mirror of
https://github.com/jetkvm/kvm.git
synced 2026-05-21 05:20:35 +00:00
9f2f1a20bf
Add four tests covering the subkey lifecycle that mirrors production key setups (root key + signing subkeys on YubiKeys): - Signing with a subkey verifies successfully - Subkeys survive parseAndValidateKeyring entity filtering - Rotated subkeys (old and new) both verify - Revoked subkey is rejected by SigningKeyById These complement the rogue-entity filtering test from #1316 by verifying that subkey operations within a trusted entity work correctly through the full verification pipeline.