novox/mesh-controller
3
0
Fork 0
Code Issues Pull Requests 4 Releases Wiki Activity

The trust module renders the authority it was bound to #144

Closed
jschoubben wants to merge 0 commits from feat/ca-trust into main
pull from: feat/ca-trust
merge into: :main
Conversation 1 Commits - Files Changed -
jschoubben commented 2026-09-29 13:28:21 +00:00
Owner
Copy Link
Copy Source

novox/hq ADR 0147.

ca-trust carries a script and a unit, and the one thing neither can state is where the authority is — that is a fact about the mesh, not about the module. So this checks the rendering: the script fetches from the bound address, is written executable, and the unit runs it both ways, install and remove.

The verification itself — a plain client trusting an internal name on a machine holding the module, and failing on one that does not — is the lab's, and cannot be had here.

novox/hq ADR 0147. `ca-trust` carries a script and a unit, and the one thing neither can state is where the authority is — that is a fact about the mesh, not about the module. So this checks the rendering: the script fetches from the bound address, is written executable, and the unit runs it both ways, `install` and `remove`. The verification itself — a plain client trusting an internal name on a machine holding the module, and failing on one that does not — is the lab's, and cannot be had here.
jschoubben added 1 commit 2026-09-29 13:28:21 +00:00
The trust module renders the authority it was bound to e51c94dcb5 
novox/hq ADR 0147. ca-trust carries a script and a unit; the one thing
neither can state is where the authority is, because that is a fact about
the mesh. This checks the rendering — the script fetches from the bound
address and is executable, and the unit runs it both ways, install and
remove. The verification itself is the lab's.
jschoubben commented 2026-09-29 14:07:56 +00:00
Author
Owner
Copy Link
Copy Source

Closed as already merged: this branch was the base for fix/the-mesh-makes-its-own-bus-certificate, so #145 carried The trust module renders the authority it was bound to onto main with it. Nothing here is unmerged — internal/catalogue/catrust_manifest_test.go is on main at e51c94d.

Closed as already merged: this branch was the base for `fix/the-mesh-makes-its-own-bus-certificate`, so #145 carried `The trust module renders the authority it was bound to` onto main with it. Nothing here is unmerged — `internal/catalogue/catrust_manifest_test.go` is on main at e51c94d.
jschoubben closed this pull request 2026-09-29 14:07:56 +00:00

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Assignees
Clear assignees
jschoubben miel.truyen
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: novox/mesh-controller#144