From 653a16769a6837988eae00e4ff9b13b2c1915bf8 Mon Sep 17 00:00:00 2001 From: Remi Tricot-Le Breton Date: Mon, 12 Apr 2021 15:56:23 +0200 Subject: [PATCH] DOC: internals: update the SSL architecture schema Add the new relation between the CA file tree entries and the ckch instances introduced during CA file hot update implementation (see GitHub #1057). --- doc/internals/ssl_cert.dia | Bin 5704 -> 6700 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/doc/internals/ssl_cert.dia b/doc/internals/ssl_cert.dia index 422d306a3fdfedff0798074c14e09c9d7efccb2f..52496a10489ea063ce34d0d343ccb52b866f7e55 100644 GIT binary patch literal 6700 zcmV+{8q?(;iwFP!000021MOW~lcPqmexF}Kv>$ADpla#@RaiUTu*c(AhsPeDo$(2u z*w|1Y3AH#)gBH;Av>(oIKUIJ(=zbsqSAUy&&NuSkZRFf*@`xZ-uU=oxlVtJD&CSEZ z1M(kZCkZ3udrK6%H~;7OzH=i7-CTY9O4GJaFm)0~y_di1BuV6rmx-$d&b|BkYV1tz zZliD+Os}$0`M62whmrQl@n2tkG0T6hZt@e|6wXv~_Jwonjw9E(JAQIQ{@8ZClP}z8 z_r&*$F!tn-#yzLMTF<=5|Qz2!)CKCNDD-S62Km*2;~|ME^7Xm5Ncj;}Tgak&ilrmwHw z8$}T8&YV1xTnOv|Ii0|4nk)lxM!8NbWZBHz#pwQg9TPJi?@Ec3y1}jQt|eJ^E{QR7 z$SJaI!F9?JWpyRHzI#8Kgi)}+Xl`4{R8;!>+gEh`?4yVnP0l}ez1w+GB0x@Jz0>dP z845cF`TtVhaFe^qd=$$~ntN~qagMY&aU(ZWcknTpjYUYz-n&84+4-HZJl2`)2`Dqw zXHC&^v54F_9<4u!I~Nto&84GkXlJ5UYpjY&6|Hm~L6=i0zu~%4=pk|z7tkgZlECr)>`+QN zQ74`&2Es=12R9H_+*%y*a2dvCb8()GndkebW$e1>&XbY2pOdcj2*T*z@kg_8{~@E^ z(`Irn??1l2x(|aeUN{rEqKlJ9wY(E@d6u2yO}LCaHyV5&`qP>>Vg4AZbsgf+b-W+@ z-hb*^sYU2N-iOg*?oDc4(e4E`x|oSt6{|l_UrOvqle+)?{KNG>xrsM%+W3ZQUye9@ zInCxKw~=RF%Knu!x{56fom|@*NbDFn*3Lb8ImrdEUQTTB#yh=iA)6yxFgHp@ckbiJ38rd&<^|fd+LjHEgmg+=DaW3i z#XVWIeN!Dl@_SicM$-OHa8K47c@xRWjI}UuHMu^B-A{6%?Q6fi{Y8`O6}LUD)n>u- zz2x!G<+#D}KD%M*wr}cuF$XrM6@7^{rdPpz6i>p#H%@JF2VHL$f}7fc+%Nsa`vwEF znnCLacP2L#nm5yuxf{tp6v+HXKpG%z>%r!GaqeK0RyYC7HN)IHHJjl~i(@~XPwhdj zb?4eLmfzuA0#Hpf0IkPBixTz!NZv-#BY>?L*!