Skip to content

Pass additionalIntermediateCertificates through to signWithSigningTime#289

Merged
Lukasa merged 1 commit into
apple:mainfrom
sergey-cheperis:fix-287
Jan 5, 2026
Merged

Pass additionalIntermediateCertificates through to signWithSigningTime#289
Lukasa merged 1 commit into
apple:mainfrom
sergey-cheperis:fix-287

Conversation

@sergey-cheperis

Copy link
Copy Markdown
Contributor

When signingTime was provided to CMS.sign, the additionalIntermediateCertificates
parameter was not being forwarded to signWithSigningTime, causing signature verification
to fail for certificates that require an intermediate CA chain.

Fixes #287

@Lukasa Lukasa left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Very nice fix, thank you! Sorry for the delay in getting around to the review.

@Lukasa Lukasa added the 🔨 semver/patch No public API change. label Jan 5, 2026
@Lukasa Lukasa merged commit 7d5f612 into apple:main Jan 5, 2026
45 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

🔨 semver/patch No public API change.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

CMS.sign ignores additionalIntermediateCertificates when signingTime is passed

2 participants