Shankar Reddy 76d383bd64 fix(crypto): per-ciphertext PBKDF2 salt + v2 versioned format with v1 fallback (M-8)

2026-04-17 05:36:29 +00:00

..

agent_group_test.go

fix: resolve test compilation and runtime failures across codebase

2026-03-27 22:53:46 -04:00

agent_group.go

fix(quality): TICKET-012 propagate request context instead of context.Background()

2026-03-27 21:35:22 -04:00

agent_test.go

security: use crypto/rand for agent API keys (fixes C-1)

2026-04-16 19:43:19 +00:00

agent.go

security: atomic pending-job claim with FOR UPDATE SKIP LOCKED (H-6)

2026-04-17 02:34:56 +00:00

audit_test.go

Implement M4: comprehensive test coverage with 120 tests

2026-03-15 00:25:01 -04:00

audit.go

Fix runtime bugs, implement service layer, and overhaul documentation

2026-03-14 21:38:11 -04:00

bulk_revocation_test.go

feat(V2.2): bulk revocation — filter-based fleet-wide certificate revocation

2026-04-16 00:06:34 -04:00

bulk_revocation.go

feat(V2.2): bulk revocation — filter-based fleet-wide certificate revocation

2026-04-16 00:06:34 -04:00

ca_operations_test.go

feat(M34): dynamic issuer configuration with encrypted config storage

2026-04-04 00:20:13 -04:00

ca_operations.go

security: scope revocation unique index to (issuer_id, serial_number) (fixes H-1)

2026-04-16 21:49:59 +00:00

certificate_nil_safety_test.go

test: comprehensive test gap closure across 24 packages

2026-04-09 23:09:40 -04:00

certificate_test.go

style: run gofmt -s across all Go files

2026-03-17 19:32:29 -04:00

certificate.go

fix: end-to-end certificate lifecycle bugs + integration test environment

2026-04-02 17:02:20 -04:00

cloud_discovery_test.go

feat(M50): cloud secret manager discovery — AWS SM, Azure KV, GCP SM

2026-04-15 23:01:00 -04:00

cloud_discovery.go

feat(M50): cloud secret manager discovery — AWS SM, Azure KV, GCP SM

2026-04-15 23:01:00 -04:00

concurrent_test.go

fix(crypto): per-ciphertext PBKDF2 salt + v2 versioned format with v1 fallback (M-8)

2026-04-17 05:36:29 +00:00

config_helpers_test.go

test: comprehensive test gap closure across 24 packages

2026-04-09 23:09:40 -04:00

config_helpers.go

feat(M35): dynamic target configuration with encrypted config, test connection, and GUI updates

2026-04-04 01:09:53 -04:00

context_test.go

fix(crypto): per-ciphertext PBKDF2 salt + v2 versioned format with v1 fallback (M-8)

2026-04-17 05:36:29 +00:00

crypto_validation_test.go

feat: M11a — certificate profiles, crypto policy enforcement, short-lived cert expiry

2026-03-20 20:39:49 -04:00

crypto_validation.go

feat: M11a — certificate profiles, crypto policy enforcement, short-lived cert expiry

2026-03-20 20:39:49 -04:00

csr_renewal_test.go

feat(M34): dynamic issuer configuration with encrypted config storage

2026-04-04 00:20:13 -04:00

deployment_test.go

feat(M31): agent work routing — scope jobs to assigned agents

2026-03-30 14:10:42 -04:00

deployment.go

feat(M31): agent work routing — scope jobs to assigned agents

2026-03-30 14:10:42 -04:00

digest_test.go

feat(m28+m29+m30): ACME ARI, email digest, and Helm chart

2026-03-28 21:18:35 -04:00

digest.go

fix: staticcheck S1016 struct conversion + Helm with/else-if parse error

2026-03-28 21:25:25 -04:00

discovery_test.go

feat: M18b Filesystem Certificate Discovery — agent scanning, server dedup, triage API

2026-03-24 00:25:00 -04:00

discovery.go

fix: resolve NULL csr_pem scan errors and QA smoke test failures

2026-03-30 00:51:18 -04:00

est_test.go

feat: add EST server (RFC 7030) for device certificate enrollment (M23)

2026-03-25 15:31:06 -04:00

est.go

feat(M11c): crypto policy enforcement — CSR validation, MaxTTL caps, key metadata

2026-04-15 21:05:14 -04:00

export_test.go

feat(m27): certificate export (PEM/PKCS#12) and S/MIME EKU support

2026-03-28 16:16:19 -04:00

export.go

fix: resolve NULL csr_pem scan errors and QA smoke test failures

2026-03-30 00:51:18 -04:00

health_check_test.go

feat(M48): continuous TLS health monitoring — endpoint state machine, shared tlsprobe, 8 API endpoints, GUI

2026-04-15 21:45:45 -04:00

health_check.go

feat(M48): continuous TLS health monitoring — endpoint state machine, shared tlsprobe, 8 API endpoints, GUI

2026-04-15 21:45:45 -04:00

issuer_adapter_test.go

feat(M11c): crypto policy enforcement — CSR validation, MaxTTL caps, key metadata

