KCA d22ba6662c Fix stale OCSP snapshots indefinitely ...

- Parse and validate  from snapshot JSON, reject future/missing timestamps
- Enforce snapshot age vs  in cache and stale fallback (no lifetime extension on repeat S3 reads)
- OCSP: , ,
- Remove unused  from signer
- Publisher heartbeats: , republish clean snapshots past interval, preserve dirty-only behavior and concurrency
- Config/env/docker/docs updates for heartbeat

Rolling upgrade: enable publisher heartbeats before deploying the age-enforcing responder so existing snapshots remain within the age window.

2026-10-25 21:30:00 +00:00

..

dev/mockoauth

Implement KCA: web reimplementation of XCA PKI workflows

2026-10-23 02:06:55 +00:00

migrations/models

Key OIDC identity by issuer and subject

2026-10-25 08:35:11 +00:00

packages

Fix stale OCSP snapshots indefinitely

2026-10-25 21:30:00 +00:00

tests

Fix stale OCSP snapshots indefinitely

2026-10-25 21:30:00 +00:00

.env.example

Fix stale OCSP snapshots indefinitely

2026-10-25 21:30:00 +00:00

conftest.py

Implement KCA: web reimplementation of XCA PKI workflows

2026-10-23 02:06:55 +00:00

Dockerfile

Add S3 OCSP status publishing and standalone Rust Axum responder

2026-10-23 09:18:00 +00:00

pyproject.toml

Implement KCA: web reimplementation of XCA PKI workflows

2026-10-23 02:06:55 +00:00

uv.lock

Add S3 OCSP status publishing and standalone Rust Axum responder

2026-10-23 09:18:00 +00:00