Skip to content

Commit

Permalink
RS-002: Clarify meaning of "peer" in gateway certs
Browse files Browse the repository at this point in the history
  • Loading branch information
gnarea committed Jul 19, 2024
1 parent 2453702 commit f19810e
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion rs002-pki.md
Original file line number Diff line number Diff line change
Expand Up @@ -91,7 +91,7 @@ Where, `limit` specifies how many parcels can be sent within a given number of s

### Gateway Certificate

Each gateway has at least two certificates for the same long-term key pair: One self-issued and one certificate issued by each of its peers. Consequently, every private gateway has exactly two certificates because it has exactly one peer, while a Internet gateway may have more certificates.
Each gateway has at least two certificates for the same long-term key pair: One self-issued and one certificate issued by each of its peer gateways. Consequently, every private gateway has exactly two certificates because it has exactly one peer, while a Internet gateway may have more certificates.

Self-issued certificates MUST only be used to issue certificates to peers, and therefore such certificates will be the root for a PDA or a [Cargo Delivery Authorization (CDA)](#cargo-delivery-authorization-cda). Self-issued certificates MUST NOT be used to sign channel or binding messages. Peers MAY use the self-issued certificate to encrypt payloads when not using the Channel Session Protocol.

Expand Down

0 comments on commit f19810e

Please sign in to comment.