xml: T1466: provide common includes for SSL certificate CLI nodes

Gather all SSL certificate, ca and key nodes into a single representation of
XML which can be #included into the XML definitions of the CLI interface to be
rendered.

4 files changed, 161 insertions, 119 deletions

diff --git a/interface-definitions/include/certificate-ca.xml.i b/interface-definitions/include/certificate-ca.xml.i
new file mode 100644
index 000000000..196cfa6d7
--- /dev/null
+++ b/interface-definitions/include/certificate-ca.xml.i
@@ -0,0 +1,14 @@
+<!-- included start from certificate-ca.xml.i -->
+<leafNode name="ca-cert-file">
+  <properties>
+    <help>Certificate Authority in x509 PEM format</help>
+    <valueHelp>
+      <format>file</format>
+      <description>File in /config/auth directory</description>
+    </valueHelp>
+    <constraint>
+      <validator name="file-exists" argument="--directory /config/auth"/>
+    </constraint>
+  </properties>
+</leafNode>
+<!-- included end -->
diff --git a/interface-definitions/include/certificate-key.xml.i b/interface-definitions/include/certificate-key.xml.i
new file mode 100644
index 000000000..3bfa4416d
--- /dev/null
+++ b/interface-definitions/include/certificate-key.xml.i
@@ -0,0 +1,14 @@
+<!-- included start from certificate-key.xml.i -->
+<leafNode name="key-file">
+  <properties>
+    <help>Certificate private key in x509 PEM format</help>
+    <valueHelp>
+      <format>file</format>
+      <description>File in /config/auth directory</description>
+    </valueHelp>
+    <constraint>
+      <validator name="file-exists" argument="--directory /config/auth"/>
+    </constraint>
+  </properties>
+</leafNode>
+<!-- included end -->
diff --git a/interface-definitions/include/certificate.xml.i b/interface-definitions/include/certificate.xml.i
new file mode 100644
index 000000000..73ae2dace
--- /dev/null
+++ b/interface-definitions/include/certificate.xml.i
@@ -0,0 +1,14 @@
+<!-- included start from certificate.xml.i -->
+<leafNode name="cert-file">
+  <properties>
+    <help>Certificate public key in x509 PEM format</help>
+    <valueHelp>
+      <format>file</format>
+      <description>File in /config/auth directory</description>
+    </valueHelp>
+    <constraint>
+      <validator name="file-exists" argument="--directory /config/auth"/>
+    </constraint>
+  </properties>
+</leafNode>
+<!-- included end -->
diff --git a/interface-definitions/include/webproxy-url-filtering.xml.i b/interface-definitions/include/webproxy-url-filtering.xml.i
index de6ebffde..07db0948f 100644
--- a/interface-definitions/include/webproxy-url-filtering.xml.i
+++ b/interface-definitions/include/webproxy-url-filtering.xml.i
@@ -1,119 +1,119 @@
-<!-- included start from webproxy-url-filtering.xml.i -->

