Transfer cert endpoints to work with serial numbers

backend/src/db/migrations/20240522010055_certificate-authority.ts

@@ -23,6 +23,7 @@ export async function up(knex: Knex): Promise<void> {
       t.string("commonName").notNullable();
       t.string("dn").notNullable();
       t.unique(["dn", "projectId"]);
+      t.string("serialNumber").nullable().unique();
       t.integer("maxPathLength").nullable();
       t.datetime("notBefore").nullable();
       t.datetime("notAfter").nullable();
@@ -54,12 +55,14 @@ export async function up(knex: Knex): Promise<void> {
   }
 
   if (!(await knex.schema.hasTable(TableName.Certificate))) {
-    // TODO: consider adding name
+    // TODO: consider adding serialNumber
     await knex.schema.createTable(TableName.Certificate, (t) => {
       t.uuid("id", { primaryKey: true }).defaultTo(knex.fn.uuid());
       t.timestamps(true, true, true);
       t.uuid("caId").notNullable();
       t.foreign("caId").references("id").inTable(TableName.CertificateAuthority).onDelete("CASCADE");
+      t.string("status").notNullable(); // active / pending-certificate
+      t.string("serialNumber").notNullable().unique();
       t.string("commonName").notNullable();
       t.datetime("notBefore").notNullable();
       t.datetime("notAfter").notNullable();

backend/src/db/schemas/certificate-authorities.ts

@@ -22,6 +22,7 @@ export const CertificateAuthoritiesSchema = z.object({
   locality: z.string(),
   commonName: z.string(),
   dn: z.string(),
+  serialNumber: z.string().nullable().optional(),
   maxPathLength: z.number().nullable().optional(),
   notBefore: z.date().nullable().optional(),
   notAfter: z.date().nullable().optional()

backend/src/db/schemas/certificates.ts

@@ -12,6 +12,8 @@ export const CertificatesSchema = z.object({
   createdAt: z.date(),
   updatedAt: z.date(),
   caId: z.string().uuid(),
+  status: z.string(),
+  serialNumber: z.string(),
   commonName: z.string(),
   notBefore: z.date(),
   notAfter: z.date()