+ wip clean keys.ml

src/secmod_rsa.ml

@@ -221,3 +221,16 @@ let delete_outdated ~now =
   |> List.filter (fun k -> Absolute.compare now k.t2 >= 0)
   |> List.map (fun k -> k.pub)
   |> list_iter delete_key
+
+let add_key section_name t1 t2 =
+  let priv, pub = RsaPrivateKey.generate ~bits:Cfg.rsa_keysize () in
+  let k = { section_name; priv; pub; t1; t2 } in
+  Hashtbl.replace t.ht k.pub k;
+  ()
+
+(* delete and replace *)
+let revoke_key pub =
+  let* k = find_key pub in
+  let* () = delete_key pub in
+  add_key k.section_name k.t1 k.t2;
+  Ok ()