Yaojia Wang 55d177e9ee fix(control-plane): accept escaped-PEM client cert on /renew ...

nginx has no njs deployed, so the mTLS terminator forwards the verified client
cert via $ssl_client_escaped_cert (URL-encoded PEM). headerPresentedCert now
normalizes base64-DER, PEM, and escaped-PEM alike to raw DER. 281 tests pass.

2026-07-19 07:00:48 +02:00

..

api

fix(control-plane): accept escaped-PEM client cert on /renew

2026-07-19 07:00:48 +02:00

audit

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

auth

feat(control-plane): POST /auth/login mints device:enroll bearer (B1)

2026-07-18 13:32:05 +02:00

boot

feat(control-plane): production native-CA wiring for on-disk P-256 CAs (A2-prep)

2026-07-18 15:04:04 +02:00

ca

feat(tunnel): zero-touch tunnel enrollment — control-plane PKI, host agent, iOS, nginx isolation

2026-07-10 16:11:13 +02:00

db

feat(relay): Phase1 foundation — P3 Postgres store + async capability verifier + compose

2026-07-06 14:51:37 +02:00

deprovision

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

metering

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

model

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

node-auth

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

pairing

feat(tunnel): zero-touch tunnel enrollment — control-plane PKI, host agent, iOS, nginx isolation

2026-07-10 16:11:13 +02:00

registry

feat(tunnel): zero-touch tunnel enrollment — control-plane PKI, host agent, iOS, nginx isolation

2026-07-10 16:11:13 +02:00

revoke

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

routing

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

store

feat(tunnel): zero-touch tunnel enrollment — control-plane PKI, host agent, iOS, nginx isolation

2026-07-10 16:11:13 +02:00

subdomain

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

util

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

env.ts

feat(control-plane): production native-CA wiring for on-disk P-256 CAs (A2-prep)

2026-07-18 15:04:04 +02:00

flat-store.ts

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

main.ts

feat(control-plane): production native-CA wiring for on-disk P-256 CAs (A2-prep)

2026-07-18 15:04:04 +02:00

server.ts

feat(control-plane): production native-CA wiring for on-disk P-256 CAs (A2-prep)

2026-07-18 15:04:04 +02:00