Draft-05 and sunlight mirror support - #10

Merged

mcpherrinm merged 22 commits into

mainfrom

review-fixes

Jul 21, 2026

Commits on Jul 21, 2026

cert,acme,tlogx: update to draft-ietf-plants-merkle-tree-certs-05
mcpherrinm
committed
df535e1
mirror,config,cmd: drop the mirror operating mode
mcpherrinm
committed
5ea14fb
mirrorpush,cert: push the log to a c2sp.org/tlog-mirror
mcpherrinm
committed
5d8306f
cactus-keygen: export and import c2sp signed-note vkeys
mcpherrinm
committed
2bc18e5
docker: compose stack running cactus against Sunlight as a mirror
mcpherrinm
committed
15e18d2
docs: retarget to draft-05, document the mirror stack
mcpherrinm
committed
7f8a21a
integration: bulk issuance stress test
mcpherrinm
committed
508a586
ci: nightly workflow for the bulk issuance stress test
mcpherrinm
committed
2563859
all: renumber draft section citations for draft-05
mcpherrinm
committed
64a422b
ca: reject non-DNS/IP SANs and subset CSRs at validation
mcpherrinm
committed
2e31fc0
acme: enforce account ownership and RFC 8555 access-control rules
mcpherrinm
committed
d9329d8
cert: reject reordered TBS tail fields in RebuildLogEntryFromTBS
mcpherrinm
committed
8512d4e
cert: check the inner TBSCertificate.signature algorithm (§7.2 step 1)
mcpherrinm
committed
aef0b27
mirrorpush: clamp unauthenticated discovery size to our checkpoint
mcpherrinm
committed
1c46f7f
mirrorpush: clear stale ticket, bound response size and timestamps
mcpherrinm
committed
78a6900
config,log,cmd: wire pool_size, fail loud, and tighten validation
mcpherrinm
committed
f6c2af9
docs: correct CA-ID form, disk layout, and stale references
mcpherrinm
committed
f983252
cleanup: drop shadowed builtins and dead parameters
mcpherrinm
committed
8a0c629
log: cover from last committed size so a failed flush re-covers the gap
mcpherrinm
committed
f10237c
acme: skip dangling order IDs in the account orders list
mcpherrinm
committed
f8b0d9f
go fmt
mcpherrinm
committed
7026b42
ci: build with the go1.27 release candidate instead of gotip
mcpherrinm
committed
e2c7ede

Navigation Menu

Draft-05 and sunlight mirror support - #10

Draft-05 and sunlight mirror support#10
mcpherrinm merged 22 commits into
mainfrom
review-fixes

Commits on Jul 21, 2026

cert,acme,tlogx: update to draft-ietf-plants-merkle-tree-certs-05

mirror,config,cmd: drop the mirror operating mode

mirrorpush,cert: push the log to a c2sp.org/tlog-mirror

cactus-keygen: export and import c2sp signed-note vkeys

docker: compose stack running cactus against Sunlight as a mirror

docs: retarget to draft-05, document the mirror stack

integration: bulk issuance stress test

ci: nightly workflow for the bulk issuance stress test

all: renumber draft section citations for draft-05

ca: reject non-DNS/IP SANs and subset CSRs at validation

acme: enforce account ownership and RFC 8555 access-control rules

cert: reject reordered TBS tail fields in RebuildLogEntryFromTBS

cert: check the inner TBSCertificate.signature algorithm (§7.2 step 1)

mirrorpush: clamp unauthenticated discovery size to our checkpoint

mirrorpush: clear stale ticket, bound response size and timestamps

config,log,cmd: wire pool_size, fail loud, and tighten validation

docs: correct CA-ID form, disk layout, and stale references

cleanup: drop shadowed builtins and dead parameters

log: cover from last committed size so a failed flush re-covers the gap

acme: skip dangling order IDs in the account orders list

go fmt

ci: build with the go1.27 release candidate instead of gotip