create index.txt (the CA DB) in depot folder containing all issued certificates

[FreshXOpenSource]

See http://pki-tutorial.readthedocs.io/en/latest/cadb.html

This would allow us to create a CA with a revocation list and also allow us to manage it (within micromdm or from outside)

[groob]

I understand the goal and agree that it should be part of the project.
Does it have to be compatible with the index.txt file you linked?

[FreshXOpenSource]

i think it is very helpful to be compatible with this format since we are compatible with openssl then. This would help us to use openssl from outside microidm as long as certain features are not yet implemented in micromdm itself. These feature can still be brought in by openssl natively, i.e.

• creating a CA with a CRL or OSCP (could be implemented easily in microidm i guess)
• revoking client CA (can be a simple shell script in the beginning)
• pushing CRL's to a CRL server (simple shell script as well)

[groob]

Is this now addressed by your PR? #8 ?

[FreshXOpenSource]

yes!