Replace github.com/boltdb/bolt with go.etcd.io/bbolt. Closes: #195.

[jas4711]

Hi! I'm working on Debian packages of this module, and ran across:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1012623

We can't support riscv64 without this.

I don't speak Go, but I tried to do something here, and it seems to build and pass self-tests. I would appreciate your review and consideration of this patch. What do you think?

/Simon

[jessepeterson]

Thanks @jas4711 for the PR! However it seems bbolts policy to pin versions (see also this issue) to the latest Go development toolchains (to track development with etcd/k8s) is fairly aggressive. I don't think we're ready to have all downstream projects require Go 1.24.x at this time. I'll keep this open as we may revisit this.

[jessepeterson]

Couple further notes here as well:

BoltDB isn't technically exposed to the CLI tools. So there's no real way to actually use the boltdb functionality from the running compiled project (as is). You'd have to use this code as a library in another project to use the boltdb functionality. Perhaps we pull out the boltdb stuff and put into our other projects where needed.

And finally, the project README now has a short section:

Note

The included SCEP server and CA are very basic and lack critical security-related features. You are encouraged to explore a more robust solution such as github.com/smallstep/certificates. As alluded to in our blog post this project's SCEP server will not likely be supported in the future.

FYI!