3 Commits

Author	SHA1	Message	Date
Leo Galambos	0312cf699f	feat(pki): reconcile recovered signing operations ... Add bounded durable reconciliation with retry metadata, fencing-safe status and cancellation handling, and server-managed background recovery. Include versioned persistence migration, bounded keyset paging, lifecycle-safe worker shutdown, redacted diagnostics, and restart/failure coverage. Closes #10	2026-08-12 01:48:11 +02:00
Leo Galambos	44cbb0a37d	feat(pki-server): add OCSP responder and close server release ... Add durable multi-authority OCSP responders with strict request parsing, issuer-bound serial lookup, stable revocation views, signed responses, nonce policies and bounded protocol execution. Complete in-process and packaged OCSP validation and close the PKI server after the final architecture, security and release audit.	2026-08-05 18:32:00 +02:00
Leo Galambos	b19edf17fd	feat(pki-server): add ACME certificate management ... Add directory-bound ACME accounts, orders, authorizations, challenge evidence, strict JWS processing, issuance, rollover and revocation. Isolate bounded ACME execution from administrative and public services while preserving explicit authority, profile, issuer and chain-path selection.	2026-08-05 18:16:00 +02:00