I finally found time to wrap up everything I did in terms of PKI for OpenZiti
Here is a repo containing a full hands-on tutorial on bootstrapping trust for OpenZiti using only OpenSSL.
@TheLumberjack, could you please take a brief look and tell me if I am missing anything? Thanks in advance.