woggioni aee1025015 Fix stale OCSP snapshots indefinitely ...

- Parse and validate  from snapshot JSON, reject future/missing timestamps
- Enforce snapshot age vs  in cache and stale fallback (no lifetime extension on repeat S3 reads)
- OCSP: , ,
- Remove unused  from signer
- Publisher heartbeats: , republish clean snapshots past interval, preserve dirty-only behavior and concurrency
- Config/env/docker/docs updates for heartbeat

Rolling upgrade: enable publisher heartbeats before deploying the age-enforcing responder so existing snapshots remain within the age window.

2026-10-26 12:06:15 +08:00

..

helpers

Key OIDC identity by issuer and subject

2026-10-25 08:35:11 +00:00

__init__.py

Implement KCA: web reimplementation of XCA PKI workflows

2026-10-23 02:06:55 +00:00

test_identity.py

Key OIDC identity by issuer and subject

2026-10-25 08:35:11 +00:00

test_otel.py

Add optional OpenTelemetry traces, metrics and OTLP logs

2026-10-23 06:09:43 +00:00

test_routes_extra.py

Fix stale OCSP snapshots indefinitely

2026-10-26 12:06:15 +08:00

test_smoke.py

Implement KCA: web reimplementation of XCA PKI workflows

2026-10-23 02:06:55 +00:00

test_telemetry.py

Key OIDC identity by issuer and subject

2026-10-25 08:35:11 +00:00