Replace the openssl CLI with pure-Rust signing & verification - #13

Merged

rominf merged 6 commits into

mainfrom

fix/verify-signatures-in-rust

Jun 16, 2026

Commits on Jun 16, 2026

Verify metadata signatures in Rust, not via openssl
rominf
committed
d40af3c
Sign release artifacts with a Rust xtask, not openssl
rominf
committed
a766591
Address review: clearer xtask verify errors, fail-fast cargo checks
rominf
committed
965d960
Address review: restrict private key perms, use resolved cargo on Windows
rominf
committed
224067f
Tolerate CRLF/BOM/blank-line PEMs so Windows signing works
rominf
committed
3d7e53c
Address review: pass absolute paths to cargo xtask verify
rominf
committed
f2ebee0