feat:吊销列表、证书管理功能

2026-04-30 16:57:34 +08:00
parent e6fea0bef6
commit 66bf3f34c6
64 changed files with 2918 additions and 140 deletions
@@ -607,3 +607,41 @@ CREATE TABLE IF NOT EXISTS t_trusted_cert (
    KEY idx_t_trusted_cert_issuer_dn (issuer_dn(512)),
    KEY idx_t_trusted_cert_valid_to (valid_to)
 );
+
+CREATE TABLE IF NOT EXISTS t_certificate_crl (
+    id BIGINT PRIMARY KEY,
+    issuer_dn VARCHAR(1024) NOT NULL,
+    crl_number VARCHAR(128) NULL,
+    algo_type VARCHAR(16) NOT NULL COMMENT 'SM2 in V1',
+    fingerprint VARCHAR(128) NOT NULL COMMENT 'SHA-256 fingerprint',
+    crl_data MEDIUMTEXT NOT NULL COMMENT 'CRL PEM content',
+    this_update DATETIME(3) NOT NULL,
+    next_update DATETIME(3) NULL,
+    revoked_count INT NOT NULL,
+    import_time DATETIME(3) NOT NULL,
+    create_by VARCHAR(64) NULL,
+    create_time DATETIME(3) NOT NULL,
+    update_time DATETIME(3) NOT NULL,
+    UNIQUE KEY uk_t_certificate_crl_fingerprint (fingerprint),
+    KEY idx_t_certificate_crl_issuer_dn (issuer_dn(512)),
+    KEY idx_t_certificate_crl_this_update (this_update),
+    KEY idx_t_certificate_crl_next_update (next_update)
+);
+
+CREATE TABLE IF NOT EXISTS t_certificate_crl_revoked (
+    id BIGINT PRIMARY KEY,
+    crl_id BIGINT NOT NULL,
+    issuer_dn VARCHAR(1024) NOT NULL,
+    serial_number VARCHAR(128) NOT NULL,
+    subject_dn VARCHAR(1024) NULL,
+    algo_type VARCHAR(16) NOT NULL COMMENT 'SM2 in V1',
+    crl_number VARCHAR(128) NULL,
+    revocation_time DATETIME(3) NOT NULL,
+    revocation_reason VARCHAR(64) NULL,
+    create_time DATETIME(3) NOT NULL,
+    update_time DATETIME(3) NOT NULL,
+    KEY idx_t_certificate_crl_revoked_crl_id (crl_id),
+    KEY idx_t_certificate_crl_revoked_issuer_serial (issuer_dn(512), serial_number),
+    KEY idx_t_certificate_crl_revoked_subject_dn (subject_dn(512)),
+    KEY idx_t_certificate_crl_revoked_revocation_time (revocation_time)
+);