secrets-and-pki: add real evidence for the asymmetric-trust and cert-renewal claims

Browse Source

Step 5 re-audit. Caddyfile contrast (skip-verify default vs Vault's
real cert verification block) shown as text, IP/domain genericized.
The cert-rebuild hook script's real 19-day-expiry story is shown as a
screenshot instead of a text excerpt - the script has a hardcoded P12
password in its body, so a screenshot with that one line blurred shows
the actual guard logic in full without a text-copy risk of the
password ever landing in a file.

...

This commit is contained in:

thesabear committed 2026-08-28 21:48:09 +03:00

1 parent 0186966476

commit f4ef56d229

2 files changed

+26 -1

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

assets/secrets-and-pki-cert-rebuild-hook.png

BIN

Binary file not shown.

Side by Side After Width:  |  Height:  |  Size: 164 KiB