brianmcgee 1950b9f470 {cmd, pkg}: enforce a maximum ValidFor ...

Without an upper bound, a client or malicious peer could set `ValidFor`
to an absurdly large duration (e.g. 290 years), which is functionally
equivalent to no expiry.

Add `config.MaxValidFor` (default 30 days) and enforce it at all three ingress points: HTTP handler, CLI, and gossip import filter.

2026-04-10 15:33:47 +01:00

..

certificate

cmd/certificate: remove shortcode for name flag

2026-03-30 11:48:34 +01:00

common

feat: refine key-related commands and add new commands for CA

2026-02-04 14:44:05 +00:00

file

{cmd, pkg}: enforce a maximum ValidFor

2026-04-10 15:33:47 +01:00

generate

pkg/crypto: add machine name to identity certificate

2026-03-30 11:48:31 +01:00

peer

cmd: strip newline from peer id output

2026-02-20 11:18:51 +00:00

server

chore: standardise slog key/value with the intentional API

2026-01-26 11:40:32 +00:00

root.go

cmd: add peer sub commands

2026-02-20 10:55:21 +00:00