Jon Chery 0d5ff663b4 fix(P13): step-ca /tmp hardening (REQ-128, F10) ...

---ci---
project: orca
phase: 13
milestone: v0.12
status: execute
---/ci---

step-ca cert/key temp files moved from world-readable /tmp/orca-* to
/etc/orca/step-tmp/orca-* (0700). mkdir + chmod 700 before writing.
Fixes both stepca.go and spiffe.go. All tests updated + pass.

2026-08-07 11:22:07 +00:00

..

stepca_test.go

fix(P13): step-ca /tmp hardening (REQ-128, F10)

2026-08-07 11:22:07 +00:00

stepca.go

fix(P13): step-ca /tmp hardening (REQ-128, F10)

2026-08-07 11:22:07 +00:00