TomCatTandClaude Opus 5.5 4d42b48d20 fix(sign): offer only certificates that may sign documents from the Windows store (#3365) ...

A CAC puts its encryption, logon and signing certificates in the store
under the same name, so the digital ID list showed several identical
entries and only one of them makes a signature that validates. Grey out
the ones whose key usage or extended key usage doesn't allow document
signing, with the reason, the same way an ID without a usable key is
already treated.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-19 02:49:57 -04:00

..

data

M9: more signature validation algorithms (SHA-3, RIPEMD-160, Ed25519, P-521, brainpool, PSS, rsa_sha1) (#386)

2026-10-09 18:44:38 -04:00

algorithms.rs

M9: more signature validation algorithms (SHA-3, RIPEMD-160, Ed25519, P-521, brainpool, PSS, rsa_sha1) (#386)

2026-10-09 18:44:38 -04:00

ber.rs

M9: read BER signatures (DocuSign, Documenso); classify later changes narrowly (#144)

2026-10-09 18:43:21 -04:00

chain.rs

fix(sign): offer only certificates that may sign documents from the Windows store (#3365)

2026-10-19 02:49:57 -04:00

crypto.rs

M9: harden .p12 digital IDs (#1847) (#2201)

2026-10-15 02:48:32 -04:00

pdf.rs

fix(sign): a signed page's resources are page content whatever keys a later revision writes (#1787) (#2115)

2026-10-15 02:45:35 -04:00

store_keys.rs

Sign: decide Windows store keys in code every platform builds (#690)

2026-10-10 06:14:36 -04:00