Shankar c014c17cc6 feat(m27): certificate export (PEM/PKCS#12) and S/MIME EKU support ...

Add certificate export in PEM (JSON or file download) and PKCS#12 formats.
Private keys are never included — they stay on agents. Add EKU-aware
issuance threading profile EKUs (serverAuth, clientAuth, codeSigning,
emailProtection, timeStamping) through the full issuance pipeline. Fix
agent CSR SAN splitting for email addresses, adaptive KeyUsage flags for
S/MIME vs TLS, and a pre-existing generateID collision bug in deployment
job creation.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-28 16:16:19 -04:00

..

handler

feat(m27): certificate export (PEM/PKCS#12) and S/MIME EKU support

2026-03-28 16:16:19 -04:00

middleware

fix: security audit remediation (AUDIT-001, 003, 004, 005, 006, 018)

2026-03-28 14:11:16 -04:00

router

feat(m27): certificate export (PEM/PKCS#12) and S/MIME EKU support

2026-03-28 16:16:19 -04:00