woggioni/kca
2
0
Fork 0
Code Actions Packages Releases Activity

Commit Graph

  • a101182fdd Allow dedicated Redis for OCSP publication opencode woggioni 2026-10-31 20:26:37 +00:00
  • ef64c4a532 Serialize OCSP Redis snapshots with CBOR master woggioni 2026-10-28 20:54:19 +00:00
  • df98ada177 Publish OCSP snapshots through Redis woggioni 2026-10-28 20:27:07 +00:00
  • a7cfda4167 Use S3 object expiry for OCSP snapshots woggioni 2026-10-28 19:39:51 +00:00
  • 9da68a9625 Add production support for SQLite release/0.0.1 woggioni 2026-10-28 01:23:28 +00:00
  • 3918a2ac71 Filter certificate key selection to unused keys woggioni 2026-10-27 23:34:25 +00:00
  • 356e3beccd Use aioboto3 for asynchronous OCSP S3 uploads woggioni 2026-10-27 22:23:33 +00:00
  • 0301cbff6f Batch certificate summary lookups woggioni 2026-10-27 14:09:00 +00:00
  • a2457ab1f4 Move certificate transforms into header dropdown Walter Oggioni 2026-10-26 23:36:59 +00:00
  • 917e0c1d7c Move certificate export and revoke actions into header Walter Oggioni 2026-10-26 16:46:55 +00:00
  • 73e6a11463 Remove bulk actions from certificate list Walter Oggioni 2026-10-26 16:13:07 +00:00
  • 555f3f28f7 Combine AIA fields into XCA-style editor Walter Oggioni 2026-10-26 15:52:14 +00:00
  • cc05d450a2 Fix multi-certificate PEM chain imports woggioni 2026-10-26 13:37:52 +00:00
  • 0b21910e2b Reduce WASM bundle size woggioni 2026-10-26 14:18:55 +00:00
  • c8b4e211a0 Fix issuer links for PEM certificate chain imports woggioni 2026-10-26 13:35:28 +00:00
  • 7523c0b8c4 Make public key extraction idempotent woggioni 2026-10-26 10:55:24 +00:00
  • c1d8711cb4 Fix certificate list links to detail route woggioni 2026-10-26 05:17:51 +00:00
  • 1a7b4a10e8 Add full XCA curve and digest parity woggioni 2026-10-26 12:06:17 +08:00
  • e83dc42d3d Add structured subject attribute editor woggioni 2026-10-26 12:06:17 +08:00
  • f9e8915b77 Add advanced extension list editors woggioni 2026-10-26 12:06:17 +08:00
  • c8031f5876 Add XCA-style SAN editor woggioni 2026-10-26 12:06:17 +08:00
  • dd6d20e3a3 Fix hexadecimal master key decoding woggioni 2026-10-26 12:06:17 +08:00
  • 4adf7c4882 kca-core: fix CSR attribute DER encoding and conformant decoding woggioni 2026-10-26 12:06:17 +08:00
  • c263f967dc Fix: chain exports use certificate equality instead of object identity woggioni 2026-10-26 12:06:16 +08:00
  • 82d448d8d4 Fix expired self-signed cert validation: remove bypass, enable X509_STRICT|POLICY_CHECK, extract numeric error codes from pyOpenSSL woggioni 2026-10-26 12:06:16 +08:00
  • 987fdc0e12 Fix SSH private-key import/export for Paramiko 5.1.0 and remove unconditional DSSKey reference - Replace paramiko-based OpenSSH private key serialization with cryptography's PrivateFormat.OpenSSH backend. The old code relied on paramiko.RSAKey, paramiko.DSSKey, etc. to write private keys, but Paramiko 5.1.0 removed DSSKey entirely and changed constructor APIs, causing crashes. woggioni 2026-10-26 12:06:16 +08:00
  • bd352051e0 Typed but unhandled extensions preserve DER via public_bytes() woggioni 2026-10-26 12:06:16 +08:00
  • 1032b10c49 Fix EC JWK: fixed-width x, y, d encoding; restrict to registered curve names woggioni 2026-10-26 12:06:16 +08:00
  • aee1025015 Fix stale OCSP snapshots indefinitely woggioni 2026-10-26 12:06:15 +08:00
  • b59b935d1b Fix quadratic ReDoS in PEM import block scanning woggioni 2026-10-26 12:06:15 +08:00
  • 718d11b4c0 Offload certificate key generation to worker threads woggioni 2026-10-25 21:24:54 +00:00
  • 4c1bfa4e4d Reject duplicate serials and make keep_serial renewal safe woggioni 2026-10-25 21:22:35 +00:00
  • a8d322776d Enforce CSR proof of possession during certificate issuance woggioni 2026-10-25 21:21:16 +00:00
  • cc7059c100 Fix OCSP snapshots for orphaned revocations woggioni 2026-10-25 13:21:23 +00:00
  • 404facf8e2 Fix OCSP publication races for revocation changes woggioni 2026-10-25 11:19:17 +00:00
  • 44a79f5b0c Key OIDC identity by issuer and subject woggioni 2026-10-25 08:35:11 +00:00
  • dab4b9e0bb Fix cross-vault OCSP snapshot poisoning woggioni 2026-10-24 22:03:02 +00:00
  • 69d78939a1 Build static musl OCSP image in Gitea Actions woggioni 2026-10-23 10:00:36 +00:00
  • 0384995570 Add S3 OCSP status publishing and standalone Rust Axum responder woggioni 2026-10-23 09:18:00 +00:00
  • 4ed14b42a7 Add optional OpenTelemetry traces, metrics and OTLP logs woggioni 2026-10-23 06:09:43 +00:00
  • 57c810ea65 Polish PWA assets, accessible tabs and bulk selection, harden bulk revoke tests woggioni 2026-10-23 05:44:32 +00:00
  • 763268bd40 Add server template apply modes, bulk revocation, explicit DN order and detail tabs woggioni 2026-10-23 05:33:43 +00:00
  • 5eb7866f5b Close XCA parity gaps: advanced extensions, CA/revocation UI, imports, ZIP export, E2E woggioni 2026-10-23 04:26:35 +00:00
  • 4f3a632f4b Implement KCA: web reimplementation of XCA PKI workflows woggioni 2026-10-23 02:06:55 +00:00