aiongg d9cb7c2fe7 fix(sign): don't build chains through a CA with unprocessed critical extensions ...

Chain building accepted an intermediate CA without looking at its critical
extensions, which were checked only on the signer's certificate. A
subordinate CA limited by critical name constraints could vouch for a
signer outside its namespace, because PdfCraft does not enforce those
constraints. A CA certificate (other than a self-signed root, whose
limits are the trust store's business) with a critical extension
PdfCraft doesn't process is refused as an issuer, and the reason is
reported.

2026-10-22 12:13:16 -04:00

..

examples

…

src

fix(sign): don't build chains through a CA with unprocessed critical extensions

2026-10-22 12:13:16 -04:00

tests

Build each crate's integration tests as one binary (#4087)

2026-10-22 11:28:58 -04:00

build.rs

Restore #196, #202, #203 and the macOS release-runner change, reverted by the i18n chain (#229)

2026-10-08 03:33:35 -04:00

Cargo.toml

Use chrono instead of hand-rolled UTC conversion (#3824)

2026-10-21 19:36:46 -04:00