From 3e79a35775864eb19bce592f07220914ec297708 Mon Sep 17 00:00:00 2001
From: swrup <swrup@protonmail.com>
Date: Sat, 21 Feb 2026 17:24:54 +0100
Subject: [PATCH]

---
 src/keys.ml | 35 ++++++++++++++++-------------------
 1 file changed, 16 insertions(+), 19 deletions(-)

diff --git a/src/keys.ml b/src/keys.ml
index 138c5160..1cf3cc72 100644
--- a/src/keys.ml
+++ b/src/keys.ml
@@ -4,6 +4,8 @@ type 'a result = ('a, string) Result.t
 module type S = Mod_intf.S
 
 module Make (Conn : Pg.CONN) = struct
+  let conn = (module Conn : Pg.CONN)
+
   open Syntax
   open Crypto
 
@@ -28,7 +30,6 @@ module Make (Conn : Pg.CONN) = struct
     | Ok v -> v
 
   (* - *)
-  let conn = (module Conn : Pg.CONN)
   let find_signkey pub = Pg.find_signkey conn pub |> unwrap_err_caqti
   let find_denomination h_pub = Pg.find_denom conn h_pub |> unwrap_err_caqti
 
@@ -270,25 +271,21 @@ module Make (Conn : Pg.CONN) = struct
 
   let revoke_signkey pub revoked_sig =
     let* opt = find_signkey pub in
-    match opt with
-    | None -> Error "signkey not found"
-    | Some _sk ->
-        let* () = Secmod_eddsa.revoke pub in
-        let+ () =
-          Pg.insert_signkey_revocation conn pub revoked_sig |> unwrap_err_caqti
-        in
-        ()
+    let* _sk = Option.to_result ~none:"signkey not found" opt in
+    let* () = Secmod_eddsa.revoke pub in
+    let+ () =
+      Pg.insert_signkey_revocation conn pub revoked_sig |> unwrap_err_caqti
+    in
+    ()
 
   let revoke_denomination h_pub revoked_sig =
     let* opt = find_denomination h_pub in
-    match opt with
-    | None -> Error "denomination not found"
-    | Some sk ->
-        let pub = sk.pub in
-        let* () = Secmod_rsa.revoke pub in
-        let+ () =
-          Pg.insert_denomination_revocation conn h_pub revoked_sig
-          |> unwrap_err_caqti
-        in
-        ()
+    let* dn = Option.to_result ~none:"denomination not found" opt in
+    let pub = dn.pub in
+    let* () = Secmod_rsa.revoke pub in
+    let+ () =
+      Pg.insert_denomination_revocation conn h_pub revoked_sig
+      |> unwrap_err_caqti
+    in
+    ()
 end