KCA 830dd64012 kca-core: fix CSR attribute DER encoding and conformant decoding ...

- Generated attributes are now explicitly tagged as UTF8String via
  CertificateSigningRequestBuilder.add_attribute(_tag=_ASN1Type.UTF8String),
  so values include proper DER TLV instead of raw bytes.
- The attribute decoder first attempts DER string parsing (UTF8String, PrintableString,
  IA5String, BMPString, long-form lengths), falling back to legacy raw UTF-8 decode for
  previously generated nonconformant CSRs.
- Regression tests verify DER encoding, Unicode round-tripping, supported string types,
  long values (>127 bytes), and legacy raw UTF-8 attributes.
- Mypy passes cleanly (no issues in 42 source files).

2026-10-25 22:09:22 +00:00

..

dev/mockoauth

Implement KCA: web reimplementation of XCA PKI workflows

2026-10-23 02:06:55 +00:00

migrations/models

Key OIDC identity by issuer and subject

2026-10-25 08:35:11 +00:00

packages

kca-core: fix CSR attribute DER encoding and conformant decoding

2026-10-25 22:09:22 +00:00

tests

Fix stale OCSP snapshots indefinitely

2026-10-25 21:30:00 +00:00

.env.example

Fix stale OCSP snapshots indefinitely

2026-10-25 21:30:00 +00:00

conftest.py

Implement KCA: web reimplementation of XCA PKI workflows

2026-10-23 02:06:55 +00:00

Dockerfile

Add S3 OCSP status publishing and standalone Rust Axum responder

2026-10-23 09:18:00 +00:00

pyproject.toml

Implement KCA: web reimplementation of XCA PKI workflows

2026-10-23 02:06:55 +00:00

uv.lock

Add S3 OCSP status publishing and standalone Rust Axum responder

2026-10-23 09:18:00 +00:00