Expiration should be minimum of configured and incoming from current request

[trust_router.git] / schema.sql

diff --git a/schema.sql b/schema.sql
index 443328c..1e0a5f9 100644 (file)
--- a/schema.sql
+++ b/schema.sql
@@ -1,4 +1,9 @@
-create table if not exists psk_keys (keyid text primary key, key blob);
+create table if not exists psk_keys (keyid text primary key, key blob, client_dh_pub raw(20), key_expiration timestamp);
+create table if not exists authorizations( client_dh_pub raw(20), coi string, acceptor_realm string, hostname string, apc string);
+create index if not exists authorizations_dhpub on authorizations( client_dh_pub);
+CREATE VIEW if not exists authorizations_keys as select keyid, authorizations.* from psk_keys join authorizations on psk_keys.client_dh_pub = authorizations.client_dh_pub and datetime(key_expiration) > datetime('now');
+ 
+
 .quit