From d64427487daad7b3370381f8c062f3c1f5c625e9 Mon Sep 17 00:00:00 2001
From: Mariano Cano <mariano@smallstep.com>
Date: Mon, 5 Oct 2020 17:39:44 -0700
Subject: [PATCH] Add comment about the missing error check.

---
 authority/tls.go | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/authority/tls.go b/authority/tls.go
index 7405c1dc..faa0ebf8 100644
--- a/authority/tls.go
+++ b/authority/tls.go
@@ -354,7 +354,9 @@ func (a *Authority) Revoke(ctx context.Context, revokeOpts *RevokeOptions) error
 		err = a.db.RevokeSSH(rci)
 	} else {
 		// Revoke an X.509 certificate using CAS. If the certificate is not
-		// provided we will try to read it from the db.
+		// provided we will try to read it from the db. If the read fails we
+		// won't throw an error as it will be responsability of the CAS
+		// implementation to require a certificate.
 		var revokedCert *x509.Certificate
 		if revokeOpts.Crt != nil {
 			revokedCert = revokeOpts.Crt