Yaojia Wang 55d177e9ee fix(control-plane): accept escaped-PEM client cert on /renew ...

nginx has no njs deployed, so the mTLS terminator forwards the verified client
cert via $ssl_client_escaped_cert (URL-encoded PEM). headerPresentedCert now
normalizes base64-DER, PEM, and escaped-PEM alike to raw DER. 281 tests pass.

2026-07-19 07:00:48 +02:00

..

bin

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

db

feat(relay): Phase1 foundation — P3 Postgres store + async capability verifier + compose

2026-07-06 14:51:37 +02:00

src

fix(control-plane): accept escaped-PEM client cert on /renew

2026-07-19 07:00:48 +02:00

test

feat(control-plane): production native-CA wiring for on-disk P-256 CAs (A2-prep)

2026-07-18 15:04:04 +02:00

package-lock.json

feat(tunnel): zero-touch tunnel enrollment — control-plane PKI, host agent, iOS, nginx isolation

2026-07-10 16:11:13 +02:00

package.json

feat(tunnel): zero-touch tunnel enrollment — control-plane PKI, host agent, iOS, nginx isolation

2026-07-10 16:11:13 +02:00

tsconfig.json

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00

vitest.config.ts

feat(relay): rendezvous-relay service — 7 packages + plans (contracts/transport/agent/control-plane/e2e/auth/web)

2026-07-02 06:10:16 +02:00