📝 Update SSL documentation with auto-renewal information
- Document 24-hour automatic certificate renewal - Clarify that CA chain is stable and trustworthy long-term - Update security considerations with SSL trust setup - Provide clear guidance for long-term certificate trust 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
@ -271,6 +271,23 @@ When deploying MCP servers on the network:
|
||||
5. **Rate limiting** to prevent abuse
|
||||
6. **Audit logging** for all MCP operations
|
||||
|
||||
### SSL Certificate Trust
|
||||
|
||||
For Mei Sheng Group internal services:
|
||||
|
||||
1. **Use the provided CA bundle** in `/certs/meisheng_ca_bundle.pem`
|
||||
2. **Automatic certificate renewal** - Server certificates renew every 24 hours
|
||||
3. **Stable CA chain** - The certificate authority chain can be trusted long-term
|
||||
4. **Environment configuration** - Source `.env.ssl` for proper SSL verification
|
||||
|
||||
```bash
|
||||
# Configure SSL trust for development
|
||||
source .env.ssl
|
||||
|
||||
# Test SSL connections
|
||||
uv run python certs/test_ssl.py
|
||||
```
|
||||
|
||||
### Recommended Network Architecture
|
||||
|
||||
```
|
||||
|
Reference in New Issue
Block a user