mesh-networking

T

jschoubben 1fba76c768 route-proxy: an empty ACME_CA_BUNDLE means the system trust store

Piece A of ADR 0056 (selectable issuer). A provider that serves an empty root —
public-acme, whose root already ships in the OS trust store — leaves route-proxy's
CA bundle file existing but empty, because the mesh writes it unconditionally from
${bound:acme-ca:root}. Read that as "trust the system roots", the same as an unset
bundle, instead of failing with "holds no certificate this can trust". A bundle
that holds bytes but no parseable certificate is still refused.

Claude-Session: https://claude.ai/code/session_01LrgweAeERJYBg88c5cKDzF

2026-09-10 00:22:06 +02:00

modules/route-proxy/cmd/route-proxy

route-proxy: an empty ACME_CA_BUNDLE means the system trust store

2026-09-10 00:22:06 +02:00