How deeply does Google Anthos in Action cover root certificate?

Explains self-signing, CA delegation, and three Istio configuration choices without detailing certificate issuance internals.

Root certificate

As explained in Google Anthos in Action

A root certificate is a self-signed certificate that anchors a certificate authority trust chain.

A root certificate is a self-signed certificate that anchors a certificate authority trust chain. In an Istio service mesh, it establishes the trust basis for workload identities and certificates used in service-to-service communication. section 4.3.3

Istio supports several certificate-authority deployment choices:

Use the default CA-generated self-signed root certificate and key to sign microservice certificates. section 4.3.3
Provide an administrator-specified certificate and key for CA signing. section 4.3.3
Configure an existing organizational root certificate or delegated CA signing certificate and key, a common enterprise arrangement. section 4.3.3
Keep root signing responsibility centralized or delegate certificate signing to a subordinate CA. section 4.3.3

How Google Anthos in Action covers it

liveBook manning.com

Read Google Anthos in Action on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

Software Security for DevelopersA root certificate authority is a self-signed certificate authority whose trust anchor is typically preinstalled in an operating system or other trust store.
liveBook manning.com

ASP.NET Core in Action, 3eA root certificate is a trust-anchor certificate issued by or representing a certificate authority at the top of a certificate chain.

Compare how 3 books explain root certificate →

Related concepts

certification authoritykind of · A certification authority is a trusted entity that verifies identities and issues digitally signed certificates binding public keys to identities or domains.
certificatekind of · A digital certificate is a digitally signed credential that binds an identity to a public key and supports authentication or secure communication.
certificate chainpart of · A certificate chain is an ordered sequence of digital certificates linking an end-entity certificate through intermediate authorities to a trusted root certificate.
OpenSSLproduced by · OpenSSL is an open-source software library and toolkit implementing cryptographic algorithms, secure-communication protocols, and operations involving keys and certificates.
trust storeused by · A trust store is a repository of certificates or public keys that a system accepts as trusted when validating identities or secure communications.

This explainer was generated by Manning's knowledge graph from the text of Google Anthos in Action. The section links point to the parts of the book it draws on.