Issues - heiko/cert-proxy - schlittermann - sources

heiko/cert-proxy

Search syntax

`assignee:<username>`	Filter by assigned user
`author:<username>`	Filter by the author
`is:all`	All
`is:closed`	Closed
`is:open`	Open
`mentions:<username>`	Filter by mentioned user
`modified:[>\|<]<date>`	Filter by last modified date
`review:<username>`	Filter by user who reviewed
`sort:<by>:[asc\|desc]`	Sort by: `created\|comments\|updated\|deadline`

New issue

cert-proxy-client_1.20.0-1_arm64.deb

#45 opened 2026-06-18 15:29:19 +02:00 by sf

client: ValidateDomain accepts Windows reserved names used as path components

#39 opened 2026-05-20 21:51:02 +02:00 by heiko

serve.go: validate URL-derived domain (defense in depth, Windows considerations)

#38 opened 2026-05-20 21:48:42 +02:00 by heiko

cnList double-closes file handle, masking close errors

#32 opened 2026-05-17 23:13:51 +02:00 by heiko

certpool.go panics instead of returning an error on bad PEM

#30 opened 2026-05-17 23:13:33 +02:00 by heiko

Server error responses leak internal file paths to clients

#29 opened 2026-05-17 23:13:24 +02:00 by heiko

Certificate output directories created with mode 0777

#28 opened 2026-05-17 23:13:16 +02:00 by heiko

Server has no HTTP timeouts — Slowloris risk on public endpoints

#27 opened 2026-05-17 23:13:08 +02:00 by heiko

secret.Read panics on malformed input (missing colon or unknown proto)

#26 opened 2026-05-17 23:13:00 +02:00 by heiko

PKCS12 default encoder uses LegacyDES (40-bit RC2 + 3DES)

#25 opened 2026-05-17 23:12:51 +02:00 by heiko

PKCS12 password exposed in verbose logs via URL query parameter

#20 opened 2026-04-29 23:31:22 +02:00 by heiko

Replace openssl dependency in CA scripts with native Go implementation

#18 opened 2026-04-29 17:08:21 +02:00 by heiko master

Shared hook should run only if certs are modified

#10 opened 2021-11-01 10:58:50 +01:00 by heiko

remove certs that are not available on the server anymore

#5 opened 2021-10-19 10:07:09 +02:00 by heiko master