9 Commits

Include renames

Author	SHA1	Message	Date
woggioni	ef64c4a532	Serialize OCSP Redis snapshots with CBOR	2026-10-28 20:54:19 +00:00
woggioni	df98ada177	Publish OCSP snapshots through Redis	2026-10-28 20:27:07 +00:00
woggioni	a7cfda4167	Use S3 object expiry for OCSP snapshots	2026-10-28 19:39:51 +00:00
woggioni	9da68a9625	Add production support for SQLite	2026-10-28 01:23:28 +00:00
woggioni	1a7b4a10e8	Add full XCA curve and digest parity	2026-10-26 12:06:17 +08:00
woggioni	aee1025015	Fix stale OCSP snapshots indefinitely ... - Parse and validate from snapshot JSON, reject future/missing timestamps - Enforce snapshot age vs in cache and stale fallback (no lifetime extension on repeat S3 reads) - OCSP: , , - Remove unused from signer - Publisher heartbeats: , republish clean snapshots past interval, preserve dirty-only behavior and concurrency - Config/env/docker/docs updates for heartbeat Rolling upgrade: enable publisher heartbeats before deploying the age-enforcing responder so existing snapshots remain within the age window.	2026-10-26 12:06:15 +08:00
woggioni	0384995570	Add S3 OCSP status publishing and standalone Rust Axum responder	2026-10-23 09:18:00 +00:00
woggioni	4ed14b42a7	Add optional OpenTelemetry traces, metrics and OTLP logs	2026-10-23 06:09:43 +00:00
woggioni	4f3a632f4b	Implement KCA: web reimplementation of XCA PKI workflows ... - kaya backend with OIDC sessions, API tokens, Postgres/Tortoise models - AES-256-GCM private key storage and full certificate/CSR/CRL domain logic - Sycamore/WASM SPA for vaults, keys, requests, certificates, CRLs and templates - imports/exports, XCA .xdb migration, Docker Compose stack and tests	2026-10-23 02:06:55 +00:00