Files

T

woggioni b59b935d1b Fix quadratic ReDoS in PEM import block scanning

Replace the backtracking _PEM_BLOCK regex with a forward-only scanner
that indexes END markers by label, so repeated unterminated headers do
not cause the regex to rescan the remaining input.

Impact: 80 KiB payload went from 8.34 s to 0.001 s.

2026-10-26 12:06:15 +08:00

src/kca/core

Fix quadratic ReDoS in PEM import block scanning

2026-10-26 12:06:15 +08:00

tests

Fix quadratic ReDoS in PEM import block scanning

2026-10-26 12:06:15 +08:00

pyproject.toml

Implement KCA: web reimplementation of XCA PKI workflows

2026-10-23 02:06:55 +00:00

README.md

Implement KCA: web reimplementation of XCA PKI workflows

2026-10-23 02:06:55 +00:00

README.md

kca-core

Pure, I/O-free PKI domain logic for KCA. It knows how to generate and parse keys, build distinguished names, encode X.509 extensions, issue certificates, create CSRs and CRLs, apply templates, and convert every supported import and export format. It has no kaya, database or filesystem dependencies and is unit-tested in isolation.