificate, (ii) an SSL client certificate request message, and (iii) an SSL hello done message; storing, by the appliance, the generated messages; receiving, by the appliance from a client, an SSL client hello message identifying the server; and transmitting, by the appliance to the client, an SSL server hello message and at least one of the stored messages. Corresponding systems are also described.
-
Citations
20 Claims
-
1. A method for enabling efficient SSL handshakes through precomputing of handshake messages, the method comprising:
-
(a) receiving, by a device intermediary to a client and a server, a server certificate of the server; (b) generating, by the device , one or more of;
(i) an SSL server certificate message comprising the received server certificate, (ii) an SSL client certificate request message, and (iii) an SSL hello done message;(c) storing, by the device , the one or more generated messages prior to receiving an SSL client hello message identifying the server; (d) receiving, by the device from the client, an SSL client hello message identifying the server; and (e) transmitting, by the device to the client, an SSL server hello message and at least one of the one or more stored messages. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10)
-
-
11. A computer implemented system for enabling efficient SSL handshakes through precomputing of handshake messages, the system comprising:
- a network device intermediary to a client and a server which
receives a server certificate of the server; generates one or more of;
(i) an SSL server certificate message comprising the received server certificate, (ii) an SSL client certificate request message, and (iii) an SSL hello done message;stores the one or more generated messages prior to receiving an SSL client hello message identifying the server; receives, from a client, an SSL client hello message identifying the server; and transmits, to the client, an SSL server hello message and at least one of the one or more stored messages. - View Dependent Claims (12, 13, 14, 15, 16, 17, 18, 19, 20)
- a network device intermediary to a client and a server which
Specification