-
Notifications
You must be signed in to change notification settings - Fork 0
Open
Labels
coreCritical logic that touches certificate issuance, CRL, or PKI foundations.Critical logic that touches certificate issuance, CRL, or PKI foundations.featureA new capability or enhancement for users.A new capability or enhancement for users.infraChanges to build, deployment, or system setup.Changes to build, deployment, or system setup.refactorStructural or architectural changes without new features.Structural or architectural changes without new features.
Description
The current serial number mechanism uses a simple file-based increment which risks collisions under concurrent requests. Replace this with an atomic approach — e.g., file locks, UUID-based serials, or a lightweight sequence via SQLite or similar. Ensures RFC 5280 compliance and prepares the system for HA deployments.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
coreCritical logic that touches certificate issuance, CRL, or PKI foundations.Critical logic that touches certificate issuance, CRL, or PKI foundations.featureA new capability or enhancement for users.A new capability or enhancement for users.infraChanges to build, deployment, or system setup.Changes to build, deployment, or system setup.refactorStructural or architectural changes without new features.Structural or architectural changes without new features.