Import SSH revocation metadata

This commit is contained in:
Eric Wendland 2026-05-18 11:56:42 +02:00
commit 4c368253e4
11 changed files with 212 additions and 13 deletions

View file

@ -148,9 +148,10 @@ Roadmap items should be actionable and checkable:
ops and must not allow trust graph mutation capabilities. Payload encryption,
key envelopes, and bearer challenge-response are still roadmap work.
- SSH revocations can be exported as JSONL, OpenSSH KRL specification text, or
binary OpenSSH KRL files generated through `ssh-keygen`. Existing KRL import
is still roadmap work.
binary OpenSSH KRL files generated through `ssh-keygen`. JSONL and OpenSSH KRL
specification imports are supported; binary KRL import is unsupported because
OpenSSH KRL files are not enumerable through OpenSSH tooling.
- Signed peer-card LAN discovery payloads, peer auth over Iroh, cr-sqlite,
iroh-docs, iroh-blobs, Automerge sync, broader auth enforcement, KRL import,
and Keyhive/BeeKEM-style authorization are future roadmap items unless
implemented later.
iroh-docs, iroh-blobs, Automerge sync, broader auth enforcement, certificate
revocation KRL tests, and Keyhive/BeeKEM-style authorization are future
roadmap items unless implemented later.