linux_patch_api

Private

Public Access

Author	SHA1	Message	Date
Echo	73a11e70e0	fix(certs): replace encrypted CA with unencrypted ECDSA P-256 CA All checks were successful CI/CD Pipeline / Code Format (push) Successful in 4s Details CI/CD Pipeline / Clippy Lints (push) Successful in 43s Details CI/CD Pipeline / All Unit Tests (push) Successful in 1m13s Details CI/CD Pipeline / Security Audit (push) Successful in 5s Details CI/CD Pipeline / Enrollment Tests (push) Successful in 1m13s Details CI/CD Pipeline / Verify Enrollment CLI Flag (push) Successful in 1m1s Details CI/CD Pipeline / Build Arch Package (push) Successful in 2m51s Details CI/CD Pipeline / Build Debian Package (Ubuntu 22.04) (push) Successful in 2m34s Details CI/CD Pipeline / Build Debian Package (push) Successful in 2m45s Details CI/CD Pipeline / Build Alpine Package (push) Successful in 3m56s Details CI/CD Pipeline / Build RPM Package (push) Successful in 4m15s Details - Replaced password-protected RSA CA with unencrypted ECDSA P-256 CA to prevent manager startup failures from encrypted keys. - Regenerated server and client certificates (client001) with new CA. - Updated CA_SETUP.md to use openssl genpkey (unencrypted) instead of openssl genrsa -aes256, with warning against encrypted keys.	2026-05-18 16:00:22 +00:00
Echo	65cfb40abb	v1.0.0 Release - All Phases Complete Some checks failed CI/CD Pipeline / Code Format (push) Has been cancelled Details CI/CD Pipeline / Clippy Lints (push) Has been cancelled Details CI/CD Pipeline / Unit Tests (push) Has been cancelled Details CI/CD Pipeline / Security Audit (push) Has been cancelled Details CI/CD Pipeline / Build Release (x86_64-unknown-linux-gnu) (push) Has been cancelled Details CI/CD Pipeline / Build Ubuntu Package (push) Has been cancelled Details Phase 2: Core API Development - 15 REST API endpoints (packages, patches, system, jobs, websocket) - mTLS authentication layer (src/auth/mtls.rs) - IP whitelist enforcement (src/auth/whitelist.rs) - Job manager with async operation support - WebSocket streaming for job status Phase 3: Security Hardening - Security testing: 16/16 tests passing - Fuzz testing: 21 tests, all findings resolved - Threat model validation (STRIDE matrix) - TLS binding fix (critical vulnerability resolved) - Security documentation complete Phase 4: Production Readiness - Performance benchmarking (all targets met) - Package creation (.deb/.rpm structures) - Documentation (README, API docs, deployment guide) - Security hardening (6 vulnerabilities fixed) Deliverables: - API_DOCUMENTATION.md (889 lines) - DEPLOYMENT_GUIDE.md (733 lines) - SECURITY.md (346 lines) - README.md (525 lines) - debian/ package structure - linux-patch-api.spec (RPM) - install.sh installer script - benches/api_benchmarks.rs - Multiple security/performance reports Security Status: 0 vulnerabilities remaining Test Coverage: 31 unit tests, 21 integration tests Build Status: Release optimized	2026-04-10 01:41:19 +00:00

2 Commits