M9: read .p7b/.p7c certificate bundles for trust import

load_certificates now reads PKCS #7 certificate bundles (degenerate
SignedData, RFC 5652 §5.2) in DER and as PEM PKCS7/CMS blocks, the way
Windows, Acrobat and certificate authorities export chains. PEM END
lines must match their BEGIN label.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
This commit is contained in:
ffishmanandClaude Opus 5.5 authored and Rodrigo Gressler committed 2026-10-19 20:32:37 -03:00
1 parent ec0a965074
commit 0a56784df8
7 files changed
+135 -24

No files matched your search

+1 -1
View File
@@ -6273,7 +6273,7 @@ status = "partial"
commands = []
tools = ["sign_trust"]
evidence = ["crates/automation/tests/automation.rs::digital_ids_signing_and_validation_through_tools"]
notes = "import .cer/.pem/.der/.p12 through the tool; per-certificate trust settings not yet"
notes = "import .cer/.pem/.der/.p7b/.p7c/.p12 through the tool; per-certificate trust settings not yet"
[[feature]]
id = "sign.eutl"