Repository navigation

create-pki: add the verifier's dNSName to the signing cert (same key and root) - #80

Merged

leifj merged 2 commits into

mainfrom

feat/signing-cert-verifier-san

Oct 21, 2026

Merged

create-pki: add the verifier's dNSName to the signing cert (same key and root)#80
leifj merged 2 commits into
mainfrom
feat/signing-cert-verifier-san

Commits on Oct 20, 2026
- create-pki: SIGNING_CERT_VERIFIER_HOST adds the verifier's dNSName by re-issuing the signing cert from the same key and root
  
  leifj
  and
  claude
  committed
  4a6c4db
- create-pki: verifier SAN re-issue is opt-in per environment (values.verifier.signingCertDnsSan), set only for gdc
  
  leifj
  and
  claude
  committed
  9be835f