woggioni/kca - kca

5 Commits

Include renames

Author	SHA1	Message	Date
woggioni	aee1025015	Fix stale OCSP snapshots indefinitely - Parse and validate from snapshot JSON, reject future/missing timestamps - Enforce snapshot age vs in cache and stale fallback (no lifetime extension on repeat S3 reads) - OCSP: , , - Remove unused from signer - Publisher heartbeats: , republish clean snapshots past interval, preserve dirty-only behavior and concurrency - Config/env/docker/docs updates for heartbeat Rolling upgrade: enable publisher heartbeats before deploying the age-enforcing responder so existing snapshots remain within the age window.	2026-10-26 12:06:15 +08:00
woggioni	69d78939a1	Build static musl OCSP image in Gitea Actions CI / Build and push docker image (push) Successful in 3m23s Details CI / Build and push OCSP image (push) Successful in 7m53s Details	2026-10-23 10:00:36 +00:00
woggioni	0384995570	Add S3 OCSP status publishing and standalone Rust Axum responder	2026-10-23 09:18:00 +00:00
woggioni	4ed14b42a7	Add optional OpenTelemetry traces, metrics and OTLP logs	2026-10-23 06:09:43 +00:00
woggioni	4f3a632f4b	Implement KCA: web reimplementation of XCA PKI workflows - kaya backend with OIDC sessions, API tokens, Postgres/Tortoise models - AES-256-GCM private key storage and full certificate/CSR/CRL domain logic - Sycamore/WASM SPA for vaults, keys, requests, certificates, CRLs and templates - imports/exports, XCA .xdb migration, Docker Compose stack and tests	2026-10-23 02:06:55 +00:00