-<leafNode name="allow-category">

-  <properties>

-    <help>Category to allow</help>

-    <completionHelp>

-      <script>${vyos_completion_dir}/list_webproxy_category.sh</script>

-    </completionHelp>

-    <multi/>

-  </properties>

-</leafNode>

-<leafNode name="allow-ipaddr-url">

-  <properties>

-    <help>Allow IP address URLs</help>

-    <valueless/>

-  </properties>

-</leafNode>

-<leafNode name="block-category">

-  <properties>

-    <help>Category to block</help>

-    <completionHelp>

-      <script>${vyos_completion_dir}/list_webproxy_category.sh</script>

-    </completionHelp>

-    <multi/>

-  </properties>

-</leafNode>

-<leafNode name="default-action">

-  <properties>

-    <help>Default action (default: allow)</help>

-    <completionHelp>

-      <list>allow block</list>

-    </completionHelp>

-    <valueHelp>

-      <format>allow</format>

-      <description>Default filter action is allow)</description>

-    </valueHelp>

-    <valueHelp>

-      <format>block</format>

-      <description>Default filter action is block</description>

-    </valueHelp>

-    <constraint>

-      <regex>^(allow|block)$</regex>

-    </constraint>

-  </properties>

-</leafNode>

-<leafNode name="enable-safe-search">

-  <properties>

-    <help>Enable safe-mode search on popular search engines</help>

-    <valueless/>

-  </properties>

-</leafNode>

-<leafNode name="local-block-keyword">

-  <properties>

-    <help>Local keyword to block</help>

-    <valueHelp>

-      <format>keyword</format>

-      <description>Keyword (or regex) to block</description>

-    </valueHelp>

-    <multi/>

-  </properties>

-</leafNode>

-<leafNode name="local-block-url">

-  <properties>

-    <help>Local URL to block</help>

-    <valueHelp>

-      <format>url</format>

-      <description>Local URL to block (without "http://")</description>

-    </valueHelp>

-    <multi/>

-  </properties>

-</leafNode>

-<leafNode name="local-block">

-  <properties>

-    <help>Local site to block</help>

-    <valueHelp>

-      <format>ipv4</format>

-      <description>IP address of site to block</description>

-    </valueHelp>

-    <constraint>

-      <validator name="ipv4-address"/>

-      <validator name="fqdn"/>

-    </constraint>

-    <multi/>

-  </properties>

-</leafNode>

-<leafNode name="local-ok-url">

-  <properties>

-    <help>Local URL to allow</help>

-    <valueHelp>

-      <format>url</format>

-      <description>Local URL to allow (without "http://")</description>

-    </valueHelp>

-    <multi/>

-  </properties>

-</leafNode>

-<leafNode name="local-ok">

-  <properties>

-    <help>Local site to allow</help>

-    <valueHelp>

-      <format>ipv4</format>

-      <description>IP address of site to allow</description>

-    </valueHelp>

-    <constraint>

-      <validator name="ipv4-address"/>

-      <validator name="fqdn"/>

-    </constraint>

-    <multi/>

-  </properties>

-</leafNode>

-<leafNode name="log">

-  <properties>

-    <help>Log block category</help>

-    <completionHelp>

-      <script>${vyos_completion_dir}/list_webproxy_category.sh</script>

-      <list>all</list>

-    </completionHelp>

-    <multi/>

-  </properties>

-</leafNode>

-<!-- included end -->

+<!-- included start from webproxy-url-filtering.xml.i -->
+<leafNode name="allow-category">
+  <properties>
+    <help>Category to allow</help>
+    <completionHelp>
+      <script>${vyos_completion_dir}/list_webproxy_category.sh</script>
+    </completionHelp>
+    <multi/>
+  </properties>
+</leafNode>
+<leafNode name="allow-ipaddr-url">
+  <properties>
+    <help>Allow IP address URLs</help>
+    <valueless/>
+  </properties>
+</leafNode>
+<leafNode name="block-category">
+  <properties>
+    <help>Category to block</help>
+    <completionHelp>
+      <script>${vyos_completion_dir}/list_webproxy_category.sh</script>
+    </completionHelp>
+    <multi/>
+  </properties>
+</leafNode>
+<leafNode name="default-action">
+  <properties>
+    <help>Default action (default: allow)</help>
+    <completionHelp>
+      <list>allow block</list>
+    </completionHelp>
+    <valueHelp>
+      <format>allow</format>
+      <description>Default filter action is allow)</description>
+    </valueHelp>
+    <valueHelp>
+      <format>block</format>
+      <description>Default filter action is block</description>
+    </valueHelp>
+    <constraint>
+      <regex>^(allow|block)$</regex>
+    </constraint>
+  </properties>
+</leafNode>
+<leafNode name="enable-safe-search">
+  <properties>
+    <help>Enable safe-mode search on popular search engines</help>
+    <valueless/>
+  </properties>
+</leafNode>
+<leafNode name="local-block-keyword">
+  <properties>
+    <help>Local keyword to block</help>
+    <valueHelp>
+      <format>keyword</format>
+      <description>Keyword (or regex) to block</description>
+    </valueHelp>
+    <multi/>
+  </properties>
+</leafNode>
+<leafNode name="local-block-url">
+  <properties>
+    <help>Local URL to block</help>
+    <valueHelp>
+      <format>url</format>
+      <description>Local URL to block (without "http://")</description>
+    </valueHelp>
+    <multi/>
+  </properties>
+</leafNode>
+<leafNode name="local-block">
+  <properties>
+    <help>Local site to block</help>
+    <valueHelp>
+      <format>ipv4</format>
+      <description>IP address of site to block</description>
+    </valueHelp>
+    <constraint>
+      <validator name="ipv4-address"/>
+      <validator name="fqdn"/>
+    </constraint>
+    <multi/>
+  </properties>
+</leafNode>
+<leafNode name="local-ok-url">
+  <properties>
+    <help>Local URL to allow</help>
+    <valueHelp>
+      <format>url</format>
+      <description>Local URL to allow (without "http://")</description>
+    </valueHelp>
+    <multi/>
+  </properties>
+</leafNode>
+<leafNode name="local-ok">
+  <properties>
+    <help>Local site to allow</help>
+    <valueHelp>
+      <format>ipv4</format>
+      <description>IP address of site to allow</description>
+    </valueHelp>
+    <constraint>
+      <validator name="ipv4-address"/>
+      <validator name="fqdn"/>
+    </constraint>
+    <multi/>
+  </properties>
+</leafNode>
+<leafNode name="log">
+  <properties>
+    <help>Log block category</help>
+    <completionHelp>
+      <script>${vyos_completion_dir}/list_webproxy_category.sh</script>
+      <list>all</list>
+    </completionHelp>
+    <multi/>
+  </properties>
+</leafNode>
+<!-- included end -->