Skip to content

pki: add CA trust bundles for OTE and prod#19

Merged
csnitker-godaddy merged 2 commits intomainfrom
pki
Apr 6, 2026
Merged

pki: add CA trust bundles for OTE and prod#19
csnitker-godaddy merged 2 commits intomainfrom
pki

Conversation

@csnitker-godaddy
Copy link
Copy Markdown
Contributor

Summary

  • Adds public CA certificate bundles (ca-bundle.pem) for OTE and prod environments
  • Includes documentation covering certificate hierarchy, bundle format, usage examples (Go, Rust, OpenSSL), rotation policy, and verification commands
  • Two-level CA hierarchy: root CA (gd-domain-parking) with per-region sub-CAs for us-east-1, us-west-2, and ap-south-1 (prod only)

Test plan

  • Verify OTE bundle loads correctly in SDK TLS config
  • Verify prod bundle loads correctly in SDK TLS config
  • Confirm openssl verify succeeds against each sub-CA using the respective bundle

🤖 Generated with Claude Code

Public CA certificates for SDK consumers and service operators to verify
TLS connections to ANS endpoints. Two-level hierarchy: root CA with
per-region sub-CAs for us-east-1, us-west-2, and ap-south-1 (prod only).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@csnitker-godaddy csnitker-godaddy requested a review from a team April 6, 2026 15:13
Wrap long lines to 80 chars, add language tags to fenced code blocks,
and add trailing newline.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@csnitker-godaddy csnitker-godaddy added this pull request to the merge queue Apr 6, 2026
Merged via the queue into main with commit 4970f5e Apr 6, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants