eu-digital-green-certificates / dgc-overview

This repository provides an overview over the EU Digital Green Certificates (DGC) project.
Apache License 2.0
209 stars 29 forks source link

TLS certificates #27

Closed PeterEbraert closed 3 years ago

PeterEbraert commented 3 years ago

We use a private PKI (not publicly trusted) to supply the certificates.

For example, our TLS-certificate will be not be self-signed, but will be signed by our own Issuing Certificate Authority (part of our private PKI).

The certificate of this Issuing Certificate Authority is signed by our Root Certificate Authority (part of our private PKI). The certificate of this Root Certificate Authority is self-signed. Is this supported?

Do we give you the entire trust chain when supplying the certificates?

PeterEbraert commented 3 years ago

Answer was provided in todays EU meeting. We will provide the certs of the complete trust chain when boarding.