Certificate Authority

From Tardis
Jump to: navigation, search

TARDIS has it's own certificate authority (CA) for issuing SSL certificates for services. This function is performed by Rassilon.

The documentation to make TARDIS certificates is in the `/root/CA` directory. Download the root certificate (for clients) below. All Tardis-issued certificates are 4096-bit by default, the CA has a lifespan of 10yrs, servers have 5yrs.


Certificate

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----