Encrypt CRL

backend/src/db/migrations/20240607032218_certificate-mgmt.ts

@@ -68,7 +68,7 @@ export async function up(knex: Knex): Promise<void> {
       t.timestamps(true, true, true);
       t.uuid("caId").notNullable().unique();
       t.foreign("caId").references("id").inTable(TableName.CertificateAuthority).onDelete("CASCADE");
-      t.text("crl").notNullable(); // TODO: encrypt
+      t.binary("encryptedCrl").notNullable(); // TODO: encrypt
       t.integer("ttl").notNullable(); // in minutes
       // TODO: consider type (crl or delta)
       // TODO: rebuild interval

backend/src/db/schemas/certificate-authority-crl.ts

@@ -5,6 +5,8 @@
 
 import { z } from "zod";
 
+import { zodBuffer } from "@app/lib/zod";
+
 import { TImmutableDBKeys } from "./models";
 
 export const CertificateAuthorityCrlSchema = z.object({
@@ -12,7 +14,7 @@ export const CertificateAuthorityCrlSchema = z.object({
   createdAt: z.date(),
   updatedAt: z.date(),
   caId: z.string().uuid(),
-  crl: z.string(),
+  encryptedCrl: zodBuffer,
   ttl: z.number()
 });