docs/designs/certificate-revocation-list.md

9 This design is to add management interfaces for certificate revocation list in
24 1. [phosphor-certificate-manager](https://github.com/openbmc/phosphor-certificate-manager)
25    owns certificate objects and implements management interfaces; currently
29 2. [BMCWeb](https://github.com/openbmc/bmcweb): the Redfish front-end which
34 [this discussion](https://redfishforum.com/thread/618/resource-certificate-revocation-list?page=1&s…
35 Google doesn't plan on using Redfish interfaces to manage certificates and CRLs.
37 daemon interacts with the OpenBMC certificate management architecture via DBus
44 1. clients shall be able to install/delete/replace CRLs via DBus APIs
53 ### phosphor-dbus-interfaces  subsection
56 [Certs](https://github.com/openbmc/phosphor-dbus-interfaces/tree/master/yaml/xyz/openbmc_project/Ce…
62 ### phosphor-certificate-manager
64 We propose to add a new type of certificate-manager (CRL-manager) to the
67 The CRL-manager will implement the following common interfaces:
69 1. [InstallAll](https://github.com/openbmc/phosphor-dbus-interfaces/blob/master/yaml/xyz/openbmc_pr…
71    existing behaviour which phosphor-certificate-manager uses to tell consumers
74 2. [ReplaceAll](https://github.com/openbmc/phosphor-dbus-interfaces/blob/master/yaml/xyz/openbmc_pr…
77 3. [DeleteAll](https://github.com/openbmc/phosphor-dbus-interfaces/blob/master/yaml/xyz/openbmc_pro…
94 1. New DBus interfaces
99 Add new unit tests in phosphor-certificate-manager.