VA: Add a method for performing MPIC compliant CAA checks

letsencrypt · Nov 13, 2024 · bae7b73 · bae7b73
1 parent 6722e0e
commit bae7b73
Show file tree

Hide file tree

Showing 5 changed files with 1,211 additions and 264 deletions.
diff --git a/va/proto/va.pb.go b/va/proto/va.pb.go
diff --git a/va/proto/va.proto b/va/proto/va.proto
@@ -12,6 +12,7 @@ service VA {
 
 service CAA {
   rpc IsCAAValid(IsCAAValidRequest) returns (IsCAAValidResponse) {}
+  rpc CheckCAA(CheckCAARequest) returns (CheckCAAResult) {}
 }
 
 message IsCAAValidRequest {
@@ -52,3 +53,17 @@ message ValidationRequest {
   string authzID = 4;
   string keyAuthorization = 5;
 }
+
+message CheckCAARequest {
+  core.Identifier identifier = 1;
+  core.Challenge challenge = 2;
+  int64 regID = 3;
+  string authzID = 4;
+  bool isRecheck = 5;
+}
+
+message CheckCAAResult {
+  core.ProblemDetails problem = 1;
+  string perspective = 3;
+  string rir = 4;
+}