tree 570784da91193e279b2777b809d6c4be55aa120e
parent e78a08987e48aa5d9f77954886b7cc544f218638
author Serge Bazanski <serge@monogon.tech> 1638301058 +0100
committer Sergiusz Bazanski <serge@monogon.tech> 1639072303 +0000

m/p/pki: implement CRLs

This implements revokation and CRL watching functionality in the main
metropolis PKI library, in preparation for use in the consensus library
(which has full CRL support). In the future, this should also be
extended to be used in Metropolis authentication/authorization.

This also introduces a breaking change by changing the layout of etcd
storage for the PKI library - but we're pre-MVP, so this is fine.

Change-Id: If0775f5447a76949d8498d8853dd7b9c03e0e6dc
Reviewed-on: https://review.monogon.dev/c/monogon/+/465
Reviewed-by: Lorenz Brun <lorenz@monogon.tech>