[stable32] fix: allow signing for legacy certificates missing CRL metadata (fixes #7597)#7606

Merged

vitormattos merged 11 commits intostable32from

backport/7605/stable32

Apr 25, 2026

Commits on Apr 25, 2026

fix: allow legacy certificates without CRL metadata

vitormattos
authored and
backportbot-libresign[bot]
committed
fix(crl): detect distribution points across extension key variants

vitormattos
authored and
backportbot-libresign[bot]
committed
fix: remove speculative CRL extension fallback matching

vitormattos
authored and
backportbot-libresign[bot]
committed
refactor: extract CRL extension parser and remove reflection tests

vitormattos
authored and
backportbot-libresign[bot]
committed
test: expand CRL extractor coverage with RFC-driven data provider

vitormattos
authored and
backportbot-libresign[bot]
committed
test: add RFC-focused CRL distribution point scenarios

vitormattos
authored and
backportbot-libresign[bot]
committed
test: extend CRL provider edge coverage

vitormattos
authored and
backportbot-libresign[bot]
committed
refactor: optimize CRL distribution point extraction

vitormattos
authored and
backportbot-libresign[bot]
committed
perf: reduce CRL extractor regex and dedup overhead

vitormattos
authored and
backportbot-libresign[bot]
committed
fix: cs

vitormattos
authored and
backportbot-libresign[bot]
committed
refactor: remove unused extractor constructor injection

vitormattos
authored and
backportbot-libresign[bot]
committed