doc(testnet): record t2.buh.fm CA fingerprint + verified cross-site peering

Both seed nodes (testnet.buh.fm, t2.buh.fm) now mutually trust each other;
buh-cli peer ping succeeds in both directions over the public FQDNs.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EB3LjarCdXxqrJ4tFLn8LB
This commit is contained in:
2026-06-30 19:47:33 +03:00
parent f4edad19f2
commit 994be872a1

View File

@@ -40,7 +40,10 @@ Record each node's reachable address and CA fingerprint here as it joins.
| Node | Edge address | CA fingerprint | Role |
|------|--------------|----------------|------|
| `testnet.buh.fm` | `testnet.buh.fm:31415` | `3c8f125861f3c39f849a469cb32ef599000c71896ea1ccc8a5baaad7419ef808` | relay + blob (fs) |
| `t2.buh.fm` | `t2.buh.fm:31415` | _populate after its first deploy (`buh-cli ca show` on the node)_ | relay + blob (fs) |
| `t2.buh.fm` | `t2.buh.fm:31415` | `cc78d40009b2577eec2431aea316384814749317a73a130a818fdf1a32ae9ab5` | relay + blob (fs) |
> The two seed nodes above mutually trust each other — cross-site PQ-mTLS peering
> is verified live (`peer ping` succeeds both directions over the public FQDNs).
> Re-keying a node (`buh-cli ca rotate --force`) changes its fingerprint — update
> this table and every peer must re-pin.