diff options
| author | Christian Poessinger <christian@poessinger.com> | 2021-07-03 17:49:43 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-07-03 17:49:43 +0200 |
| commit | 094d79aee118a75898ef9b85a77f211e0eacd94d (patch) | |
| tree | 7e89102bcc48463d3e2d40926e12a4f2896e09b2 /op-mode-definitions/pki.xml.in | |
| parent | 469cd1de9f904bcc451379316f39f7ef34f0eca0 (diff) | |
| parent | 50f71042d7a00692ade8caaa32db1102157ad87a (diff) | |
| download | vyos-1x-094d79aee118a75898ef9b85a77f211e0eacd94d.tar.gz vyos-1x-094d79aee118a75898ef9b85a77f211e0eacd94d.zip | |
Merge pull request #905 from sarthurdev/pki_subca
pki: T3642: Add support for signing and revoking subordinate CAs
Diffstat (limited to 'op-mode-definitions/pki.xml.in')
| -rw-r--r-- | op-mode-definitions/pki.xml.in | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/op-mode-definitions/pki.xml.in b/op-mode-definitions/pki.xml.in index 06b15eed4..9c6b56a68 100644 --- a/op-mode-definitions/pki.xml.in +++ b/op-mode-definitions/pki.xml.in @@ -12,6 +12,26 @@ <help>Generate CA certificate</help> </properties> <children> + <tagNode name="sign"> + <properties> + <help>Sign generated CA certificate with another specified CA certificate</help> + <completionHelp> + <path>pki ca</path> + </completionHelp> + </properties> + <children> + <tagNode name="install"> + <properties> + <help>Commands for installing generated certificate into running configuration</help> + <completionHelp> + <list><certificate name></list> + </completionHelp> + </properties> + <command>sudo ${vyos_op_scripts_dir}/pki.py --action generate --ca "$7" --sign "$5" --install</command> + </tagNode> + </children> + <command>sudo ${vyos_op_scripts_dir}/pki.py --action generate --ca "noname" --sign "$5"</command> + </tagNode> <tagNode name="install"> <properties> <help>Commands for installing generated certificate into running configuration</help> |