Add support for sslcrl option - #1048

https://github.com/lib/pq/tree/master/certs might have that key

https://github.com/lib/pq/tree/master/certs might have that key

There are only the leaf cert private keys there, the CA private key (C=US, ST=Nevada, L=Las Vegas, O=github.com/lib/pq, CN=pq CA) is needed to generate CRL.

You can recreate the keys if you want from scratch, just make sure you change them in CI as well.
See: #1054
Maybe we should commit the private keys this time :\

I'm willing to write tests for this, but I need the private key of pq CA to generate the testing CRLs :/

It should be okay to just regenerate all the files with a new private key.

I looked a bit at this, but wasn't really able to generate CRLs for the tests – the openssl CLI can be such a pain.

I don't mind solving the conflicts etc. myself, but any help with that would be appreciated – if you're still interested in this after five years 😅