missed some mentions of PEM when changing the returned format to DER regarding CRL generation

This commit is contained in:
Raal Goff 2021-11-02 16:39:29 +08:00
parent 8545adea92
commit 26cb52a573

View file

@ -463,7 +463,7 @@ func (a *Authority) revokeSSH(crt *ssh.Certificate, rci *db.RevokedCertificateIn
return a.db.Revoke(rci) return a.db.Revoke(rci)
} }
// GenerateCertificateRevocationList returns a PEM representation of a signed CRL. // GenerateCertificateRevocationList returns a DER representation of a signed CRL.
// It will look for a valid generated CRL in the database, check if it has expired, and generate // It will look for a valid generated CRL in the database, check if it has expired, and generate
// a new CRL on demand if it has expired (or a CRL does not already exist). // a new CRL on demand if it has expired (or a CRL does not already exist).
// //
@ -532,7 +532,7 @@ func (a *Authority) GenerateCertificateRevocationList(force bool) ([]byte, error
} }
// Create a new db.CertificateRevocationListInfo, which stores the new Number we just generated, the // Create a new db.CertificateRevocationListInfo, which stores the new Number we just generated, the
// expiry time, and the byte-encoded CRL - then store it in the DB // expiry time, and the DER-encoded CRL - then store it in the DB
newCRLInfo := db.CertificateRevocationListInfo{ newCRLInfo := db.CertificateRevocationListInfo{
Number: n, Number: n,
ExpiresAt: revocationList.NextUpdate, ExpiresAt: revocationList.NextUpdate,
@ -544,7 +544,7 @@ func (a *Authority) GenerateCertificateRevocationList(force bool) ([]byte, error
return nil, err return nil, err
} }
// Finally, return our CRL PEM // Finally, return our CRL in DER
return certificateRevocationList, nil return certificateRevocationList, nil
} }