1 files changed, 34 insertions, 0 deletions
diff --git a/vendor/github.com/letsencrypt/boulder/sa/proto/sa.proto b/vendor/github.com/letsencrypt/boulder/sa/proto/sa.proto
index 25d2d6434..6eafefbe4 100644
--- a/vendor/github.com/letsencrypt/boulder/sa/proto/sa.proto
+++ b/vendor/github.com/letsencrypt/boulder/sa/proto/sa.proto
@@ -21,6 +21,7 @@ service StorageAuthority {
   // Return a count of authorizations with status "invalid" that belong to
   // a given registration ID and expire in the given time range.
   rpc CountFQDNSets(CountFQDNSetsRequest) returns (Count) {}
+  rpc FQDNSetTimestampsForWindow(CountFQDNSetsRequest) returns (Timestamps) {}
   rpc FQDNSetExists(FQDNSetExistsRequest) returns (Exists) {}
   rpc PreviousCertificateExists(PreviousCertificateExistsRequest) returns (Exists) {}
   rpc GetAuthorization2(AuthorizationID2) returns (core.Authorization) {}
@@ -31,6 +32,8 @@ service StorageAuthority {
   rpc CountInvalidAuthorizations2(CountInvalidAuthorizationsRequest) returns (Count) {}
   rpc GetValidAuthorizations2(GetValidAuthorizationsRequest) returns (Authorizations) {}
   rpc KeyBlocked(KeyBlockedRequest) returns (Exists) {}
+  rpc SerialsForIncident (SerialsForIncidentRequest) returns (stream IncidentSerial) {}
+  rpc GetRevokedCerts(GetRevokedCertsRequest) returns (stream core.CRLEntry) {}
   // Adders
   rpc NewRegistration(core.Registration) returns (core.Registration) {}
   rpc UpdateRegistration(core.Registration) returns (google.protobuf.Empty) {}
@@ -107,6 +110,10 @@ message Count {
   int64 count = 1;
 }
 
+message Timestamps {
+	repeated int64 timestamps = 1; // Unix timestamp (nanoseconds)
+}
+
 message CountCertificatesByNamesRequest {
   Range range = 1;
   repeated string names = 2;
@@ -247,6 +254,7 @@ message RevokeCertificateRequest {
   int64 date = 3; // Unix timestamp (nanoseconds)
   int64 backdate = 5; // Unix timestamp (nanoseconds)
   bytes response = 4;
+  int64 issuerID = 6;
 }
 
 message FinalizeAuthorizationRequest {
@@ -270,3 +278,29 @@ message AddBlockedKeyRequest {
 message KeyBlockedRequest {
   bytes keyHash = 1;
 }
+
+message Incident {
+  int64 id = 1;
+  string serialTable = 2;
+  string url = 3;
+  int64 renewBy = 4; // Unix timestamp (nanoseconds)
+  bool enabled = 5;
+}
+
+message SerialsForIncidentRequest {
+  string incidentTable = 1;
+}
+
+message IncidentSerial {
+  string serial = 1;
+  int64 registrationID = 2;
+  int64 orderID = 3;
+  int64 lastNoticeSent = 4; // Unix timestamp (nanoseconds)
+}
+
+message GetRevokedCertsRequest {
+  int64 issuerNameID = 1;
+  int64 expiresAfter = 2; // Unix timestamp (nanoseconds), inclusive
+  int64 expiresBefore = 3; // Unix timestamp (nanoseconds), exclusive
+  int64 revokedBefore = 4; // Unix timestamp (nanoseconds)
+}