feat: port legacy TSYS-CA (admin-code PKI + tsys-bits) [#769][#783]

Excluded admin-code/*SECRETS.inc (real Nitrokey HSM PINs in the public
source repo) — SECRETS.inc.example template added in their place.
Rotation/history-purge ruling pending in #783. legacy-* trees exempt
from lint/pointer checks (historical verbatim code).

https://projects.knownelement.com/issues/769#note-4152
This commit is contained in:
2026-09-04 07:01:46 -05:00
parent 2eca50490d
commit af7c0f3478
29 changed files with 738 additions and 3 deletions
+14
View File
@@ -0,0 +1,14 @@
blockdiag {
"Offline Root CA" -> "Online Long Lived Intermediate CA";
"Offline Root CA" -> "Online Long Lived Intermediate CA" -> "TSYS - Corporate CA - USA";
"Offline Root CA" -> "Online Long Lived Intermediate CA" -> "TSYS - Corporate CA - International";
"Offline Root CA" -> "Online Long Lived Intermediate CA" -> "Suborbital - PocketMesh - General CA - USA";
"Offline Root CA" -> "Online Long Lived Intermediate CA" -> "Suborbital - PocketMesh - General CA - International";
"Offline Root CA" -> "Online Long Lived Intermediate CA" -> "Suborbital - SkyMesh - General CA - USA";
"Offline Root CA" -> "Online Long Lived Intermediate CA" -> "RackRental- General CA - USA";
"Offline Root CA" -> "Online Long Lived Intermediate CA" -> "RackRental- International CA";
"Offline Root CA" -> "Online Long Lived Intermediate CA" -> "USG CA" -> "RackRental - USG CA";
"Offline Root CA" -> "Online Long Lived Intermediate CA" -> "USG CA" -> "Suborbital - PocketMesh - USG CA";
"Offline Root CA" -> "Online Long Lived Intermediate CA" -> "USG CA" -> "Suborbital - SkyMesh - USG CA";
}