misc: addressed greptile comments 1

backend/src/ee/routes/v1/proxy-router.ts

@@ -65,7 +65,18 @@ export const registerProxyRouter = async (server: FastifyZodProvider) => {
         name: z.string()
       }),
       response: {
-        200: z.any()
+        200: z.object({
+          pki: z.object({
+            serverCertificate: z.string(),
+            serverPrivateKey: z.string(),
+            clientCertificateChain: z.string()
+          }),
+          ssh: z.object({
+            serverCertificate: z.string(),
+            serverPrivateKey: z.string(),
+            clientCAPublicKey: z.string()
+          })
+        })
       }
     },
     onRequest: verifyAuth([AuthMode.IDENTITY_ACCESS_TOKEN]),

backend/src/ee/services/proxy/proxy-fns.ts

@@ -1,3 +1,5 @@
+export const INSTANCE_PROXY_PREFIX = "infisical-";
+
 export const isInstanceProxy = (proxyName: string) => {
-  return proxyName.startsWith("infisical-");
+  return proxyName.startsWith(INSTANCE_PROXY_PREFIX);
 };

backend/src/ee/services/proxy/proxy-service.ts

@@ -405,7 +405,7 @@ export const proxyServiceFactory = ({
         format: "der",
         type: "pkcs8"
       });
-      const orgProxyClientCaPrivateKey = await crypto.nativeCrypto.subtle.importKey(
+      const orgProxyCaPrivateKey = await crypto.nativeCrypto.subtle.importKey(
         "pkcs8",
         orgProxyCaSkObj.export({ format: "der", type: "pkcs8" }),
         alg,
@@ -425,7 +425,7 @@ export const proxyServiceFactory = ({
         issuer: orgProxyCaCert.subject,
         notBefore: orgProxyClientCaIssuedAt,
         notAfter: orgProxyClientCaExpiration,
-        signingKey: orgProxyClientCaPrivateKey,
+        signingKey: orgProxyCaPrivateKey,
         publicKey: orgProxyClientCaKeys.publicKey,
         signingAlgorithm: alg,
         extensions: [
@@ -460,7 +460,7 @@ export const proxyServiceFactory = ({
         issuer: orgProxyCaCert.subject,
         notBefore: orgProxyServerCaIssuedAt,
         notAfter: orgProxyServerCaExpiration,
-        signingKey: orgProxyClientCaPrivateKey,
+        signingKey: orgProxyCaPrivateKey,
         publicKey: orgProxyServerCaKeys.publicKey,
         signingAlgorithm: alg,
         extensions: [