This commit implements certificate revocation for the WFE2. This endpoint differs from others in that it supports *both* traditional key ID based JWS request authentication in addition to embedded JWK based JWS request authentication. The first is considered authenticated to revoke a certificate if the signer account has valid authorizations for all of the names in the certificate. The second is considered authenticated if the embedded JWK that signs the request has the same public key as the certificate being revoked. |
||
|---|---|---|
| .. | ||
| ca.go | ||
| mocks.go | ||