1.0.0

Open

No due date

•Last updated Oct 3, 2026

Planning and readiness for the first stable (1.0.0) release of openvox-ca. Groups the work — features, hardening, docs, and open design questions — that should land or be resolved before we tag 1.0.0.

75% complete

Ship deb and rpm packages
Feature
voxpupuli/openvox-ca#158 · opened on Jul 28, 2026 · 1.0.0
2
Add a supported way to rebuild the inventory HMAC
Feature
voxpupuli/openvox-ca#188 · opened on Aug 2, 2026 · 1.0.0
2
Managed certificates: one mechanism for issuing and renewing a named leaf
Feature
voxpupuli/openvox-ca#242 · opened on Aug 23, 2026 · 1.0.0
1
Issue and renew certificates for OpenVox components into Kubernetes Secrets or local files
Feature
voxpupuli/openvox-ca#243 · opened on Aug 23, 2026 · 1.0.0
2
Make outbound documentation links absolute so the docs can ship in a package
Task
voxpupuli/openvox-ca#249 · opened on Aug 23, 2026 · 1.0.0
Package payload, first-boot provisioning and mage build:packages
Feature
voxpupuli/openvox-ca#250 · opened on Aug 23, 2026 · 1.0.0
3
Debian package: debconf, ucf, policy-rc.d-aware start, and a purge question
Feature
voxpupuli/openvox-ca#251 · opened on Aug 23, 2026 · 1.0.0
1
EL package: presets, %config(noreplace), and an environment file
Feature
voxpupuli/openvox-ca#252 · opened on Aug 23, 2026 · 1.0.0
1
Publish deb and rpm packages from the release workflow
Feature
voxpupuli/openvox-ca#253 · opened on Aug 23, 2026 · 1.0.0
CI install-and-verify legs for the deb and rpm packages
Task
voxpupuli/openvox-ca#254 · opened on Aug 23, 2026 · 1.0.0
Publish deb and rpm packages from the release workflow
Unread
#266 opened Aug 23, 2026 · Updated Oct 3, 2026
4
Package payload, first-boot provisioning and mage build:packages
Unread
#282 opened Aug 31, 2026 · Updated Oct 3, 2026
29
Pre-1.0.0 documentation review: claims the code contradicts, and upgrade prose with nothing to upgrade from
Task
voxpupuli/openvox-ca#310 · opened on Sep 6, 2026 · 1.0.0
5
Add a supported way to rebuild the inventory HMAC
Unread
#312 opened Sep 6, 2026 · Updated Oct 3, 2026
15
Pre-1.0.0: @trevor-vaughan's LLM sanity scrub before we tag
Task
voxpupuli/openvox-ca#321 · opened on Sep 10, 2026 · 1.0.0
2
Managed certificates: one mechanism for issuing and renewing a named leaf
Unread
#322 opened Sep 10, 2026 · Updated Oct 3, 2026
12
Let the CA issue and renew its own serving certificate
Feature
voxpupuli/openvox-ca#326 · opened on Sep 11, 2026 · 1.0.0
Issue and renew certificates for OpenVox components into Kubernetes Secrets or local files
Unread
#336 opened Sep 11, 2026 · Updated Oct 3, 2026
13
Let the CA issue and renew its own serving certificate
Unread
#344 opened Sep 13, 2026 · Updated Oct 3, 2026
10
Complete the rename to OpenVox CA: metrics, alerts, env vars, paths and the service account
Feature
voxpupuli/openvox-ca#349 · opened on Sep 13, 2026 · 1.0.0
7
SQLite backend creates the database holding the CA private key at mode 0644, and CheckKeyPermissions cannot warn about it
voxpupuli/openvox-ca#351 · opened on Sep 13, 2026 · 1.0.0
--sql-dsn takes a database password on the command line, and the help text and docs demonstrate it that way
voxpupuli/openvox-ca#355 · opened on Sep 13, 2026 · 1.0.0
Helm chart renders redis_password, etcd_password and sql_dsn into a ConfigMap, and openvox-ca.validate does not refuse it
voxpupuli/openvox-ca#356 · opened on Sep 13, 2026 · 1.0.0
PUT /certificate_status/{subject} with desired_state: revoked returns 409 for an unknown subject where Puppet Server returns 404
voxpupuli/openvox-ca#358 · opened on Sep 13, 2026 · 1.0.0
Never create CA key material with world access, and refuse to serve it
Unread
#371 opened Sep 15, 2026 · Updated Oct 2, 2026
15

Navigation Menu

1.0.0

Ship deb and rpm packages

Add a supported way to rebuild the inventory HMAC

Managed certificates: one mechanism for issuing and renewing a named leaf

Issue and renew certificates for OpenVox components into Kubernetes Secrets or local files

Make outbound documentation links absolute so the docs can ship in a package

Package payload, first-boot provisioning and `mage build:packages`

Debian package: debconf, ucf, policy-rc.d-aware start, and a purge question

EL package: presets, %config(noreplace), and an environment file

Publish deb and rpm packages from the release workflow

CI install-and-verify legs for the deb and rpm packages

Publish deb and rpm packages from the release workflow

Package payload, first-boot provisioning and `mage build:packages`

Pre-1.0.0 documentation review: claims the code contradicts, and upgrade prose with nothing to upgrade from

Add a supported way to rebuild the inventory HMAC

Pre-1.0.0: @trevor-vaughan's LLM sanity scrub before we tag

Managed certificates: one mechanism for issuing and renewing a named leaf

Let the CA issue and renew its own serving certificate

Issue and renew certificates for OpenVox components into Kubernetes Secrets or local files

Let the CA issue and renew its own serving certificate

Complete the rename to OpenVox CA: metrics, alerts, env vars, paths and the service account

SQLite backend creates the database holding the CA private key at mode 0644, and CheckKeyPermissions cannot warn about it

--sql-dsn takes a database password on the command line, and the help text and docs demonstrate it that way

Helm chart renders redis_password, etcd_password and sql_dsn into a ConfigMap, and openvox-ca.validate does not refuse it

`PUT /certificate_status/{subject}` with `desired_state: revoked` returns 409 for an unknown subject where Puppet Server returns 404

Never create CA key material with world access, and refuse to serve it

Issues