shankar0123 ec0e7a3560 feat: wire ARI (RFC 9702) into renewal scheduler ...

CheckExpiringCertificates() now queries each issuer's ARI endpoint
before creating renewal jobs. If the CA says "not yet" (suggested
window hasn't opened), renewal is deferred. ARI errors fall back
gracefully to threshold-based logic. Audit trail records
renewal_trigger=ari when ARI drives the decision.

4 new unit tests: ShouldRenewNow, NotYet, NilFallback, ErrorFallback.
3 new smoke tests in testing-guide.md Part 35.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-30 12:11:42 -04:00

..

api

fix: resolve NULL csr_pem scan errors and QA smoke test failures

2026-03-30 00:51:18 -04:00

cli

feat: M17 OpenSSL/Custom CA issuer connector + M16b CLI tool with bulk import

2026-03-23 18:12:40 -04:00

config

feat(pre-2.1.0): demo data overhaul, examples, migration guides, install script

2026-03-29 18:26:58 -04:00

connector

feat(m28+m29+m30): ACME ARI, email digest, and Helm chart

2026-03-28 21:18:35 -04:00

domain

feat(m28+m29+m30): ACME ARI, email digest, and Helm chart

2026-03-28 21:18:35 -04:00

integration

fix: resolve test compilation and runtime failures across codebase

2026-03-27 22:53:46 -04:00

mcp

fix: resolve NULL csr_pem scan errors and QA smoke test failures

2026-03-30 00:51:18 -04:00

repository

fix: resolve NULL csr_pem scan errors and QA smoke test failures

2026-03-30 00:51:18 -04:00

scheduler

feat(m28+m29+m30): ACME ARI, email digest, and Helm chart

2026-03-28 21:18:35 -04:00

service

feat: wire ARI (RFC 9702) into renewal scheduler

2026-03-30 12:11:42 -04:00

validation

fix: resolve test compilation and runtime failures across codebase

2026-03-27 22:53:46 -04:00