Signed-off-by: Richard T Bonhomme <[email protected]>

For 'revoke',  always move the req/key files.
It is assumed that revoking an issued cert implies that renewal
is not desired.

For 'revoke-expired' and 'revoke-renewed', never move the req/key files.
It is assumed that revoking an expired or renewed cert implies that
renewal is desired.

Signed-off-by: Richard T Bonhomme <[email protected]>

Signed-off-by: Richard T Bonhomme <[email protected]>

revoke: Always remove old req/key files.
It is assumed that revoking an issued certificate does not require
subsequesnt renewal.

revoke-expired/revoke-renewed: Never remove old req/key files.
It is assumed that revoking an expired or renewed certificate does
require subsequent renewal.

Never remove the duplicate certificate by serial, this file must
always be unique, so it does not need to be removed.
This also allows status reports to have simple access to all signed
certificates, regardless of status.

Signed-off-by: Richard T Bonhomme <[email protected]>