For explicitly sharded certificates, CRL status is read from the `revokedCertificates` table. This table gets written at revocation time. At re-revocation time (for key compromise), it only gets written by the SA if the caller passes a nonzero ShardIdx to UpdateRevokedCertificate. The RA was never passing a nonzero ShardIdx to UpdateRevokedCertificate. |
||
---|---|---|
.. | ||
proto | ||
ra.go | ||
ra_test.go |