1. 29 Apr, 2022 7 commits
    • Justus Winter's avatar
    • Justus Winter's avatar
      recursively propagate changes · 72d46657
      Justus Winter authored
      We now publish mutual certifications.  Consider Alice certifies Bob,
      and Bob certifies Alice.  When Alice uploads her cert, Bob's
      certifications are not published because we don't know that the
      certification is mutual because we haven't seen Bob's cert yet.  When
      Bob uploads his cert, we now see that the certifications are mutual,
      and can immediately publish Alice's certifications on Bob's cert.
      However, we also need to update Alice's cert to now include Bob's
      certification.  This patch implements that by propagating changes up
      to a certain depth (currently 1).  We release the database lock as not
      to starve other requests.
    • Justus Winter's avatar
      add note · 22865a98
      Justus Winter authored
    • Justus Winter's avatar
      serve certifications made by openpgp-ca.org · 5d11f503
      Justus Winter authored
      This change enables certifications made by openpgp-ca to be served.
      In addition, tsigs issued by the signees are served based on the
      mutual certification principle.  This makes Hagrid support all the
      workflows enabled by openpgp-ca.
    • Justus Winter's avatar
      serve mutual certifications · a474d38c
      Justus Winter authored
      If Alice certifies Bob, and Bob certifies Alice, take that as consent
      for the certifications.  Also, only serve the N most recent
      certification signature.  In combination, this prevents certificate
    • Justus Winter's avatar
    • Justus Winter's avatar
      make tpk_clean consume the cert · 2bd5e484
      Justus Winter authored
      This makes sure that the uncleaned cert is not used by the caller by
  2. 26 Feb, 2022 5 commits
  3. 25 Feb, 2022 13 commits
  4. 15 Feb, 2022 1 commit
  5. 06 Feb, 2022 14 commits