Add locals add and remove subcommands

- `locals add` adds a local (unintroduced) certificate for encryption.
- `locals remove` removes/deacivates a local certificate.
- Overall cleanup

src/commands/locals/add.rs

@@ -1,12 +1,45 @@
 use anyhow::Result;
 
+use sequoia_openpgp::cert;
+use sequoia_openpgp::parse::Parse;
+use sequoia_openpgp::types::RevocationStatus;
+
 use crate::cli::cli_args::LocalsAddCommand;
 use crate::config::HuskConfigContainer;
+use crate::types::husk_context::HuskContext;
+use crate::commands::CommandError;
+use crate::common::crypto;
 
-pub async fn dispatch(cmd: LocalsAddCommand, _config: &HuskConfigContainer) -> Result<()> {
+pub async fn dispatch(cmd: LocalsAddCommand, config: HuskConfigContainer) -> Result<()> {
     println!("add");
     println!("   {:?}", cmd.cert_file);
-    Ok(())
+
+    let context = HuskContext::new(&config.into())?;
+    let policy = &context.policy;
+
+    let c = cert::Cert::from_file(cmd.cert_file)?;
+    let vc = c.with_policy(policy, None)?;
+
+    // guards
+    if vc.alive().is_err() {
+        return Err(CommandError::CertNotAlive(vc.fingerprint()).into());
+    }
+    if matches!(vc.revocation_status(), RevocationStatus::Revoked(_)) {
+        return Err(CommandError::CertRevoked(vc.fingerprint()).into());
+    }
+    if !crypto::can_encrypt(&vc) {
+        return Err(CommandError::CertNotUsable(vc.fingerprint()).into());
+    }
+    if vc.fingerprint() == context.local_trust_root.fingerprint() {
+        // XXX: find a better error
+        return Err(CommandError::CertNotUsable(vc.fingerprint()).into());
+    }
+
+    crypto::authenticate(
+        &context,
+        &vc,
+        crypto::Role::Local,
+        true,
+        None
+    )
 }
-
-