shankar0123 6d508cf53f fix: security audit remediation (AUDIT-001, 003, 004, 005, 006, 018) ...

- AUDIT-001: Validate OpenSSL revoke inputs (hex-only serials, RFC 5280 reasons)
- AUDIT-003: Enforce /20 CIDR size cap at API level (create + update)
- AUDIT-004: Support comma-separated CERTCTL_AUTH_SECRET for zero-downtime key rotation
- AUDIT-005: Add ReadHeaderTimeout (5s) to prevent Slowloris
- AUDIT-006: Document audit trail query parameter exclusion rationale
- AUDIT-018: Add immediate-run-on-start to short-lived expiry scheduler loop

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-28 14:11:16 -04:00

..

agent

fix(ci): resolve 185 golangci-lint v2 issues — fix unused, tune config

2026-03-27 23:18:04 -04:00

cli

feat: M17 OpenSSL/Custom CA issuer connector + M16b CLI tool with bulk import

2026-03-23 18:12:40 -04:00

mcp-server

feat: M18a — MCP server exposing all 76 API endpoints as AI-native tools

2026-03-23 16:49:39 -04:00

server

fix: security audit remediation (AUDIT-001, 003, 004, 005, 006, 018)

2026-03-28 14:11:16 -04:00