Add SSH cert flows and user service installer

crates/geth-control/src/lib.rs

@@ -1,5 +1,8 @@
 use geth_auth::AuthExplanation;
 use geth_resource::ResourceDescriptor;
+use geth_ssh_identity::{
+    SshCertApproval, SshCertRequest, SshCertificateRecord, SshRevocationEntry,
+};
 use geth_types::BlobHash;
 use serde::{Deserialize, Serialize};
 use std::path::PathBuf;
@@ -34,6 +37,36 @@ pub enum ControlRequest {
         resource: String,
         capability: String,
     },
+    SshCertRequest {
+        public_key_path: PathBuf,
+        cert_kind: String,
+        principals: Vec<String>,
+        requested_validity: Option<String>,
+        renewal_of: Option<String>,
+        reason: Option<String>,
+    },
+    SshCertRequests,
+    SshCertApprove {
+        request_id: String,
+        ca_key_path: PathBuf,
+        valid_for: Option<String>,
+        serial: Option<u64>,
+        out: Option<PathBuf>,
+    },
+    SshCertImport {
+        request_id: String,
+        cert_path: PathBuf,
+    },
+    SshCertList,
+    SshRevocationAdd {
+        kind: String,
+        target: String,
+        reason: Option<String>,
+    },
+    SshRevocationList,
+    SshRevocationExport {
+        out: PathBuf,
+    },
     ModuleStub {
         module: String,
         command: String,
@@ -72,6 +105,32 @@ pub enum ControlResponse {
     },
     KeychainStatus(KeychainStatusResponse),
     AuthExplain(AuthExplanation),
+    SshCertRequested {
+        request: SshCertRequest,
+    },
+    SshCertRequests {
+        requests: Vec<SshCertRequest>,
+    },
+    SshCertApproved {
+        approval: SshCertApproval,
+    },
+    SshCertImported {
+        certificate: SshCertificateRecord,
+    },
+    SshCertList {
+        requests: Vec<SshCertRequest>,
+        certificates: Vec<SshCertificateRecord>,
+    },
+    SshRevocationAdded {
+        revocation: SshRevocationEntry,
+    },
+    SshRevocationList {
+        revocations: Vec<SshRevocationEntry>,
+    },
+    SshRevocationExported {
+        out: PathBuf,
+        count: usize,
+    },
     NotImplemented {
         module: String,
         command: String,