Egothor/ZeroEcho
2
0
Fork 0
Code Issues 15 Pull Requests Actions Packages Projects 1 Releases 4 Wiki Activity
76 Commits 3 Branches 4 Tags
f0dfb133f2d2663279d2cfd03ecc1caa0e24d833
Commit Graph

11 Commits

Author SHA1 Message Date
Leo Galambos
f0dfb133f2 feat(pki): add extensible X.509 algorithm bindings 
Add an immutable X.509 binding registry for sealed standard mappings,
versioned ZeroEcho private OIDs and explicitly enabled deployer bindings.

Integrate binding commitments with profiles, issuance, verification, CRLs,
PKI sessions and typed CLI operations.
 2026-08-04 18:22:00 +02:00
Leo Galambos
5c66a2b25b feat(pki): complete PKI administration CLI 
Complete the transport-neutral PKI session composition and expose all
currently implemented administration capabilities through typed direct
and batch operations.

Preserve explicit optional capabilities, KeyRef confinement, deterministic
lifecycle handling and reuse by the future persistent server.
 2026-08-04 03:11:14 +02:00
Leo Galambos
3de6cd7a34 feat(pki): add typed CLI operation foundation 
Add a reusable PKI session and typed synchronous operation executor
shared by direct CLI commands and versioned sequential batch plans.

Provide deterministic references, structured output, failure policies and
safe lifecycle handling without introducing a scripting language or runtime.
 2026-08-04 01:13:49 +02:00
Leo Galambos
2d35e61466 refactor(lib): normalize source headers and close PMD findings 2026-07-30 21:33:30 +02:00
Leo Galambos
dedd16f584 chore(text): source code format 2026-07-30 20:28:43 +02:00
Leo Galambos
8b2f3df41f security(lib,storage): enforce single-use encryption contexts, encrypt keyring and harden key import 2026-07-29 23:18:22 +02:00
Leo Galambos
9bbcab7522 security(lib): enforce single-use encryption contexts 2026-07-29 17:28:32 +02:00
Leo Galambos
49dc080c65 refactor!: consolidate crypto architecture and security model 
* make ZeroEchoSession the sole policy, audit, and runtime boundary
* replace combined key builders with operation-specific SPI and typed metadata
* remove obsolete pre-release compatibility APIs and global crypto operations
* finalize JCA agreement contexts and replace inheritance with composition
* harden secret lifecycle, key destruction, hybrid KEX, PBKDF2, and audit handling
* standardize PairSeq I/O and introduce immutable validated value types
* migrate app, ext, samples, and required pki integration points
* expand correctness, security, concurrency, and malformed-input coverage

BREAKING CHANGE: removes deprecated pre-release global configuration, legacy
context factories, combined key-builder contracts, String-based password APIs,
unchecked PairSeq writing, BlockGeometry public fields, and other compatibility
facades.
 2026-07-28 19:20:30 +02:00
Leo Galambos
354e9dd9bc Stabilize PKI core persistence, signing interop, and approval workflow 
fix: harden FsCodec determinism and persisted type round-trips
fix: align CSR PoP verification with standards-compatible signature validation
fix: make async approval deny propagation deterministic in signing bus tests
chore: reduce IDE/Gradle drift by strengthening regression coverage
 2026-03-24 17:36:12 +01:00
Leo Galambos
276ac91eb4 chore: replace apache-cli deprecated methods 
Signed-off-by: Leo Galambos <lg@hq.egothor.org>
 2025-12-27 16:55:28 +01:00
Leo Galambos
2cc988925a Initial commit (history reset) 2025-09-16 23:14:24 +02:00