docs/designs/certificate-revocation-list.md

16 assigned expiration date. In Google, there are use cases that BMC needs to
18 will be rejected in TLS handshake. Supporting CRL is also recommended in most
24 1. [phosphor-certificate-manager](https://github.com/openbmc/phosphor-certificate-manager)
29 2. [BMCWeb](https://github.com/openbmc/bmcweb): the Redfish front-end which
31    consumer of these certificates; it uses certificates in its TLS handshake.
34 [this discussion](https://redfishforum.com/thread/618/resource-certificate-revocation-list?page=1&s…
46    consumers which use old CRLs to refresh with the newly given CRLs
53 ### phosphor-dbus-interfaces
56 [Certs](https://github.com/openbmc/phosphor-dbus-interfaces/tree/master/yaml/xyz/openbmc_project/Ce…
62 ### phosphor-certificate-manager
64 We propose to add a new type of certificate-manager (CRL-manager) to the
67 The CRL-manager will implement the following common interfaces:
69 1. [InstallAll](https://github.com/openbmc/phosphor-dbus-interfaces/blob/master/yaml/xyz/openbmc_pr…
71    existing behaviour which phosphor-certificate-manager uses to tell consumers
74 2. [ReplaceAll](https://github.com/openbmc/phosphor-dbus-interfaces/blob/master/yaml/xyz/openbmc_pr…
77 3. [DeleteAll](https://github.com/openbmc/phosphor-dbus-interfaces/blob/master/yaml/xyz/openbmc_pro…
99 Add new unit tests in phosphor-certificate-manager.