&!9YBD`H-o@JSfC+%@rGw2K-;YN@ zIF*OVUjVdbKm!o<3q&gZq%E9e{x9R-fE~cj3&GA=%$ZHR_vS>v>wY1z=XMo^T%A8I z5(+aaQax@GZpux<0@*r6xJy=&lp#zdWJnFf1;#oih;&ItYN%Bu8WKi=V#8#X;9atj zq$Y(QK|13m#ep}PB%gtp1jHmDCIK<2Yhn@xViFLOfS3ftBp@aMF$suCKuqc_G3mpH zccV8S|In_F?Y_WASJg+ino4<-dbfc))sj$gCbSQ~{)E7P*UJEs3gC}D#q|q=nZ%g< z4W963D3epFU8y-ub1rAvOs={W$`rNIo5_Vk;=Tg3^_LqlejEW0sU@tX3}yM3<^_57 zXzZt^?8{hN(I(0~w*a{wF(l*xfVXCNODA$Jci;+h>Y*09(I+=j$7|_@!jlc+z)vj> zOq#}l8AePuP?up~DT10(1~Z4IfdnU(PUSmY#(|q@RV55;BSwhH1tu(WJ+KaA!36Q0 zU~qS_;O$KlM1&zC{IVj#%>_N7fN(=8Pb3~}LOdAa!4MCIcre6+As!6zV2B6zHy)fO zZCp>h#a!<5hZ;EaAZ-KObuYC@WJz^6DOJi{=mWh#2xIc1wJe>^?`|a$COy2govRjf7$u~ zqpta|&9tiIVrR&-J9M!#go~?3+L?Dmw!%GTGE4;%vU47%+Bs=u}YZOK19Xn;=wd=kK01kVI`CcrZRo(b?w^q05zhiTZ_wc54;RSI&7 zfpS@g(s9LI5FvP;Cf>lX#)R6^k&4q1OOl39xjw z11^P-7spFC0ssMkAocK>G44JjPB3+%sW#BQcmMR<=$#k12e@}uQ|_H*AkHY)i9n{! zI!#2h5upZEk_=%FrC@;#p;L^wRkQBX*!^>q>QYO?{h=mDMmp4zhnyJ75Edp?myZi{ zz5^MNx#Dstt4%V@_=O{NckC&Vw*LUxx4M-o|_tCoa<3T*RX+Ah$lU4OiiH94r-!Hgtqo2Q4F$fiWc zh?H(}lwO4~U`G04MsO1|LW&2|i&_zEv}H!jZud7UJ2GI%z*r2kDoZB97ce8{iEWEC z5JDLE^f(I{HfQ>PBFj8sOH>J|;xI5LJvAq1?Qqy%YE5wCl5ndt?n~%LP&@OVynaI->~J7kaqr zL^lc^EIV3L+ z7+HpC4>zJ|Vbyf5bd>^rb-?fzjsD)Kqt#8KVvhegjFwUY$gwQ>aF0H7GCOxaZMnz` zsdF6%jK#UBs&z&0-lS*TsPzQy77VCdHlVIR$Mkep@y{FcIi+dw6Wf+gY>717X*;K; zidCvuY#}C>AH=pqr*(@7L)_fn|M2eW7R#OINHs%x0p*H6&gB(oUaa~imGpO-$&Hum zOy=4oO0=mv@trLHN)PlFq2Nto^tH>OZaUK~X1bSFjeXM( zSsE37cVXQN&2MQ01)vtnLD7R3ABkfC7GG|gfxI>6^(6TW5NvhPDW_J22$l0Vd)$p5 zv+dssg8;Ukfo&PY-ffU}#Z8n=p1Lz<=_lV{KwdNC{WL2gYvohXoH&JIKGCa2#Jct% zPwvXkB~&MKC%DZWGhrbA2txp7&w;tKSOS1H1*lwVuGgYl7arS zC(HuadIL6yDRcw6LOfxGIsjb10XK0J9bfT*??