jschoubben 98f5d34610 route-proxy: an empty ACME_CA_BUNDLE means the system trust store ...

Piece A of ADR 0056 (selectable issuer). A provider that serves an empty root —
public-acme, whose root already ships in the OS trust store — leaves route-proxy's
CA bundle file existing but empty, because the mesh writes it unconditionally from
${bound:acme-ca:root}. Read that as "trust the system roots", the same as an unset
bundle, instead of failing with "holds no certificate this can trust". A bundle
that holds bytes but no parseable certificate is still refused.

Claude-Session: https://claude.ai/code/session_01LrgweAeERJYBg88c5cKDzF

2026-09-10 00:22:06 +02:00

..

Dockerfile

A route is a grant, and a provider is told where its consumer is

2026-08-31 02:43:19 +02:00

main.go

route-proxy: an empty ACME_CA_BUNDLE means the system trust store

2026-09-10 00:22:06 +02:00

routes_test.go

The proxy can obtain a public certificate, and asks staging by default

2026-08-31 19:35:34 +02:00