Signatures supported by a TL certificate
Created by: jdvorak001
Correctly fetch TL service info when validating signatures supported by a certificate that is directly listed on the TL. This is the case for almost all types of services except CA/QC, CA/PKC and possibly also ACA i.e., for all services where the TL lists the signing certificate itself (rather than the issuing certificate).
Implementation note: I assume we can't replace the signing CertificateToken (which is coming to SignatureValidationContext from outside) with the one constructed from the TL. This led me to copying the relevant information (the collections of ServiceInfo and CertificateSourceType) over. Please check:
- If this is a sensible approach.
- If I copy the complete information that needs to be copied.
(Apologies for the mess of the commits. I'm in the process of learning Git.)