shankar0123 a00bb349c4 feat(m27): certificate export (PEM/PKCS#12) and S/MIME EKU support ...

Add certificate export in PEM (JSON or file download) and PKCS#12 formats.
Private keys are never included — they stay on agents. Add EKU-aware
issuance threading profile EKUs (serverAuth, clientAuth, codeSigning,
emailProtection, timeStamping) through the full issuance pipeline. Fix
agent CSR SAN splitting for email addresses, adaptive KeyUsage flags for
S/MIME vs TLS, and a pre-existing generateID collision bug in deployment
job creation.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-28 16:16:19 -04:00

..

000001_initial_schema.down.sql

Implement M3: expiration threshold alerting with dedup and status transitions

2026-03-15 00:03:43 -04:00

000001_initial_schema.up.sql

perf: add 5 database indexes for scheduler query optimization

2026-03-20 01:20:21 -04:00

000002_agent_metadata.down.sql

feat: M10 — agent metadata collection, Apache httpd + HAProxy target connectors

2026-03-20 02:19:28 -04:00

000002_agent_metadata.up.sql

feat: M10 — agent metadata collection, Apache httpd + HAProxy target connectors

2026-03-20 02:19:28 -04:00

000003_certificate_profiles.down.sql

feat: M11a — certificate profiles, crypto policy enforcement, short-lived cert expiry

2026-03-20 20:39:49 -04:00

000003_certificate_profiles.up.sql

feat: M11a — certificate profiles, crypto policy enforcement, short-lived cert expiry

2026-03-20 20:39:49 -04:00

000004_agent_groups.down.sql

feat: M11b — ownership tracking, agent groups, interactive renewal approval

2026-03-20 21:02:35 -04:00

000004_agent_groups.up.sql

feat: M11b — ownership tracking, agent groups, interactive renewal approval

2026-03-20 21:02:35 -04:00

000005_revocation.down.sql

feat: M15a — certificate revocation API, CRL endpoint, and revocation notifications

2026-03-22 10:59:18 -04:00

000005_revocation.up.sql

feat: M15a — certificate revocation API, CRL endpoint, and revocation notifications

2026-03-22 10:59:18 -04:00

000006_discovery.down.sql

feat: M18b Filesystem Certificate Discovery — agent scanning, server dedup, triage API

2026-03-24 00:25:00 -04:00

000006_discovery.up.sql

feat: M18b Filesystem Certificate Discovery — agent scanning, server dedup, triage API

2026-03-24 00:25:00 -04:00

000007_network_discovery.down.sql

feat: add network certificate discovery (M21) and Prometheus metrics (M22)

2026-03-24 23:37:47 -04:00

000007_network_discovery.up.sql

feat: add network certificate discovery (M21) and Prometheus metrics (M22)

2026-03-24 23:37:47 -04:00

000008_verification.down.sql

feat: M25 post-deployment TLS verification + M26 Traefik/Caddy targets

2026-03-27 21:07:16 -04:00

000008_verification.up.sql

feat: M25 post-deployment TLS verification + M26 Traefik/Caddy targets

2026-03-27 21:07:16 -04:00

seed_demo.sql

feat(m27): certificate export (PEM/PKCS#12) and S/MIME EKU support

2026-03-28 16:16:19 -04:00

seed.sql

Implement M3: expiration threshold alerting with dedup and status transitions

2026-03-15 00:03:43 -04:00