#b3gQr|eE6VlLES*{{jW(of%dqHq z0qi{)>_Km#y{tIVN>-fcwk&R1qLw3@*wjqZYPn&lg7#P#qU+q+(xiIRLc-LsYWh=J z6_=`{KKn!s?p#k*{vQ%*A)%I#CYAc>B~oe|7w8vAa06TVfLX{Ob?MiY%!m|4)}pw< zhJ+z(*{TM$1SYR5yIO{AJ9<{ivo#T6cA93(b_+DNo@}dX?G}D;`^mOzCg|uWDe<|c z+G>IOpcVDg7K);>m4NH4c6FCYr>&pY_=K}*o9DPfGHsX1v<J{1c0@gv!JF_tKftJ zut7wx%ZOgNE1nq5UGWyNEv^qJMT8r)Q&+snSE48}=#U6xa6F^P+kjPLH!1@5z2e3YX^#QC8V0}Cd*2k)8BJ@ja$xWE|s+n!M3ZX3`P&)$k#efUGX$jRp zj$X4n6ueSL6JV>y*qQ-nss(8M==q5o#acR+4x|4*--}ff9hIm!yjo zHDJ{N8_?7YO*`Fq7fvJ(0KPo1dGqc|X)6T)S<{Wxrss>QARK4gD=*e^>S5OUTEm;} z6?+wj!Px=0EH-KaR5n9pn3L>tRyBYM9(HMKJit|BH{#uHyTMJf!EFW`K(436`9%W6 z`L^H|>=Wk;oOwrEB$1mHCfxuMpa<;vC)@svkfuC(Rl1NcRZcK%OV%ZiUNtN-h!n*b zvbh*if;eYpCK_9$!%k?&wLH+r%tG?2gdB?z!-r9GGgW29_sQT^JC7wD1p zjC-UJquA!mKC4BVT|Ahz(ju+0siEyPOQVQ&+bnH>5v79InJgRQp+Gh>gcObmB4&rC z=D3#oV+Ytkj0tHIq;aqetK2Rj)1>Oem?CPD(y>gnb!?(4n3-qYigCwMh;z&gEgnlR zYh_q#3mRgn$84ty8ZITIqBt^zjfd-GJtE_>D=Rq?=Bff%W7kO8zs%B9E!;7i)h~Df)~thd6FJMA z8C}G-P86ZDo0>4We4vC0eSj^*Y=Jv8VQNjpb5SM}c*wY1B-!c>Wy|Wyu2zJu9X%@* zp(98zvw69nYW3(4E|yN0Vr^x%vghpwirhD$O;x8=h9F zId*|kbC^S^IVd&v@=DF^R+@t%b5LXsip)WgIVdvsJc`WS0Db>GHQMt)n22}lf!J_B z2(l@`LnWIFoXKWPbm&DruI2%*ij6qIsjmVXcIikV?`x7OWS*eKZ7XlqW)(uX=2<&9 z?W4@t3gMdFV9#aa!nD1H8{KnHHrYB7Y=UIG+7%gv*A5j`vNXrlEMu=#7`tM{Nu3C( zXl(Yzg0bl>3q>@sHkSye(8jrln5c)ltz(85wM2&&MoD6sBq}U1lmN!uVk$(6MP13& zVkxaCSt*oa$u$!LNe@r7yjD8i;zTA(R$WdP3cLnnr4# zNDRfo5JQ0&3bgBiND4$!Ad&)+6o{nswq4I3reTjhe0=}Ux7zi@fjWR~6ei0G|4rom z<9LC5C#z8AMu|6*hE0COtIx7xf$GyY-=+Ovp*UH;>H>cF_}!bINAG|9Duv;%-~ICT z>lB7i<+i=r(+XbkGV^1{;j?