Merge pull request #55 from smallstep/herman/scep-provisioner-decrypter

Add SCEPDecrypter configuration
smallstep · Sep 25, 2023 · 29330a8 · 29330a8
2 parents a0363d0 + 7d2f2f7
commit 29330a8
Show file tree

Hide file tree

Showing 8 changed files with 249 additions and 119 deletions.
diff --git a/admin.pb.go b/admin.pb.go
diff --git a/config.pb.go b/config.pb.go
diff --git a/eab.pb.go b/eab.pb.go
diff --git a/majordomo.pb.go b/majordomo.pb.go
diff --git a/majordomo_grpc.pb.go b/majordomo_grpc.pb.go
diff --git a/policy.pb.go b/policy.pb.go
diff --git a/provisioners.pb.go b/provisioners.pb.go
diff --git a/spec/linkedca/provisioners.proto b/spec/linkedca/provisioners.proto
@@ -168,13 +168,22 @@ message K8sSAProvisioner {
 
 message SSHPOPProvisioner {}
 
+message SCEPDecrypter {
+	bytes certificate = 1;
+	bytes key = 2;
+	string key_uri = 3;
+	bytes key_password = 4;
+}
+
 message SCEPProvisioner {
 	bool force_cn = 1;
 	string challenge = 2;
 	repeated string capabilities = 3;
 	int32 minimum_public_key_length = 4;
 	bool include_root = 5;
 	int32 encryption_algorithm_identifier = 6;
+	SCEPDecrypter decrypter = 7;
+	bool exclude_intermediate = 8;
 }
 
 message NebulaProvisioner {
@@ -196,6 +205,7 @@ message Webhook {
 		ENRICHING = 1;
 		AUTHORIZING = 2;
 		SCEPCHALLENGE = 3;
+		NOTIFYING = 4;
 	}
 	enum CertType {
 		ALL = 0;