Files

T

woggioni 4c1bfa4e4d Reject duplicate serials and make keep_serial renewal safe

Add shared serial collision checking against existing certificates and
issuer revocations, reuse it for automatic serial allocation, and enforce
it for user-supplied serials so duplicate serials no longer break the
OCSP snapshot.

make keep_serial renewal require replace_old, refuse keep_serial +
revoke_old, and reject serials already revoked by the issuer so revoked
serials cannot be inherited by renewed certificates.

2026-10-25 21:23:34 +00:00

src/kca

Reject duplicate serials and make keep_serial renewal safe

2026-10-25 21:23:34 +00:00

pyproject.toml

Add S3 OCSP status publishing and standalone Rust Axum responder

2026-10-23 09:18:00 +00:00

README.md

Implement KCA: web reimplementation of XCA PKI workflows

2026-10-23 02:06:55 +00:00

README.md

kca-app

The deployable KCA application: environment-driven settings, kaya app assembly (sessions, OIDC, Tortoise, OpenAPI, CORS, optional OpenTelemetry), the HTTP API, Tortoise models, aerich migrations, and the SPA/PWA shell hosting.