4 Commits

Include renames

Author	SHA1	Message	Date
woggioni	aee1025015	Fix stale OCSP snapshots indefinitely ... - Parse and validate from snapshot JSON, reject future/missing timestamps - Enforce snapshot age vs in cache and stale fallback (no lifetime extension on repeat S3 reads) - OCSP: , , - Remove unused from signer - Publisher heartbeats: , republish clean snapshots past interval, preserve dirty-only behavior and concurrency - Config/env/docker/docs updates for heartbeat Rolling upgrade: enable publisher heartbeats before deploying the age-enforcing responder so existing snapshots remain within the age window.	2026-10-26 12:06:15 +08:00
woggioni	dab4b9e0bb	Fix cross-vault OCSP snapshot poisoning	2026-10-24 22:03:02 +00:00
woggioni	69d78939a1	Build static musl OCSP image in Gitea Actions	2026-10-23 10:00:36 +00:00
woggioni	0384995570	Add S3 OCSP status publishing and standalone Rust Axum responder	2026-10-23 09:18:00 +00:00