feat:crl管理、错误信息中文化

src/main/resources/db/migration/V1__tms_schema_full.sql

@@ -542,7 +542,7 @@ CREATE TABLE IF NOT EXISTS t_key_entity (
     algo_type VARCHAR(16) NOT NULL COMMENT 'SM2 / RSA',
     key_len INT NOT NULL COMMENT 'SM2 fixed 256 in V1',
     key_idx INT NOT NULL COMMENT 'card key index, allowed range [2..8]',
-    backup_data VARCHAR(500) NOT NULL COMMENT 'SDFE_BackupUserKey output',
+    backup_data TEXT NOT NULL COMMENT 'SDFE_BackupUserKey output',
     public_key VARCHAR(500) NOT NULL COMMENT 'public key, Base64/PEM',
     p10_data VARCHAR(2000) NULL COMMENT 'PKCS#10 PEM content',
     subject_dn VARCHAR(500) NULL COMMENT 'DN used when generating P10',
@@ -587,7 +587,7 @@ CREATE TABLE IF NOT EXISTS t_certificate (
 
 CREATE TABLE IF NOT EXISTS t_trusted_cert (
     id BIGINT PRIMARY KEY,
-    alias VARCHAR(128) NOT NULL,
+    alias VARCHAR(128) NULL,
     subject_dn VARCHAR(1024) NOT NULL,
     issuer_dn VARCHAR(1024) NOT NULL,
     serial_number VARCHAR(128) NOT NULL,
@@ -614,7 +614,7 @@ CREATE TABLE IF NOT EXISTS t_certificate_crl (
     crl_number VARCHAR(128) NULL,
     algo_type VARCHAR(16) NOT NULL COMMENT 'SM2 in V1',
     fingerprint VARCHAR(128) NOT NULL COMMENT 'SHA-256 fingerprint',
-    crl_data MEDIUMTEXT NOT NULL COMMENT 'CRL PEM content',
+    crl_data MEDIUMTEXT NOT NULL COMMENT 'reserved legacy CRL PEM content; large CRLs are not stored inline',
     this_update DATETIME(3) NOT NULL,
     next_update DATETIME(3) NULL,
     revoked_count INT NOT NULL,
@@ -646,6 +646,25 @@ CREATE TABLE IF NOT EXISTS t_certificate_crl_revoked (
     KEY idx_t_certificate_crl_revoked_revocation_time (revocation_time)
 );
 
+CREATE TABLE IF NOT EXISTS t_certificate_crl_import_task (
+    id BIGINT PRIMARY KEY,
+    task_id VARCHAR(64) NOT NULL,
+    original_filename VARCHAR(255) NULL,
+    file_size BIGINT NULL,
+    status VARCHAR(32) NOT NULL COMMENT 'PENDING/RUNNING/SUCCESS/FAILED',
+    fingerprint VARCHAR(128) NULL COMMENT 'SHA-256 fingerprint after successful parse',
+    crl_id BIGINT NULL,
+    revoked_count INT NOT NULL DEFAULT 0,
+    error_message VARCHAR(512) NULL,
+    started_at DATETIME(3) NULL,
+    finished_at DATETIME(3) NULL,
+    create_time DATETIME(3) NOT NULL,
+    update_time DATETIME(3) NOT NULL,
+    UNIQUE KEY uk_t_certificate_crl_import_task_task_id (task_id),
+    KEY idx_t_certificate_crl_import_task_status (status),
+    KEY idx_t_certificate_crl_import_task_create_time (create_time)
+);
+
 
 -- -----------------------------------------------------------------------------
 -- 日志表
@@ -714,4 +733,4 @@ CREATE TABLE IF NOT EXISTS tms_backup_config (
      last_backup_time datetime DEFAULT NULL COMMENT '上次执行时间',
      sign_data varchar(255) NOT NULL COMMENT '其他字段的签名值',
      PRIMARY KEY (`id`)
-)
+)