*R^bUlMm+iCno7?f`}Dpm0;){Xs5|=h`xM zvqJDW;-KMHA90s{5qSVWoj(-9szKr~@0dYO8M14Qb zD^be>0C6o;qMnETbhX)AJ=D}0UIE1V1+ld2-NH%c|1$m!$ZCcxHI1-0g97f)h5_EV zslaeNdPN}(b^koa3(#B<#*H!UU8S)N|j46!^wy=`J zxXp%KAk(r_r(Y|C=x|3gV`PFyAWh~0krQoSwvrT9gEzVyc*TLcGG%HsfvIa4%F}$OAUV^)pZO5 zsNp~j2WmJ_!+{zO)Nr7N12w$2)bQP{ns&YZ6T+I!!kQ4n>@U9*xZQvs-~c>B4!{Y| zdE;(iOdvy0>jIv0C5h⪙>QxaucRTuo` z;5P@qIrz=NZw`KQ@SB6*9Q@|sHwV8t_|2b--#p#KXxETU4t_uIn}gpR@B{dP+_^&@ zblyf!1FRU}7}1VB=q554(+2`k#wi|Ja@C^5GHQ~JyBQo*@W4=&V@FJt-A6bnPgPNw zGOERjg>1_Zi+>f$`9;gCISE= C;r3_% literal 5704 zcmZ|PWm6k~f`#GYQXGm0iUoIfhvM!8hvM!|aR^YnG`K@>cZU{t4enB;xE1!^k2^bi zK0Gt$54@D|s2~12c!YD1kw?*&jNnUC$u>&=<*+%cl$E}y3l(idTe;JjK%sF<_O7euQ;=2eS>D_06X%SWpWCkdPA8cn zm~8SR{p{@CcH{>rjCRcJq)_=`% zWp7r=AM61&aE90D`F(wE4p`nh+Q->F_1ZLt7l|&q`4dGSb{>Z@AKkNUh)jL|zC}_J zY3vSu_iSds6m$pN1$|W(V+xbp`Nwbi78%msQ}P;l-i)Gzm#n6w^zWPl8+}$A z97{b@v!N~L%{-5g+dDV^ms5ti;3pENBkBjS`?AG8Rl^y-TwGXdtFhY|6cB`}Qu5VLH#K_Z-&~&m zXzZ{txyQcZP2kE#h2IwCvb%k0a0BYPPBZ#Tc%tz*rWU2Zgi4p4ys`(FN!o|=OHn_C z+ARYk>3c2zN!I((tQH_a=sQ>J0M0^~)3F&YoN=nN%n~T>Ec4#GJWE^O$|QU1q!rd( zk1H(Q@a}wJXLb#k)NPEOHu$ieB{8}28!zPv-!67K-P5Rtum_e=Z+C@kBWZKIU&&JZ zNSuCJqbA#;i9ikV4E{+Fb5`tFZiuyPUS1H;Tn=(JE&3jutBV?{;OPC-%`Lq%^x>V| zykCU^c%uOy&2za8w@YrPa5`*Ktb4_oRW19$hO(RE{QUWXc=JqE5x%ngxr)({jj%qG zw&+NlwmUv<+x3JA>s)2QCP_!Df?A0m*HbY48fiIGO0B-LEtD^d*a!KMT;nB-Jt9b@hH-bXc13J%8{`55ETP^TqNi( z29t?@3Pr+ey#>1b+!~!0cY7yB3dZ>h*GD&c?2r2;Z$sz1`1XOq*H`CF5J)!7bXWRy zPE$ub03&A|Mk;fWOnzyTV4~^{SCxrxWb9jpjhj<*(=&9=woR&KCp=sm^{aUAWhn?@ z{+iR5!nj2?+jEs%@SC5TkpGn~4S#m!zbs1o)>C~xk=?lpjuP?!cfx6_yD1eF#Qvj( zE^zU+LLKdyu)YjORxDv;F7iwG&EDidLjd7xpPF8@^RJJYNoPn7 z7i*}9&hVvOKX8xbnC&ian=`b_uWW}-~imUgE2iq62LUP0kF z33&1qLwTT&_P-SOAfz%N1I^9w{x@@r$iRQkXD_opl`Er3m?A#bty|1OvSU&g}3?