Explain (in comments) what cert_child object is about

svn path=/docs/repository-engine-objects.dot; revision=653

1 files changed, 9 insertions, 1 deletions

diff --git a/docs/repository-engine-objects.dot b/docs/repository-engine-objects.dot
index 44d0450d..6ceb046e 100644
--- a/docs/repository-engine-objects.dot
+++ b/docs/repository-engine-objects.dot
@@ -31,12 +31,20 @@ digraph rpki_engine_objects {
 	// Objects created on the fly by the RPKI engine
 	node		[ color=green ];
 	ca		[ label="CA|{CRL #|Last Issued Serial #}" ];
-	child_cert	[ label="Child Certificate" ];
 	ee_cert		[ label="EE Certificate" ];
 	roa		[ label="ROA" ];
 	manifest	[ label="Manifest" ];
 	ca_detail	[ label="CA Detail|{Private Key|Public Key|Latest CA Certificate|Latest CRL}" ];
 
+	// This one is a table of everything we have ever issued to
+	// this child, not to be confused with what's -currently-
+	// issued to this child.  Some question whether this hangs off
+	// ca or ca_detail, but we -think- hanging off of ca_detail is
+	// correct because certificates are issued by a particular
+	// keypair.
+
+	child_cert	[ label="Child Certificate" ];
+
 	// One-many mappings
 	edge [ color=blue, arrowtail=none, arrowhead=crow ];
 	self -> biz_sign;