2 Commits

Author SHA1 Message Date
44cbb0a37d feat(pki-server): add OCSP responder and close server release
Add durable multi-authority OCSP responders with strict request parsing,
issuer-bound serial lookup, stable revocation views, signed responses,
nonce policies and bounded protocol execution.

Complete in-process and packaged OCSP validation and close the PKI server
after the final architecture, security and release audit.
2026-08-05 18:32:00 +02:00
b19edf17fd feat(pki-server): add ACME certificate management
Add directory-bound ACME accounts, orders, authorizations, challenge
evidence, strict JWS processing, issuance, rollover and revocation.

Isolate bounded ACME execution from administrative and public services
while preserving explicit authority, profile, issuer and chain-path
selection.
2026-08-05 18:16:00 +02:00