luxolus
/
open-consul
2
0
Fork 0
Code Issues 1 Pull Requests Packages Releases Wiki Activity

fix typo and add a TODO section for the remaining stuff

This commit is contained in:
Dhia Ayachi 2021-07-09 15:24:16 -04:00 committed by Daniel Nephin
parent 8e93c6ae1e
commit 724248e339
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
docs/service-mesh/ca/README.md
View File

@ -1,6 +1,6 @@
# Certificate Authority (Connect CA)
The Certificate Authority subsystem manages a CA trust chain for issuing certificates to
The Certificate Authority Subsystem manages a CA trust chain for issuing certificates to
services and client agents (via auto-encrypt and auto-config).
The code for the Certificate Authority is in the following packages:
@ -93,10 +93,11 @@ Periodic (or background) opeartions are started automatically by the Consul lead
2. (via in-process call to `RPC.ConnectCA.Sign`) - called by auto-encrypt to sign a leaf cert for a client agent
3. called by Auto-Config to sign a leaf cert for a client agent
### detailed call flow
## detailed call flow
![CA Leader Sequence](./ca-leader-sequence.svg)
<sup>[source](./ca-leader-sequence.mmd)</sup>
- sequence diagram for leaf signing
####TODO:
- sequence diagram for leaf signing
- sequence diagram for CA cert rotation