From 49e75052a48fa266850dc0ed2f48af306ee400e2 Mon Sep 17 00:00:00 2001 From: Rob Austein Date: Tue, 5 Jun 2007 19:01:26 +0000 Subject: Explain (in comments) what cert_child object is about svn path=/docs/repository-engine-objects.dot; revision=653 --- docs/repository-engine-objects.dot | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/docs/repository-engine-objects.dot b/docs/repository-engine-objects.dot index 44d0450d..6ceb046e 100644 --- a/docs/repository-engine-objects.dot +++ b/docs/repository-engine-objects.dot @@ -31,12 +31,20 @@ digraph rpki_engine_objects { // Objects created on the fly by the RPKI engine node [ color=green ]; ca [ label="CA|{CRL #|Last Issued Serial #}" ]; - child_cert [ label="Child Certificate" ]; ee_cert [ label="EE Certificate" ]; roa [ label="ROA" ]; manifest [ label="Manifest" ]; ca_detail [ label="CA Detail|{Private Key|Public Key|Latest CA Certificate|Latest CRL}" ]; + // This one is a table of everything we have ever issued to + // this child, not to be confused with what's -currently- + // issued to this child. Some question whether this hangs off + // ca or ca_detail, but we -think- hanging off of ca_detail is + // correct because certificates are issued by a particular + // keypair. + + child_cert [ label="Child Certificate" ]; + // One-many mappings edge [ color=blue, arrowtail=none, arrowhead=crow ]; self -> biz_sign; -- cgit v1.2.3