pdfcraft

aleleba/pdfcraft

Fork 0

mirror of https://github.com/storytold/pdfcraft.git synced 2026-10-28 20:18:06 -06:00

Files

T

History

6116b0034c M9: name the Windows store certificates that can't sign (#179 ) (#761 )

A store certificate PdfCraft can't use (no private key, a P-521 /
Brainpool / Ed25519 key, a key CNG can't open) was dropped from the
Sign dialog silently, so a user whose CA-issued identity shows in
Acrobat but not here had nothing to go on. `windows::list` now returns
those under `unusable` with the subject, fingerprint and a reason that
names the Windows error code; the Sign dialog shows them greyed and
unselectable with the reason, and `sign_windows_ids` returns them.
A key that needs a prompt to open (NTE_SILENT_CONTEXT, NTE_UI_REQUIRED
while listing) is listed and prompts at signing instead of being
skipped. Certificates without a private key stay out of the dialog but
are reported by the tool.

Tests: the explained-error table, the store listing's invariants, a
key-less certificate in the ignored store test, the automation output,
and a kittest dialog test for a greyed entry. Verified by hand that a
.p12 imported into the CNG and legacy Microsoft providers lists, and
that a P-521 certificate is explained.

Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
Co-authored-by: Brandon Thomas <echelon@gmail.com>

2026-10-10 16:25:24 -04:00

data

M9: more signature validation algorithms (SHA-3, RIPEMD-160, Ed25519, P-521, brainpool, PSS, rsa_sha1) (#386 )

2026-10-09 18:44:38 -04:00

algorithms.rs

M9: more signature validation algorithms (SHA-3, RIPEMD-160, Ed25519, P-521, brainpool, PSS, rsa_sha1) (#386 )

2026-10-09 18:44:38 -04:00

ber.rs

M9: read BER signatures (DocuSign, Documenso); classify later changes narrowly (#144 )

2026-10-09 18:43:21 -04:00

chain.rs

M9: the signer's certificate must allow document signing (key usage, EKU, critical extensions) (#749 )