Cover certificate KRL revocations

This commit is contained in:
Eric Wendland 2026-05-18 11:58:39 +02:00
commit 8ab3ef004e
3 changed files with 88 additions and 6 deletions

View file

@ -150,8 +150,10 @@ Roadmap items should be actionable and checkable:
- SSH revocations can be exported as JSONL, OpenSSH KRL specification text, or
binary OpenSSH KRL files generated through `ssh-keygen`. JSONL and OpenSSH KRL
specification imports are supported; binary KRL import is unsupported because
OpenSSH KRL files are not enumerable through OpenSSH tooling.
OpenSSH KRL files are not enumerable through OpenSSH tooling. Tests cover
public-key and certificate binary KRL revocations when `ssh-keygen` is
available.
- Signed peer-card LAN discovery payloads, peer auth over Iroh, cr-sqlite,
iroh-docs, iroh-blobs, Automerge sync, broader auth enforcement, certificate
revocation KRL tests, and Keyhive/BeeKEM-style authorization are future
roadmap items unless implemented later.
iroh-docs, iroh-blobs, Automerge sync, broader auth enforcement, and
Keyhive/BeeKEM-style authorization are future roadmap items unless
implemented later.