v0.9.3

Welcome to perhaps the last release before 1.0.0. This will probably take some time, since it will include two larger features with Certificate Revocation Lists and SSH certificate management. But anyway, back to this minor release.

Multiple Certificate Authorities

This release adds support for multiple CAs. If you don't care about that, not much changes.

• Add API endpoints to get a list of all CAs, create, download, and delete specific CAs
• If no CA is specified during certificate creation, the newest will be used
• A new CA will be created if a new certificate would outlive the CA
• All CAs are now stored in ./ca/

Fix Logout

Before this release, the session token given out was not properly invalidated, meaning it always remained valid for the entire 1-hour lifetime. This release introduces a whitelist, with only current JWT tokens allowed to be used for authentication.