Certificate worker neeeded

[jameswhite]

Certificate worker: when someone publishes cert me to ":network/room/:channel/nick/:nick/said" it should

• Dereference their nick to a system name with the LDAP worker
• Revoke any existing certs for their system name
• Generate a strong passphrase
• Generate a new key for their system name
• Generate a CSR for systemname.user.<domain>
• Sign the CSR with the ca.key
• Create a pkcs#12 container with the passphrase
• Acquire their mailDrop attribute from LDAP and mail them the pkcs#12 container
• Use :network's private messaging system to side-chat the password to the :nick
• Alternately send them the pkcs#12 container with the .otrp extension for OwnTracks
• Clean up the private key and the pkcs#12 container

[jameswhite]

Blocked by #4