7 Commits

Include renames

Author	SHA1	Message	Date
woggioni	ef64c4a532	Serialize OCSP Redis snapshots with CBOR	2026-10-28 20:54:19 +00:00
woggioni	df98ada177	Publish OCSP snapshots through Redis	2026-10-28 20:27:07 +00:00
woggioni	a7cfda4167	Use S3 object expiry for OCSP snapshots	2026-10-28 19:39:51 +00:00
woggioni	aee1025015	Fix stale OCSP snapshots indefinitely ... - Parse and validate from snapshot JSON, reject future/missing timestamps - Enforce snapshot age vs in cache and stale fallback (no lifetime extension on repeat S3 reads) - OCSP: , , - Remove unused from signer - Publisher heartbeats: , republish clean snapshots past interval, preserve dirty-only behavior and concurrency - Config/env/docker/docs updates for heartbeat Rolling upgrade: enable publisher heartbeats before deploying the age-enforcing responder so existing snapshots remain within the age window.	2026-10-26 12:06:15 +08:00
woggioni	dab4b9e0bb	Fix cross-vault OCSP snapshot poisoning	2026-10-24 22:03:02 +00:00
woggioni	69d78939a1	Build static musl OCSP image in Gitea Actions	2026-10-23 10:00:36 +00:00
woggioni	0384995570	Add S3 OCSP status publishing and standalone Rust Axum responder	2026-10-23 09:18:00 +00:00