Deprecate command revoke in favour of revoke-issued

[TinCanTech]

There exists in easyrsa command revoke, the unfortunate possibility to revoke an incorrect certificate, far too easily.

To reproduce:

build-client-full tct-c1
renew tct-c1
renew tct-c1

This will fill the renew file buffer, so that further renewal of tct-c1 will require that the renewed certificate for tct-c1 is revoked. This requires use of command revoke-renewed not revoke.

• If command revoke-renewed is used now then the correct, old renewed certificate is revoked.

• If command revoke is used now then the incorrect, new issued certificate is revoked.

This is caused by command revoke not being specific about the target file.

Command revoke must be changed to revoke-issued, to ensure that the correct certificate is selected.

How to do this effectively ?

[TinCanTech]

To avoid the unnecessary file checks needed to guard command revoke, I propose this solution:

For batch mode, command revoke will behave exactly as before and all conflicting file checks will be ignored. Using revoke in batch mode suggest that the user has selected the correct command.

For non-batch mode, command revoke will error out. The error message will instruct the user to select the correct revoke-* command.