{%t738p?+UIAEl&ef5%DmTgnC*9e;u3>m@pj$IF z&E@rvP~G)NG=W?khkSVl1d0>uGGrMB)qYYQt`;eL*I3nyZ9#*SH>^|d*Dy%IZ-)9h zM7KIpAGyNo{m{a09*P(DtM~8C*kBM_oxy&cd+n>Lru?Bb;1zy*f{ct?ip15%+k`=l z)aZq8ax#y-t_l@$Hj8#0VWDE&bC^fCoF$rwS@A%AIQqCL%2OauEIQyaPP1+@^U)o( zHSJpJwV&`ge3laYW_F8GBu@OV{}@{?KOHFHAUT-!!#9E^oUJl5FV1&IBgj<*-j707Poj4)UYweJn?aUW$q zmP`#d#MUfi2ibd5QiP@PHcVD#nyOwIEm`_wkKl7?O3$7-%uZ)~Xe##L*4E-Eg3u?) z#szpU0=dN`UJ)<9-Z6)dcS&&zFwxbqYX^%u;jtoYd#I%wPx=OFX^MmZk4a-RS8_bbH$vYDld80uJ359U;d7}hxe{7^HI?2$Vq^*F60F-$%CJIb9DN{WFrXTPHHKw( z=(N@$sKR=ej3ZX$f!Q;Utn9?$C7N=;fs8o<-b#7qITS9=Hqdt!E)Lm{@;?tZ&Nf_v z3~}xA400G>%vpl^YnipcTD4G%xjKOjwxz3i(EjUHUN1QK35NY%vLWWXvP9G$zAadm z-2baL@S$}!n(|#mG~^9HAu*;M^H~aqD&{o&_@&prbzZO#StGn$P?*uGD|@m_zf%Qh z7m6c=N)=WWWe-vBgY>0DTFwUF*c4yPcIiwOZN^}LieMTdB7-FIULfi>I^JSuO$&Y1!KUu| zhZhE|(&V^eQ9EJVB^U`;7;5a4KIvxHOw$d28PtI@EiE1BFwi3B`#!jb2aBkT*_a1bRd{^ zgw?Jh1q#w<16DL|!?qGw6decMql{*4%$GfDJky_pJVJfri%m(rnkp5HC(gy`Q%bn5 z_Vm32wb3DhS?NZqdTb-%JncycR&LI5_FA(q@wec}HRbK#g3z@C_@C&W2=8JdIG=U8 z-$g$uc=8Bcu)GG2IoHH3O(@NgUdAj{-Pv=pHL&CI(DPBTGz)T0-U%jf+jIkMU=9-; zem^D#lTU$H^6HyUUOby@4+qdJH2Yrb=OXsxH+`CCquvG&3nz0T2M~h#kD(pSV<1aG za1p*_if3Cj0t))nzWQ1ntVmmdue~XNClRn%FS1}BVQ60tH*v0wm5vw1C7-Di9)a$| zBf!8qD-^X8yCA}hB|)$SN}N1dKHii)Zmh=s^DVMCGoM=6fz6ruJtxJ^TIvPUmyOYz zgD;CKJeT4(Vsh!8m0~uA*jT#tZ~A3hCnDC}oJq0W9H;|<)+}bUK!WH}vjAd*entv) z)M@N_A3o%#3Q4g^`fiK=B9pcwK2|68;Y!1@`!E={%=NYYg;@^+WjguP`xd#9AS8Pb zU>jUWN~6Q$`m?`%+=Jf339oEz0fKlTbgsC_rMvM%dz|iFjM*LB46e`MT;d8|Z3eT( zmVoQiI5W6LG)MHuh?Phz87*0?1Di|0{5r9@!lRpF?