Implement KCA: web reimplementation of XCA PKI workflows

- kaya backend with OIDC sessions, API tokens, Postgres/Tortoise models
- AES-256-GCM private key storage and full certificate/CSR/CRL domain logic
- Sycamore/WASM SPA for vaults, keys, requests, certificates, CRLs and templates
- imports/exports, XCA .xdb migration, Docker Compose stack and tests
This commit is contained in:
2026-10-23 02:06:55 +00:00
commit 4f3a632f4b
109 changed files with 21048 additions and 0 deletions
+7
View File
@@ -0,0 +1,7 @@
# kca-core
Pure, I/O-free PKI domain logic for KCA. It knows how to generate and parse
keys, build distinguished names, encode X.509 extensions, issue certificates,
create CSRs and CRLs, apply templates, and convert every supported import and
export format. It has no kaya, database or filesystem dependencies and is
unit-tested in isolation.