bcgov / bcgov/platform-developer-docs
Consider adding ca-certificate chain to Configuring SSL/TLS Certificates
- Dominant language
- Shell
- Stars
- 5
- Forks
- 10
- Avg merge
- 2d 1h
- Merged PRs (30d)
- 2
Description
As outlined in [GitHub Discussions #329](https://github.com/bcgov/bcgov-community-discussions/discussions/329) there is a new CA Certificate chain provided by the cert provider via OCIO (July 2025).
It would be handy to place this chain order in the Private Cloud Tech Docs here: https://developer.gov.bc.ca/docs/default/component/platform-developer-docs/docs/build-deploy-and-maintain-apps/deploy-an-application/#3-configuring-ssltls-certificates
```
tls:
termination: edge
certificate: |-
-----BEGIN CERTIFICATE-----
URL
-----END CERTIFICATE-----
key: |-
-----BEGIN PRIVATE KEY-----
KEY
-----END PRIVATE KEY-----
caCertificate: |-
-----BEGIN CERTIFICATE-----
OV TLS CA
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
USERTrust RSA
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
Sectigo Public Server Root
-----END CERTIFICATE-----
insecureEdgeTerminationPolicy: Redirect
```
Contributor guide
No contributing guide indexed for this repository
Research direction
Start at the linked “Configuring SSL/TLS Certificates” section in the Private Cloud Tech Docs and review the certificate example against the chain in this issue and Discussion #329. Done means the page documents the caCertificate chain in the correct order with a usable configuration example.
Written by the indexing model from the issue text.
Assessment
- Domain
- documentation
- Issue type
- Documentation
- Difficulty
- 1/5
- Estimated time
- 1-3 hours
- Activity status
- Quiet
- Clarity
- Clearly specified
- Newbie friendliness
- 88/100