Egothor/ZeroEcho
2
0
Fork 0
Code Issues 15 Pull Requests Actions Packages Projects 1 Releases 2 Wiki Activity

Replace free-form verification failure strings with stable reason codes #13

New Issue
Open
opened 2026-03-24 18:05:29 +01:00 by galambos · 0 comments
galambos commented 2026-03-24 18:05:29 +01:00
Owner
Copy Link

Proof-of-possession verification currently returns several free-form textual reasons such as "Invalid CSR", "CSR SPKI missing", "Unsupported CSR algorithm", and "Verification failed". This is visible in both BC-based and workflow-based PoP verifiers.

Why this matters

Highly regulated environments benefit from stable reason codes that can be audited, localized, mapped to UI/API responses, and used in policy analytics without brittle string comparison.

Acceptance criteria

  • Introduce stable reason-code constants or a reason enum-like model.
  • Keep optional human-readable text separate from machine-stable semantics.
  • Align both PoP verifier implementations.
  • Update tests and JavaDoc.
Proof-of-possession verification currently returns several free-form textual reasons such as "Invalid CSR", "CSR SPKI missing", "Unsupported CSR algorithm", and "Verification failed". This is visible in both BC-based and workflow-based PoP verifiers. ## Why this matters Highly regulated environments benefit from stable reason codes that can be audited, localized, mapped to UI/API responses, and used in policy analytics without brittle string comparison. ## Acceptance criteria - Introduce stable reason-code constants or a reason enum-like model. - Keep optional human-readable text separate from machine-stable semantics. - Align both PoP verifier implementations. - Update tests and JavaDoc.
galambos added this to the PKI Foundation Hardening and Regulated Operations Roadmap project 2026-03-24 18:56:06 +01:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project PKI Foundation Hardening and Regulated Operations Roadmap
Assignees
Clear assignees
galambos gitea-ci
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Egothor/ZeroEcho#13
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?