Move cert utilities to shared package and fix OpenSSL hash canonicalization - #87

Open

dnegstad wants to merge 14 commits into

mainfrom

claude/project-review-correctness-29djry

Commits on Aug 28, 2026

fix: correct OpenSSL subject hash + four other correctness gaps
claude
committed
f41fa4e
refactor: drop unreachable surface, retire shims, remove host openssl dep
claude
committed
6f2f124
fix(security): require a server-auth leaf before trusting a container cert
claude
committed
111ff09
fix: raise the child-process output cap and make truncation observable
claude
committed
d60cad0
docs: correct the UI extension's command-surface description
claude
committed
be84d20
fix: make container-cert consent a reversible tri-state
claude
committed
d42603f
fix: OpenSSL hash slots ran out after ten dev certs, silently
claude
committed
3f4b043
fix(security): remove ReDoS in PEM extraction (CodeQL js/polynomial-redos)
claude
committed
95a288d
fix: correct OpenSSL canonicalization and repair upgraded installs
claude
committed
670f388
fix: slot semantics in hasHashSymlink, same-name rotation, inaccurate messages
claude
committed
4838133
test: pin UniversalString canonicalization; check user cert Root PFX
claude
committed
15ce3d9
fix: select NSS trust flag per browser family
claude
committed
f128ecd
fix: distinguish trust failures from parse failures; verify PEM contents
claude
committed
f471a83
chore: bump Aspire AppHost SDK to 13.5.3 in the test project
claude
committed
745ab30