3 Commits

Author	SHA1	Message	Date
Leo Galambos	7328f075dd	feat(pki-server): support trusted reverse-proxy authentication ... Support explicit direct-mTLS and trusted-reverse-proxy authentication modes with mutually authenticated backend transport. Keep proxy and end-client principals separate, validate forwarded certificates independently, and enforce narrowly scoped forwarding authority for RFC 9440 and NGINX escaped-PEM profiles.	2026-08-04 23:07:01 +02:00
Leo Galambos	5b896ee2a2	feat(pki-server): expose security control administration ... Expose principals, scoped assignments, direct grants, approvals, break-glass access, disclosure policy and one-time capabilities through the unified administrative HTTPS operation gateway. Preserve default-deny authorization, immutable PKI authority, PII boundaries and uncertainty-aware secret delivery.	2026-08-04 21:23:01 +02:00
Leo Galambos	d7793e5c49	feat(pki-server): add secure administrative HTTPS API ... Add the mutually authenticated administrative HTTPS server with strict typed JSON, bounded request execution, multi-authority authorization, approval enforcement, safe auditing and finite shutdown. Reuse one long-lived realm and PKI session without duplicating backend authority or operation semantics.	2026-08-04 20:16:34 +02:00