woggioni
a101182fdd
Allow dedicated Redis for OCSP publication
2026-10-31 20:26:37 +00:00
woggioni
ef64c4a532
Serialize OCSP Redis snapshots with CBOR
2026-10-28 20:54:19 +00:00
woggioni
df98ada177
Publish OCSP snapshots through Redis
2026-10-28 20:27:07 +00:00
woggioni
a7cfda4167
Use S3 object expiry for OCSP snapshots
2026-10-28 19:39:51 +00:00
woggioni
9da68a9625
Add production support for SQLite
CI / Build and push docker image (push) Successful in 3m9s
CI / Build and push OCSP image (push) Successful in 33s
2026-10-28 01:23:28 +00:00
Walter Oggioni
a2457ab1f4
Move certificate transforms into header dropdown
CI / Build and push docker image (push) Successful in 1m56s
CI / Build and push OCSP image (push) Successful in 33s
2026-10-27 07:39:13 +08:00
Walter Oggioni
917e0c1d7c
Move certificate export and revoke actions into header
2026-10-27 07:39:00 +08:00
Walter Oggioni
73e6a11463
Remove bulk actions from certificate list
2026-10-27 00:14:32 +08:00
woggioni
1a7b4a10e8
Add full XCA curve and digest parity
CI / Build and push docker image (push) Successful in 37s
CI / Build and push OCSP image (push) Successful in 38s
2026-10-26 12:06:17 +08:00
woggioni
aee1025015
Fix stale OCSP snapshots indefinitely
...
- Parse and validate from snapshot JSON, reject future/missing timestamps
- Enforce snapshot age vs in cache and stale fallback (no lifetime extension on repeat S3 reads)
- OCSP: , ,
- Remove unused from signer
- Publisher heartbeats: , republish clean snapshots past interval, preserve dirty-only behavior and concurrency
- Config/env/docker/docs updates for heartbeat
Rolling upgrade: enable publisher heartbeats before deploying the age-enforcing responder so existing snapshots remain within the age window.
2026-10-26 12:06:15 +08:00
woggioni
dab4b9e0bb
Fix cross-vault OCSP snapshot poisoning
2026-10-24 22:03:02 +00:00
woggioni
69d78939a1
Build static musl OCSP image in Gitea Actions
CI / Build and push docker image (push) Successful in 3m23s
CI / Build and push OCSP image (push) Successful in 7m53s
2026-10-23 10:00:36 +00:00
woggioni
0384995570
Add S3 OCSP status publishing and standalone Rust Axum responder
2026-10-23 09:18:00 +00:00
woggioni
4ed14b42a7
Add optional OpenTelemetry traces, metrics and OTLP logs
2026-10-23 06:09:43 +00:00
woggioni
57c810ea65
Polish PWA assets, accessible tabs and bulk selection, harden bulk revoke tests
2026-10-23 05:44:32 +00:00
woggioni
763268bd40
Add server template apply modes, bulk revocation, explicit DN order and detail tabs
2026-10-23 05:33:43 +00:00
woggioni
5eb7866f5b
Close XCA parity gaps: advanced extensions, CA/revocation UI, imports, ZIP export, E2E
2026-10-23 04:26:35 +00:00
woggioni
4f3a632f4b
Implement KCA: web reimplementation of XCA PKI workflows
...
- kaya backend with OIDC sessions, API tokens, Postgres/Tortoise models
- AES-256-GCM private key storage and full certificate/CSR/CRL domain logic
- Sycamore/WASM SPA for vaults, keys, requests, certificates, CRLs and templates
- imports/exports, XCA .xdb migration, Docker Compose stack and tests
2026-10-23 02:06:55 +00:00
woggioni
Walter Oggioni