feat: allow setting custom CA for generic webhooks (#207)

* feat: allow setting custom CA for generic webhooks PiperOrigin-RevId: 408995680 Source-Link: googleapis/googleapis@76f7f48 Source-Link: https://github.com/googleapis/googleapis-gen/commit/9e5faa62a238bd42c1350d3e51a6540af7337587 Copy-Tag: eyJwIjoiLmdpdGh1Yi8uT3dsQm90LnlhbWwiLCJoIjoiOWU1ZmFhNjJhMjM4YmQ0MmMxMzUwZDNlNTFhNjU0MGFmNzMzNzU4NyJ9 * 🦉 Updates from OwlBot See https://github.com/googleapis/repo-automation-bots/blob/main/packages/owl-bot/README.md Co-authored-by: Owl Bot <gcf-owl-bot[bot]@users.noreply.github.com>

Author: gcf-owl-bot[bot]

google/cloud/dialogflowcx_v3beta1/types/webhook.py

@@ -98,12 +98,30 @@ class GenericWebService(proto.Message):
  request_headers (Sequence[google.cloud.dialogflowcx_v3beta1.types.Webhook.GenericWebService.RequestHeadersEntry]):
  The HTTP request headers to send together
  with webhook requests.
+ allowed_ca_certs (Sequence[bytes]):
+ Optional. Specifies a list of allowed custom
+ CA certificates (in DER format) for HTTPS
+ verification. This overrides the default SSL
+ trust store. If this is empty or unspecified,
+ Dialogflow will use Google's default trust store
+ to verify certificates.
+ N.B. Make sure the HTTPS server certificates are
+ signed with "subject alt name". For instance a
+ certificate can be self-signed using the
+ following command,
+ openssl x509 -req -days 200 -in
+ example.com.csr \ -signkey example.com.key
+ \
+ -out example.com.crt \
+ -extfile <(printf
+ "\nsubjectAltName='DNS:www.example.com'")
  """
 
  uri = proto.Field(proto.STRING, number=1,)
  username = proto.Field(proto.STRING, number=2,)
  password = proto.Field(proto.STRING, number=3,)
  request_headers = proto.MapField(proto.STRING, proto.STRING, number=4,)
+ allowed_ca_certs = proto.RepeatedField(proto.BYTES, number=5,)
 
  class ServiceDirectoryConfig(proto.Message):
  r"""Represents configuration for a `Service