metacrypt

Files

Kyle Isom 656f22e19b Add vault_sni config for container TLS hostname override

The web UI connects to the vault API via gRPC using the Docker
compose service name (e.g., "metacrypt:9443"), but the vault's TLS
certificate has SANs for "crypt.metacircular.net" and "localhost".
The new vault_sni config field overrides the TLS ServerName so
certificate verification succeeds despite the hostname mismatch.

Also updates metacrypt-rift.toml with vault_sni and temporarily
binds the web UI port to 0.0.0.0 for direct access until mc-proxy
is deployed.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-25 19:28:50 -07:00

cert_detail_test.go

Add web UI for SSH CA, Transit, and User engines; full security audit and remediation

2026-03-16 22:02:06 -07:00

client.go

Add vault_sni config for container TLS hostname override

2026-03-25 19:28:50 -07:00

csrf_test.go

Add MEK rotation, per-engine DEKs, and v2 ciphertext format (audit #6 , #22 )

2026-03-16 18:27:44 -07:00

csrf.go

Add MEK rotation, per-engine DEKs, and v2 ciphertext format (audit #6 , #22 )