Volodymyr Khoroz 1cf5a72794 Feature: support multiple root CA certificates ...

This is needed to support the root CA renewal feature.
During the initial phase of that renewal, a server needs to send clients:
- A new root CA,
- A cross-signed copy of that new CA, so that clients can validate the chain of trust using a previous root CA,
- And a previous root CA, so that clients can still trust the existing server TLS certificates during interregnum.

Signed-off-by: Volodymyr Khoroz <volodymyr.khoroz@foundries.io>

2024-06-17 19:26:56 +03:00

5.4 KiB

Raw Permalink Blame History

View Raw