Issues

• Renovate splits lockstep Go module families into separate, individually failing PRs

  cidependencies
  Task

  voxpupuli/openvox-ca#424 · Filter by author bootc opened on Oct 6, 2026 · 1.0.0
  

• Honour If-Modified-Since on GET /certificate/{subject}

  enhancementgo
  Feature

  voxpupuli/openvox-ca#414 · Filter by author bootc opened on Oct 4, 2026

• Implement CRL upload: PUT /certificate_revocation_list

  enhancementgo
  Feature

  voxpupuli/openvox-ca#413 · Filter by author bootc opened on Oct 4, 2026

• Match POST /sign's answers for empty and malformed input

  buggo
  Bug

  voxpupuli/openvox-ca#412 · Filter by author bootc opened on Oct 4, 2026

• Answer 409 when signing a subject that has no CSR

  buggo
  Bug

  voxpupuli/openvox-ca#411 · Filter by author bootc opened on Oct 4, 2026 · 1.0.0
  

• Refuse PUT /certificate_request for a subject that already holds a certificate

  buggo
  Bug

  voxpupuli/openvox-ca#410 · Filter by author bootc opened on Oct 4, 2026 · 1.0.0
  

• Exclude the bare auth arc OID from authorization_extensions

  buggo
  Bug

  voxpupuli/openvox-ca#409 · Filter by author bootc opened on Oct 4, 2026

• Key OID 1.3.6.1.4.1.34380.1.3.2 by OID in authorization_extensions

  buggo
  Bug

  voxpupuli/openvox-ca#408 · Filter by author bootc opened on Oct 4, 2026

• List IP SANs in subject_alt_names

  buggo
  Bug

  voxpupuli/openvox-ca#407 · Filter by author bootc opened on Oct 4, 2026 · 1.0.0
  

• Add SHA1 and SHA512 to fingerprints in status responses

  buggo
  Bug

  voxpupuli/openvox-ca#406 · Filter by author bootc opened on Oct 4, 2026

• Check the Puppet CA HTTP API against a contract recorded from OpenVox Server

  documentationenhancementgo
  Task

  voxpupuli/openvox-ca#405 · Filter by author bootc opened on Oct 4, 2026 · 1.0.0

• Return serial_number in certificate status responses as a JSON number

  bugdocumentation
  Bug

  voxpupuli/openvox-ca#403 · Filter by author bootc opened on Oct 4, 2026 · 1.0.0
  

• Make the filesystem backend read and write an OpenVox Server cadir as-is

  bug
  Bug

  voxpupuli/openvox-ca#397 · Filter by author tcl-openc opened on Oct 3, 2026 · 1.0.0
  

• Flaky spec: launcher_test.go:706 fails on an empty recorder about 1 run in 100

  bugcigo
  voxpupuli/openvox-ca#376 · Filter by author bootc opened on Sep 15, 2026

• encrypt_ca_key writes its auto-generated passphrase relative to the working directory on every backend but filesystem

  buggosecurity
  voxpupuli/openvox-ca#375 · Filter by author bootc opened on Sep 15, 2026 · 1.0.0

• Supervisor reports the wrong child, and renders a nil cause as %!w(<nil>), when one exits cleanly during teardown

  buggo
  voxpupuli/openvox-ca#374 · Filter by author bootc opened on Sep 15, 2026

• Policy: should pull-request builds publish Sigstore-signed, SLSA-attested images?

  build-imagesquestionreview-signing-path
  voxpupuli/openvox-ca#369 · Filter by author bootc opened on Sep 13, 2026
  1

• Test-fixture images install an unverified, unpinned remote RPM and refresh the CRL with a silently-failing loop

  cidocker
  voxpupuli/openvox-ca#368 · Filter by author trevor-vaughan-ai opened on Sep 13, 2026

• Document the environment an autosign executable receives

  documentation
  voxpupuli/openvox-ca#367 · Filter by author trevor-vaughan-ai opened on Sep 13, 2026

• Neither Dockerfile declares a HEALTHCHECK, though compose and the chart both wire all three probes

  dockerenhancement
  voxpupuli/openvox-ca#366 · Filter by author trevor-vaughan-ai opened on Sep 13, 2026

• README Quick start writes to /etc/puppetlabs and never says it needs root

  documentation
  voxpupuli/openvox-ca#365 · Filter by author trevor-vaughan-ai opened on Sep 13, 2026

• Release tarballs ship unstripped binaries while the container images strip them, costing 43 MB per tarball

  cienhancement
  voxpupuli/openvox-ca#364 · Filter by author trevor-vaughan-ai opened on Sep 13, 2026

• openvox-ca-ctl prints a TLS trust-store notice on every plain-HTTP invocation

  buggo
  voxpupuli/openvox-ca#363 · Filter by author trevor-vaughan-ai opened on Sep 13, 2026

• --help does not mark any of the thirteen required flags, on either binary

  enhancementgo
  voxpupuli/openvox-ca#362 · Filter by author trevor-vaughan-ai opened on Sep 13, 2026

• openvox-ca-ctl silently ignores stray positional arguments and prints no usage on a missing flag, unlike openvox-ca and puppetserver ca

  buggo
  voxpupuli/openvox-ca#361 · Filter by author trevor-vaughan-ai opened on Sep 13, 2026