From 5038eb5856b809f339e14dd932dd64fb1204eefc Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Wed, 20 May 2020 21:35:46 +0200
Subject: macsec: T2023: generate secure channel keys in operation mode

---
 debian/control                              |  1 +
 op-mode-definitions/generate-macsec-key.xml | 13 +++++++++++++
 2 files changed, 14 insertions(+)
 create mode 100644 op-mode-definitions/generate-macsec-key.xml

diff --git a/debian/control b/debian/control
index eec2c087e..a30b80b7a 100644
--- a/debian/control
+++ b/debian/control
@@ -33,6 +33,7 @@ Depends: python3,
   python3-netaddr,
   python3-zmq,
   python3-jmespath,
+  bsdmainutils,
   cron,
   systemd,
   easy-rsa,
diff --git a/op-mode-definitions/generate-macsec-key.xml b/op-mode-definitions/generate-macsec-key.xml
new file mode 100644
index 000000000..44ded441d
--- /dev/null
+++ b/op-mode-definitions/generate-macsec-key.xml
@@ -0,0 +1,13 @@
+<?xml version="1.0"?>
+<interfaceDefinition>
+  <node name="generate">
+    <children>
+      <node name="macsec-key">
+        <properties>
+          <help>Generate MACsec secure channel key</help>
+        </properties>
+        <command>/usr/bin/hexdump -n 16 -e '4/4 "%08x" 1 "\n"' /dev/random</command>
+      </node>
+    </children>
+  </node>
+</interfaceDefinition>
-- 
cgit v1.2.3