ca: add comment about cross singing

edgelesssys · Jan 30, 2024 · a3e9a7f · a3e9a7f
1 parent 1826565
commit a3e9a7f
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/internal/ca/ca.go b/internal/ca/ca.go
@@ -23,6 +23,9 @@ type CA struct {
 	rootPEM     []byte
 
 	// The intermPrivKey is used for both the intermediate and meshCA certificates.
+	// This implements cross-signing for the leaf certificates.
+	// This is also implemented in MarbleRun, see:
+	// https://docs.edgeless.systems/marblerun/architecture/security#public-key-infrastructure-and-certificate-authority
 	intermMux     sync.RWMutex
 	intermPrivKey *ecdsa.PrivateKey