libdcp/src/certificate_chain.h, branch debug

Use OpenSSL C API for public_key_digest instead of calling the openssl binary.

2024-01-08T18:23:36Z

Make public_key_digest() testable.

2024-01-08T11:54:00Z

Add a comment.

2023-01-19T10:26:40Z

Give a better error from chain_valid() when a certificate has some problem (e.g. it has expired).

2022-12-22T15:36:41Z

Pass certificate validity length into the constructor.

2022-02-12T22:13:56Z

Improved comments.

2021-02-26T09:08:02Z

Tidying.

2021-01-23T14:35:24Z

Replace std::list with std::vector in the API.

2021-01-17T19:13:23Z

Slightly hacky but hopefully functional fix for KDMs after the changes

2019-01-24T17:34:37Z

to signer. The KDM stuff uses add_signature_value() but not sign() since it has to allow pass-through of a KDM (so it handles etc. itself). This means we have to make the indentation-adding optional. It might have been nicer to make indent() not add indentation if it's not already there.

Attempt to fix Sony digest validation by indenting the

2019-01-24T02:03:05Z

and before signing. This is in the belief that, perhaps, the Sony software "reformats" the XML before checking that the signature is correct (or something).