Skip to content

Add Certificate Authority documentation#643

Closed
zgv163 wants to merge 1 commit intonetbirdio:mainfrom
zgv163:feature/internal-ca-docs
Closed

Add Certificate Authority documentation#643
zgv163 wants to merge 1 commit intonetbirdio:mainfrom
zgv163:feature/internal-ca-docs

Conversation

@zgv163
Copy link
Copy Markdown

@zgv163 zgv163 commented Mar 3, 2026

Describe your changes

Adds documentation for the internal Certificate Authority feature introduced in netbirdio/netbird#5491.

New page: manage/settings/certificate-authority.mdx

Covers:

  • Overview of how the internal CA works (ECDSA P-256, NameConstraints, CSR-based flow)
  • Initializing the CA (display name, organization, validity options)
  • Wildcard certificates configuration
  • Viewing and revoking peer certificates
  • Rotating the CA
  • Downloading the CA certificate
  • CLI reference (netbird cert request, status, trust-ca, untrust-ca)
  • Permissions

Navigation: Added "Certificate Authority" entry under Settings in the sidebar.

Issue ticket number and link

Part of netbirdio/netbird#5479
Core PR: netbirdio/netbird#5491

Checklist

  • Is it a bug fix
  • Is a typo/documentation fix
  • Is a feature enhancement
  • It is a refactor

Document the internal CA feature including initialization, wildcard
certificates, peer certificate management, CA rotation, and CLI usage.
@zgv163
Copy link
Copy Markdown
Author

zgv163 commented Mar 6, 2026

Closing to resubmit alongside the updated core and dashboard PRs.

@zgv163 zgv163 closed this Mar 6, 2026
@zgv163
Copy link
Copy Markdown
Author

zgv163 commented Mar 6, 2026

Closing this in favor of a Let's Encrypt DNS-PERSIST-01 approach instead. The Internal CA route doesn't provide a smooth experience on iOS and Android — see updated comment on netbirdio/netbird#5479 for details.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant