feat(ipsec): add certificate export functionality by name

- Implemented a new backend route for exporting existing client certificates in .p12 format by name.
- Enhanced the frontend to support exporting certificates directly from the IPsec server grid.
- Updated the IPsec page to manage certificate states and handle exports effectively.
- Introduced new utility functions for certificate handling and improved data structures to accommodate the changes.
- Added tests to ensure the reliability of the new certificate export feature.

packages/contracts/src/certificates.ts

@@ -25,6 +25,8 @@ export const certificateDtoSchema = z.object({
   trusted: z.boolean(),
   status: certStatusSchema,
   acmeStatus: z.string().optional(),
+  /** Имя CA, которым серт подписан на устройстве (read-only поле `ca` RouterOS). */
+  signedByCertName: z.string().optional(),
 })
 
 export const certificatesListResponseSchema = z.object({

packages/contracts/src/ipsec.ts

@@ -77,6 +77,8 @@ export const ipsecCertInfoDtoSchema = z.object({
   trusted: z.boolean().optional(),
   hasPrivateKey: z.boolean().optional(),
   role: z.enum(["ca", "server", "client", "other"]).optional(),
+  /** Имя CA, которым серт подписан на устройстве (read-only поле `ca` RouterOS). */
+  signedBy: z.string().optional(),
   managed: z.boolean(),
 })
 
@@ -87,6 +89,8 @@ export const ipsecServerSummaryDtoSchema = z.object({
   serverCountry: z.string().optional(),
   /** Managed-набор (CA + серверный серт + peer + mode-config) инициализирован. */
   initialized: z.boolean(),
+  /** Существующий IKEv2-сервер пригоден: есть peer + CA + серверный серт. */
+  ike2Ready: z.boolean(),
   serverEndpoint: z.string().optional(),
   /** Primary managed peer (обратная совместимость); для полного списка — `peers`. */
   peer: ipsecPeerDtoSchema.optional(),
@@ -176,6 +180,12 @@ export const ipsecCertExportRequestSchema = z.object({
   passphrase: z.string().min(4),
 })
 
+/** Экспорт .p12 существующего клиентского сертификата по имени (client1/anakondra и т.п.). */
+export const ipsecCertExportByNameRequestSchema = z.object({
+  name: z.string().min(1),
+  passphrase: z.string().min(4),
+})
+
 /** Бандл для авторизации клиента: .p12 (+ strongSwan .sswan + инструкция). */
 export const ipsecCertBundleSchema = z.object({
   user: z.string(),
@@ -209,5 +219,6 @@ export type IpsecInitRequest = z.infer<typeof ipsecInitRequestSchema>
 export type IpsecUserCreateRequest = z.infer<typeof ipsecUserCreateRequestSchema>
 export type IpsecUserPatch = z.infer<typeof ipsecUserPatchSchema>
 export type IpsecCertExportRequest = z.infer<typeof ipsecCertExportRequestSchema>
+export type IpsecCertExportByNameRequest = z.infer<typeof ipsecCertExportByNameRequestSchema>
 export type IpsecCertBundle = z.infer<typeof ipsecCertBundleSchema>
 export type IpsecUserCreated = z.infer<typeof ipsecUserCreatedSchema>