From 673ec335b885ae1de8391dd8c48a5fe16b282db5 Mon Sep 17 00:00:00 2001
From: Giga Murphy <giga1699@gmail.com>
Date: Fri, 2 Jan 2026 01:04:38 +0000
Subject: T8136: IPSEC PPK Support

---
 .../include/ipsec/childless.xml.i                  | 29 ++++++++++++++++++++++
 interface-definitions/include/ipsec/ppk.xml.i      | 24 ++++++++++++++++++
 2 files changed, 53 insertions(+)
 create mode 100644 interface-definitions/include/ipsec/childless.xml.i
 create mode 100644 interface-definitions/include/ipsec/ppk.xml.i

(limited to 'interface-definitions/include/ipsec')

diff --git a/interface-definitions/include/ipsec/childless.xml.i b/interface-definitions/include/ipsec/childless.xml.i
new file mode 100644
index 000000000..76ba8d548
--- /dev/null
+++ b/interface-definitions/include/ipsec/childless.xml.i
@@ -0,0 +1,29 @@
+<!-- include start from ipsec/childless.xml.i -->
+<leafNode name="childless">
+  <properties>
+    <help>Enable support for childless IKE SA initiation</help>
+    <completionHelp>
+      <list>allow prefer force never</list>
+    </completionHelp>
+    <valueHelp>
+      <format>allow</format>
+      <description>Accept childless IKE SA in responder mode. Create regular IKE SA in initiator mode</description>
+    </valueHelp>
+    <valueHelp>
+      <format>prefer</format>
+      <description>In both responder and initiator modes, accept and create childless IKE SA correspondingly</description>
+    </valueHelp>
+    <valueHelp>
+      <format>force</format>
+      <description>Require the use of childless IKE SA in both responder and initiator modes</description>
+    </valueHelp>
+    <valueHelp>
+      <format>never</format>
+      <description>Disable support for childless IKE SAs when acting as a responder</description>
+    </valueHelp>
+    <constraint>
+      <regex>(allow|prefer|force|never)</regex>
+    </constraint>
+  </properties>
+</leafNode>
+<!-- include end -->
diff --git a/interface-definitions/include/ipsec/ppk.xml.i b/interface-definitions/include/ipsec/ppk.xml.i
new file mode 100644
index 000000000..bd420766c
--- /dev/null
+++ b/interface-definitions/include/ipsec/ppk.xml.i
@@ -0,0 +1,24 @@
+<!-- include start from ipsec/ppk.xml.i -->
+<node name="ppk">
+  <properties>
+    <help>Post-quantum preshared key</help>
+  </properties>
+  <children>
+    <leafNode name="id">
+      <properties>
+        <help>Post-quantum preshared key for this connection</help>
+        <valueHelp>
+          <format>txt</format>
+          <description>ID used for PPK</description>
+        </valueHelp>
+      </properties>
+    </leafNode>
+    <leafNode name="required">
+      <properties>
+        <help>Require a valid PPK for connection to establish</help>
+        <valueless/>
+      </properties>
+    </leafNode>
+  </children>
+</node>
+<!-- include end -->
-- 
cgit v1.2.3