openxpki
openxpki copied to clipboard
OpenXPKI Code
The current implementation verifies if Revocation Time is greater or equal than the NotBefore of the certificate. Although this is OK in most cases, it is a problem if the...
Bumps [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) from 7.21.4 to 7.23.2. Release notes Sourced from @babel/traverse's releases. v7.23.2 (2023-10-11) NOTE: This release also re-publishes @babel/core, even if it does not appear in the linked release...
The apache standard distribution offers mod_proxy_fcgi which should suit as a replacement when using the existing fast cgi wrappers in server mode or under supervision of a fastcgi runner.
Bumps [postcss](https://github.com/postcss/postcss) from 8.4.21 to 8.4.31. Release notes Sourced from postcss's releases. 8.4.31 Fixed \r parsing to fix CVE-2023-44270. 8.4.30 Improved source map performance (by @romainmenke). 8.4.29 Fixed Node#source.offset (by...
Bumps [socket.io-parser](https://github.com/socketio/socket.io-parser) from 4.2.2 to 4.2.4. Release notes Sourced from socket.io-parser's releases. 4.2.4 Bug Fixes ensure reserved events cannot be used as event names (d9db473) properly detect plain objects (b0e6400)...
As the workflow id is a sequence generated number it is basically possible to access a workflow by iterating ids against the workflow info URL. Even if the ACL prevents...
The Datapool API supports encrypted storage of data in the datapool. Although this works fine it would be nice to provide a transparent encryption mechanism to the core system that...
I can find some doc on how to set the REMOTE_USER but not on how to pass more info, including role, and some fields to be automatically put in the...
Oracles numeric data type supports only a 38 digit precision which is not large enough to store a 20 bytes serial number as demanded by RFC5280. Using a varchar type...
To support deploying OpenXPKI in a cloud environment it should be possible to use TCP instead of unix sockets between UI and backend. As currently the unix socket permissions are...