summaryrefslogtreecommitdiff
path: root/op-mode-definitions
diff options
context:
space:
mode:
authorsarthurdev <965089+sarthurdev@users.noreply.github.com>2021-07-03 13:56:42 +0200
committersarthurdev <965089+sarthurdev@users.noreply.github.com>2021-07-03 17:35:54 +0200
commit50f71042d7a00692ade8caaa32db1102157ad87a (patch)
treecd30cd3d3a51e9da00facdd9c30d573f398699a6 /op-mode-definitions
parent13924804aafa9a43b4a300fb9afbdf29b69603fb (diff)
downloadvyos-1x-50f71042d7a00692ade8caaa32db1102157ad87a.tar.gz
vyos-1x-50f71042d7a00692ade8caaa32db1102157ad87a.zip
pki: T3642: Add support for signing and revoking subordinate CAs
Diffstat (limited to 'op-mode-definitions')
-rw-r--r--op-mode-definitions/pki.xml.in20
1 files changed, 20 insertions, 0 deletions
diff --git a/op-mode-definitions/pki.xml.in b/op-mode-definitions/pki.xml.in
index 06b15eed4..9c6b56a68 100644
--- a/op-mode-definitions/pki.xml.in
+++ b/op-mode-definitions/pki.xml.in
@@ -12,6 +12,26 @@
<help>Generate CA certificate</help>
</properties>
<children>
+ <tagNode name="sign">
+ <properties>
+ <help>Sign generated CA certificate with another specified CA certificate</help>
+ <completionHelp>
+ <path>pki ca</path>
+ </completionHelp>
+ </properties>
+ <children>
+ <tagNode name="install">
+ <properties>
+ <help>Commands for installing generated certificate into running configuration</help>
+ <completionHelp>
+ <list>&lt;certificate name&gt;</list>
+ </completionHelp>
+ </properties>
+ <command>sudo ${vyos_op_scripts_dir}/pki.py --action generate --ca "$7" --sign "$5" --install</command>
+ </tagNode>
+ </children>
+ <command>sudo ${vyos_op_scripts_dir}/pki.py --action generate --ca "noname" --sign "$5"</command>
+ </tagNode>
<tagNode name="install">
<properties>
<help>Commands for installing generated certificate into running configuration</help>