2026-04-15 21:05:14 -04:00

issuer_adapter.go

feat(M11c): crypto policy enforcement — CSR validation, MaxTTL caps, key metadata

2026-04-15 21:05:14 -04:00

issuer_bootstrap_test.go

fix(crypto): per-ciphertext PBKDF2 salt + v2 versioned format with v1 fallback (M-8)

2026-04-17 05:36:29 +00:00

issuer_registry_test.go

fix(crypto): per-ciphertext PBKDF2 salt + v2 versioned format with v1 fallback (M-8)

2026-04-17 05:36:29 +00:00

issuer_registry.go

fix(crypto): per-ciphertext PBKDF2 salt + v2 versioned format with v1 fallback (M-8)

2026-04-17 05:36:29 +00:00

issuer_test.go

fix(crypto): per-ciphertext PBKDF2 salt + v2 versioned format with v1 fallback (M-8)

2026-04-17 05:36:29 +00:00

issuer.go

fix(crypto): per-ciphertext PBKDF2 salt + v2 versioned format with v1 fallback (M-8)

2026-04-17 05:36:29 +00:00

job_test.go

feat(M34): dynamic issuer configuration with encrypted config storage

2026-04-04 00:20:13 -04:00

job.go

security: atomic pending-job claim with FOR UPDATE SKIP LOCKED (H-6)

2026-04-17 02:34:56 +00:00

m11c_crypto_enforcement_test.go

security: require SCEP challenge password when SCEP enabled (fixes H-2)

2026-04-16 22:22:51 +00:00

network_scan_test.go

security: add SSRF defence-in-depth for webhook notifier (fixes H-4)

2026-04-17 00:34:47 +00:00

network_scan.go

security: add SSRF defence-in-depth for webhook notifier (fixes H-4)

2026-04-17 00:34:47 +00:00

notification_test.go

Implement M4: comprehensive test coverage with 120 tests

2026-03-15 00:25:01 -04:00

notification.go

feat: M15a — certificate revocation API, CRL endpoint, and revocation notifications

2026-03-22 10:59:18 -04:00

owner_test.go

test: comprehensive test expansion — 330+ to 525+ tests, close M11b coverage gaps

2026-03-21 23:43:32 -04:00

owner.go

fix: replace fmt.Printf with structured slog logging across all services

2026-03-20 01:20:03 -04:00

policy_test.go

style: run gofmt -s across all Go files

2026-03-17 19:32:29 -04:00

policy.go

fix(ci): resolve 9 remaining staticcheck issues

2026-03-27 23:20:28 -04:00

profile_test.go

feat: M11a — certificate profiles, crypto policy enforcement, short-lived cert expiry

2026-03-20 20:39:49 -04:00

profile.go

feat: M11a — certificate profiles, crypto policy enforcement, short-lived cert expiry

2026-03-20 20:39:49 -04:00

renewal_test.go

docs: rewrite features.md, audit README + architecture against repo

2026-04-15 00:22:57 -04:00

renewal.go

feat(M11c): crypto policy enforcement — CSR validation, MaxTTL caps, key metadata

2026-04-15 21:05:14 -04:00

revocation_svc_test.go

feat(M34): dynamic issuer configuration with encrypted config storage

2026-04-04 00:20:13 -04:00

revocation_svc.go

feat(M34): dynamic issuer configuration with encrypted config storage

2026-04-04 00:20:13 -04:00

revocation_test.go

feat(M34): dynamic issuer configuration with encrypted config storage

2026-04-04 00:20:13 -04:00

scep_test.go

security: require SCEP challenge password when SCEP enabled (fixes H-2)

2026-04-16 22:22:51 +00:00

scep.go

security: require SCEP challenge password when SCEP enabled (fixes H-2)

2026-04-16 22:22:51 +00:00

shortlived_test.go

feat(M34): dynamic issuer configuration with encrypted config storage

2026-04-04 00:20:13 -04:00

stats_test.go

fix: resolve flaky TestGetJobStats_WithData timezone issue

2026-03-25 20:55:48 -04:00

stats.go

fix: normalize certificate status case in stats service

2026-03-24 12:17:24 -04:00

target_test.go

security: fail closed when CERTCTL_CONFIG_ENCRYPTION_KEY is unset (fixes C-2)

2026-04-16 21:10:40 +00:00

target.go

fix(crypto): per-ciphertext PBKDF2 salt + v2 versioned format with v1 fallback (M-8)

2026-04-17 05:36:29 +00:00

team_test.go

fix: resolve NULL csr_pem scan errors and QA smoke test failures

2026-03-30 00:51:18 -04:00

team.go

fix: replace fmt.Printf with structured slog logging across all services

2026-03-20 01:20:03 -04:00

testutil_test.go

fix(crypto): per-ciphertext PBKDF2 salt + v2 versioned format with v1 fallback (M-8)

2026-04-17 05:36:29 +00:00

verification_test.go

security: atomic pending-job claim with FOR UPDATE SKIP LOCKED (H-6)

2026-04-17 02:34:56 +00:00

verification.go

fix: remove unused time import in verification service

2026-03-27 21:11:16 -04:00