Jarian Cottingham 279a28515f fix: generate JWT secret on first boot instead of hardcoded default (#19)
Generate random 256-bit secret stored in /var/lib/certauth/.jwt_secret (mode 0600)
ENV JWT_SECRET takes precedence. Remove CHANGE_ME_JWT_SECRET default.
Add tests for secret generation and env override
2026-07-04 04:48:30 +00:00
2026-07-03 01:14:04 +00:00
2026-07-01 04:52:16 +00:00
2026-07-03 01:14:04 +00:00
2026-07-03 01:14:04 +00:00
Description
Self-contained certificate authority with YubiKey-backed signing. Root + intermediate CA keys on two YubiKeys; every signing requires physical touch + PIN.
MIT 134 KiB
Languages
Python 47.1%
HTML 27.3%
Shell 25.6%