I am working on some documentation to help understand the three PKIs that are used in the QuickStart example The following is a high level summary. Does this make any sense? Security overlay Three different PKIs are used in the QuickStart example Control plane: Controller overall network PKI, u…

[image] markamind: [Screenshot 2022-11-25 at 4.23.39 pm] PS… what it the purpose of the spurious intermediate certificate in the signing PKI… I imagine that its not used… and is an illustrative example… being spurious in nature :slight_smile:

You’ve done an excellent job summing this up! This is very close to how I would have written it all up. If this were a pull request to the doc site, I would only ask for cosmetic changes. I would reference $ZITI_PKI for the root pki path. That’s a variable established and referenced by the quicksta…

[image] TheLumberjack: This is an excellent summary and very clearly presented and if you wanted to put a pull request up against the docs site (ziti-doc) I’ll get around to incorporating it after this week sometime! Thanks for the feedback.. the summary is a part of a larger document that I …

As it is, it’s clear and helpful. Sure it’s not complete but it doesn’t make me ask too many extra questions. It’s better than we have currently, so anytime you want to contribute it back to the project, I think it will be relatively easy to accept. Until then, tweak what you want and put a pr up wh…

QuickStart Certificate Authority summary

Ziti Overlay

TheLumberjack November 25, 2022, 2:10pm 5

The purpose was to simply illustrate arbitrarily deep trust roots and to illustrate the ziti pki command can create certificate paths deeper that 1

1 Like

Controller v1.6.8 disconnects tunnelers

Topic		Replies	Views
General Architecture Questions General Questions	18	417	March 10, 2024
Creating certs for a remote private router General Questions	30	976	December 6, 2022
Totally custom, self-maintained PKI Ziti Overlay	6	487	August 25, 2022
Need Info on the signing.pem and cas.pem file Building/Development	1	147	November 24, 2023
Separate usage of a CA's pkey from a controller \| Feature Request Building/Development	10	214	May 7, 2024

QuickStart Certificate Authority summary

Related topics