=ieOYm3@XvIeAG`btHAz->9Z zWq)R}0Gy4DO{eRSe{d%10QWlLaUES`W**liXMQNW#tI#JtNu7EzjF#npt1ED3E~?r zl(6u!x(Hh=`0gahOmLX_yyc2n3=L-Psxf5dR@s>A>gxIS)cSCV8?gMef3vG*V6gfp zM8>GhcAS1W&${=iE~0@*Zu$c2;N(hE6d|9mKmT!5E%A{PC*GyCQ(`mu#ycfg4%NHk zB%(rxP0CutMEqg|diU2QToMtM9_B;>d<*))JE-!BUadQ;6JxHHk-8Re9sKiCa&vu! zt#gVbXWp^OyE!P}TYSKkPw1)DMbtyPIS_p(nnB9UM3CcwPYHFVar%u4~i0C6f zd-CFPhg=)2Ch@`&$~q9)ffU{_UQU7_fRGMD%qm+QreW<0_oJ}lkH10i#<2nO@-#JA z*r1Yfs}^_JZy=B9!QioQgZ@=iz9=CPS+0A@Q=IiSx2Z6AO{#s=C*{M&rYRMpU4Ti}u6?IF84&XY)mRPH|u50<^j&$&HQ?=4q9QZE8z>l^kWVCOD#%@uWFQ zv46mYa7_fO`~@8wj1yeq%$qNHi%E;@&rvfE=5!(Jozs z{2IQy#gv5IPlR*QjRBe8YAV4Lq#LuxiE=(X9YwQ%gbQ0w`66M`jdxVYXTwclE{vXs zK@^u~a#*jI^Pj_Jo$Q2JDPI5y%syNsHiOD=*9iXN=wMIZ+H$&qQHAf|I?+c!A_62! zYDA#cD8jro*fg7g^OA4qekrnWZ71ssqVM7h0^x#k@|Ac;CR1vCQl-6o6Q3$Bk>4&W zkF6^IU7a6`iv>OkJf9!sz5Rt@9~9P2Poc^jG#6gGiJ%uTc478VF&JGiEy_4cv>=z3 zhE{&974cX>`<(0swe=0@_){8&wgz~iQyWOOT#&wIgD6M zIYW?(UDWsPc1?1=ts=QF7x;It#}i}jWp-9gxu>B6-1my~ZzIWJ-rQPMuMQVYb2I-J zJ$C&5uc`TxRBb80!?h8fV}Wd)pgv7Yc&j$HYPDJ?8@*PoBp<79q?BPTBJ!{BQj z1sq!XWa$vasRfWYlNbNeEil_KDkB0S%1r~Qc6R4fFMp7#z-OR}so^@dz$dLc8Hl&F zk1p*_%>T$A#c$RnB6o8LFl#uZMQvz7fjVuW=|~C~P}aW6j7wuLpZoB3oTF$}3V=tj zhOFxiFbW$0OhqEU#gZ!J)OQBi9Ht}N?49HSS6uvBoP1lz`lG&g&hM z=y>f1n1#e7qxKjS20U3ZP*= zoA@dRD+vEEpDuGt`xV-l^9D3`(1R~LR663g`4}#ykeY}N&Pf_go@wXHB8$oGYU5jZ z9Lk8|KqSba+!81JV+C0sRSRhKj|nQV{S{#x^{+1b#8nsBklbXsKW^YQmR~U~4`VDhq-jZA7}1)8}X1s8)TUZbX7bns0T`Rg>tkJ(du-z*pB1V z-mSiU-&(|(J2j@w>=>qss&{qTzri1+&O3>#Ret>+tr{urRsOIDaX()<IhyJ5+8N@Ng!bY26cYU<-3+u=@8V{>ioRA;dxF0>H?u!z)lvWo zhUd@|DSGHzVZ~3FCkwK0Mav$V$S1c8V{E;fk!~1#W}$v=mT|LWi81c+&CHf-94}qW&_A)^8zP!d7V4qCh3i25;?J-wAmFxO%5%)#u)L ziQUnA*|q3>CDo|~D^#Vy%lI5fEX(8lY0={6p1rPY?ILk!Y#c%kF;s!Cr2Y$^9$6$c ntZwq@BJJ)ntn+%;rAPlA{{6!8;V*>!4e5)Vx+8WM+=u@GYBw2}