Function load_revoked_fingerprints
pub fn load_revoked_fingerprints(path: &Path) -> Result<HashSet<String>>Expand description
Read a revoked-fingerprint file (one SHA-256 hex per line; blank lines and
# comments ignored) into a normalized set. Missing/unreadable files are
errors: a configured revocation boundary must fail closed, not silently become
an empty revocation set.