Files

T

woggioni aee1025015 Fix stale OCSP snapshots indefinitely

- Parse and validate  from snapshot JSON, reject future/missing timestamps
- Enforce snapshot age vs  in cache and stale fallback (no lifetime extension on repeat S3 reads)
- OCSP: , ,
- Remove unused  from signer
- Publisher heartbeats: , republish clean snapshots past interval, preserve dirty-only behavior and concurrency
- Config/env/docker/docs updates for heartbeat

Rolling upgrade: enable publisher heartbeats before deploying the age-enforcing responder so existing snapshots remain within the age window.

2026-10-26 12:06:15 +08:00

src/kca

Fix stale OCSP snapshots indefinitely

2026-10-26 12:06:15 +08:00

pyproject.toml

Add S3 OCSP status publishing and standalone Rust Axum responder

2026-10-23 09:18:00 +00:00

README.md

Implement KCA: web reimplementation of XCA PKI workflows

2026-10-23 02:06:55 +00:00

README.md

kca-app

The deployable KCA application: environment-driven settings, kaya app assembly (sessions, OIDC, Tortoise, OpenAPI, CORS, optional OpenTelemetry), the HTTP API, Tortoise models, aerich migrations, and the SPA/PWA shell hosting.