Add secure HTTP server communication transport - #73

Open

BenCodez wants to merge 34 commits into

mainfrom

codex/http-transport-library

Commits on Sep 5, 2026

feat(servercomm): add secure HTTP transport
BenCodez
committed
87d506f
fix(servercomm): persist HTTP replay state
BenCodez
committed
2951868
fix(servercomm): confirm HTTP delivery acknowledgements
BenCodez
committed
f62bf69
fix(servercomm): fail closed on partial HTTP state
BenCodez
committed
e9159c1
fix(servercomm): bound authority state and support IPv6
BenCodez
committed
e3f08cc
fix(servercomm): bound proxy state and secure credential roots
BenCodez
committed
4b92ea3
fix(servercomm): separate HTTP acknowledgement directions
BenCodez
committed
1faa2d2
Handle HTTP renewal and backend state churn
BenCodez
committed
c01f2cc
Make HTTP revocation persistence retryable
BenCodez
committed
80a55da
Fix remaining HTTP transport review findings
BenCodez
committed
9d0166f
Track uncertain HTTP queue publications
BenCodez
committed
ea26fde
Make HTTP enrollment and queue retries safe
BenCodez
committed
8d8e9c8
Fix remaining HTTP transport review findings
BenCodez
committed
989ec3f

Commits on Sep 6, 2026

Fix transport queue uncertainty and 429 handling

Copilot
and
BenCodez
authored
831f2f1
Keep uncertain queue entries hidden after restart
BenCodez
committed
6f31643
Recover generated sends and published credential replacements
BenCodez
committed
a6967d8
Recover authority and completed delivery persistence failures
BenCodez
committed
cf155d9
Retry pre-callback state writes and bound quarantined backends
BenCodez
committed
5bcce2d
Enforce verified private permissions for HTTP transport state
BenCodez
committed
11130ed
Confirm credential activation and safely finish callback shutdown
BenCodez
committed
99ebcc6
Preserve enrollment CA trust and validate codes before reservation
BenCodez
committed
4c7887f
Require trusted CA key continuity for credential renewal
BenCodez
committed
c8befc4
Enforce one-second minimum enrollment lifetime
BenCodez
committed
2ab7908
Lock inbound journal ownership and validate client key pairs
BenCodez
committed
d6a202c
Recover journal retirement and lock outgoing proxy queues
BenCodez
committed
c9b9e6f
Prevent backend state creation after proxy shutdown
BenCodez
committed
d5e8474
Close backend send admission and enforce pending enrollment expiry
BenCodez
committed
2fe4343
Rate limit certificate renewal and serialize TLS identity writes
BenCodez
committed
d2754e9
Reload persisted TLS identity before renewal
BenCodez
committed
8a994f0
Restore inbound journals within the backend capacity bound
BenCodez
committed
7bf06f9
test: isolate failed HTTP revocation retries
BenCodez
committed
c390c0f
Preserve failed revocation target across retries
BenCodez
committed
7beae58
Wait for concurrent JSON saves in tests
BenCodez
committed
826e680
Recover durable HTTP setup failure paths
BenCodez
committed
af984b8

Navigation Menu

Add secure HTTP server communication transport - #73

Add secure HTTP server communication transport#73
BenCodez wants to merge 34 commits into
mainfrom
codex/http-transport-library

Commits on Sep 5, 2026

feat(servercomm): add secure HTTP transport

fix(servercomm): persist HTTP replay state

fix(servercomm): confirm HTTP delivery acknowledgements

fix(servercomm): fail closed on partial HTTP state

fix(servercomm): bound authority state and support IPv6

fix(servercomm): bound proxy state and secure credential roots

fix(servercomm): separate HTTP acknowledgement directions

Handle HTTP renewal and backend state churn

Make HTTP revocation persistence retryable

Fix remaining HTTP transport review findings

Track uncertain HTTP queue publications

Make HTTP enrollment and queue retries safe

Fix remaining HTTP transport review findings

Commits on Sep 6, 2026

Fix transport queue uncertainty and 429 handling

Keep uncertain queue entries hidden after restart

Recover generated sends and published credential replacements

Recover authority and completed delivery persistence failures

Retry pre-callback state writes and bound quarantined backends

Enforce verified private permissions for HTTP transport state

Confirm credential activation and safely finish callback shutdown

Preserve enrollment CA trust and validate codes before reservation

Require trusted CA key continuity for credential renewal

Enforce one-second minimum enrollment lifetime

Lock inbound journal ownership and validate client key pairs

Recover journal retirement and lock outgoing proxy queues

Prevent backend state creation after proxy shutdown

Close backend send admission and enforce pending enrollment expiry

Rate limit certificate renewal and serialize TLS identity writes

Reload persisted TLS identity before renewal

Restore inbound journals within the backend capacity bound

test: isolate failed HTTP revocation retries

Preserve failed revocation target across retries

Wait for concurrent JSON saves in tests

Recover durable HTTP setup failure paths