bcgov / bcgov/platform-developer-docs

Consider adding ca-certificate chain to Configuring SSL/TLS Certificates

Open Beginner friendly
#368 0 comments 1 reaction 0 assignees View on GitHub
Dominant language
Shell
Stars
5
Forks
10
Avg merge
2d 1h
Merged PRs (30d)
2

Description

As outlined in [GitHub Discussions #329](https://github.com/bcgov/bcgov-community-discussions/discussions/329) there is a new CA Certificate chain provided by the cert provider via OCIO (July 2025).

It would be handy to place this chain order in the Private Cloud Tech Docs here: https://developer.gov.bc.ca/docs/default/component/platform-developer-docs/docs/build-deploy-and-maintain-apps/deploy-an-application/#3-configuring-ssltls-certificates

```
tls:
termination: edge
certificate: |-
-----BEGIN CERTIFICATE-----
URL
-----END CERTIFICATE-----
key: |-
-----BEGIN PRIVATE KEY-----
KEY
-----END PRIVATE KEY-----
caCertificate: |-
-----BEGIN CERTIFICATE-----
OV TLS CA
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
USERTrust RSA
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
Sectigo Public Server Root
-----END CERTIFICATE-----
insecureEdgeTerminationPolicy: Redirect
```

Contributor guide

No contributing guide indexed for this repository

Research direction

Start at the linked “Configuring SSL/TLS Certificates” section in the Private Cloud Tech Docs and review the certificate example against the chain in this issue and Discussion #329. Done means the page documents the caCertificate chain in the correct order with a usable configuration example.

Written by the indexing model from the issue text.

Assessment

Domain
documentation
Issue type
Documentation
Difficulty
1/5
Estimated time
1-3 hours
Activity status
Quiet
Clarity
Clearly specified
Newbie friendliness
88/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.