aiongg a887405ea1 fix(sign): don't report valid when a DSS cap hides revocation evidence ...

The evidence caps counted repeated references to one stream, so a /DSS
array could list one benign stream 1024 times ahead of a revoking CRL,
and the check never reached it. Repeats are skipped before the entry
cap counts anything, and when a cap still stops an array being read in
full without a revocation found, the signature's status is unknown
rather than valid, with the reason in its details.

2026-10-22 20:07:41 +00:00

..

data

Build each crate's integration tests as one binary (#4087)

2026-10-22 11:28:58 -04:00

it

fix(sign): don't report valid when a DSS cap hides revocation evidence

2026-10-22 20:07:41 +00:00