Thomas Vincent 058839041a hardening: require a 2048-bit RSA key for Package signatures on develop (#8464) ...

* hardening(import): require a 2048-bit RSA key for Package signatures

Apply the 1.2.x key floor from #7194 to every Package verify and every key
develop trusts or stores, and stop trusting the legacy 512-bit Cacti key.

Refs #8460

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

* docs(changelog): add fragment for #8464

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

---------

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

2026-10-23 10:38:26 -06:00

..

ImportPackageKeyFloorTest.php

hardening: require a 2048-bit RSA key for Package signatures on develop (#8464)

2026-10-23 10:38:26 -06:00

ImportPackageSignatureTrustTest.php

Close test-suite discovery and coverage gaps (#7970)

2026-09-05 18:38:42 -07:00