From 6f66e71e4622c54058b8689d4be730905d69fe22 Mon Sep 17 00:00:00 2001
From: sarthurdev <965089+sarthurdev@users.noreply.github.com>
Date: Thu, 17 Jun 2021 18:08:58 +0200
Subject: pki: T3642: New PKI config and management
---
.../include/pki/ca-certificate.xml.i | 14 ++
.../include/pki/certificate-key.xml.i | 23 +++
.../include/pki/certificate.xml.i | 14 ++
.../include/pki/dh-parameters.xml.i | 14 ++
.../include/pki/openvpn_tls-auth.xml.i | 14 ++
.../include/pki/private-key.xml.i | 30 +++
interface-definitions/include/pki/public-key.xml.i | 14 ++
interface-definitions/pki.xml.in | 203 +++++++++++++++++++++
8 files changed, 326 insertions(+)
create mode 100644 interface-definitions/include/pki/ca-certificate.xml.i
create mode 100644 interface-definitions/include/pki/certificate-key.xml.i
create mode 100644 interface-definitions/include/pki/certificate.xml.i
create mode 100644 interface-definitions/include/pki/dh-parameters.xml.i
create mode 100644 interface-definitions/include/pki/openvpn_tls-auth.xml.i
create mode 100644 interface-definitions/include/pki/private-key.xml.i
create mode 100644 interface-definitions/include/pki/public-key.xml.i
create mode 100644 interface-definitions/pki.xml.in
(limited to 'interface-definitions')
diff --git a/interface-definitions/include/pki/ca-certificate.xml.i b/interface-definitions/include/pki/ca-certificate.xml.i
new file mode 100644
index 000000000..14295a281
--- /dev/null
+++ b/interface-definitions/include/pki/ca-certificate.xml.i
@@ -0,0 +1,14 @@
+
+
+
+ Certificate Authority in PKI configuration
+
+ CA name
+ Name of CA in PKI configuration
+
+
+ pki ca
+
+
+
+
diff --git a/interface-definitions/include/pki/certificate-key.xml.i b/interface-definitions/include/pki/certificate-key.xml.i
new file mode 100644
index 000000000..b68f38442
--- /dev/null
+++ b/interface-definitions/include/pki/certificate-key.xml.i
@@ -0,0 +1,23 @@
+
+
+
+ Certificate and private key in PKI configuration
+
+ cert name
+ Name of certificate in PKI configuration
+
+
+ pki certificate
+
+
+
+
+
+ Private key passphrase
+
+ txt
+ Passphrase to decrypt the private key
+
+
+
+
diff --git a/interface-definitions/include/pki/certificate.xml.i b/interface-definitions/include/pki/certificate.xml.i
new file mode 100644
index 000000000..436aa90ba
--- /dev/null
+++ b/interface-definitions/include/pki/certificate.xml.i
@@ -0,0 +1,14 @@
+
+
+
+ Certificate in PKI configuration
+
+ cert name
+ Name of certificate in PKI configuration
+
+
+ pki certificate
+
+
+
+
diff --git a/interface-definitions/include/pki/dh-parameters.xml.i b/interface-definitions/include/pki/dh-parameters.xml.i
new file mode 100644
index 000000000..6e69528e7
--- /dev/null
+++ b/interface-definitions/include/pki/dh-parameters.xml.i
@@ -0,0 +1,14 @@
+
+
+
+ Diffie-Hellman parameters in PKI configuration
+
+ DH name
+ Name of DH params in PKI configuration
+
+
+ pki dh
+
+
+
+
diff --git a/interface-definitions/include/pki/openvpn_tls-auth.xml.i b/interface-definitions/include/pki/openvpn_tls-auth.xml.i
new file mode 100644
index 000000000..2b9a69653
--- /dev/null
+++ b/interface-definitions/include/pki/openvpn_tls-auth.xml.i
@@ -0,0 +1,14 @@
+
+
+
+ Static key for tls-auth in PKI configuration
+
+ key name
+ Name of static key in PKI configuration
+
+
+ pki openvpn tls-auth
+
+
+
+
diff --git a/interface-definitions/include/pki/private-key.xml.i b/interface-definitions/include/pki/private-key.xml.i
new file mode 100644
index 000000000..6099daa89
--- /dev/null
+++ b/interface-definitions/include/pki/private-key.xml.i
@@ -0,0 +1,30 @@
+
+
+
+ Private key
+
+
+
+
+ Private key in PKI configuration
+
+ key name
+ Name of private key in PKI configuration
+
+
+ pki key-pair
+
+
+
+
+
+ Private key passphrase
+
+ txt
+ Passphrase to decrypt the private key
+
+
+
+
+
+
diff --git a/interface-definitions/include/pki/public-key.xml.i b/interface-definitions/include/pki/public-key.xml.i
new file mode 100644
index 000000000..dfc6979fd
--- /dev/null
+++ b/interface-definitions/include/pki/public-key.xml.i
@@ -0,0 +1,14 @@
+
+
+
+ Public key in PKI configuration
+
+ key name
+ Name of public key in PKI configuration
+
+
+ pki key-pair
+
+
+
+
diff --git a/interface-definitions/pki.xml.in b/interface-definitions/pki.xml.in
new file mode 100644
index 000000000..e818ae438
--- /dev/null
+++ b/interface-definitions/pki.xml.in
@@ -0,0 +1,203 @@
+
+
+
+
+ VyOS PKI configuration
+
+
+
+
+ Certificate Authority
+
+
+
+
+ CA certificate in PEM format
+
+
+
+
+ Description
+
+
+
+
+ CA private key in PEM format
+
+
+
+
+ CA private key in PEM format
+
+
+
+
+ CA private key is password protected
+
+
+
+
+
+
+
+ Certificate revocation list in PEM format
+
+
+
+
+
+
+
+ Certificate
+
+
+
+
+ Certificate in PEM format
+
+
+
+
+ Description
+
+
+
+
+ Certificate private key
+
+
+
+
+ Certificate private key in PEM format
+
+
+
+
+ Certificate private key is password protected
+
+
+
+
+
+
+
+ If CA is present, this certificate will be included in generated CRLs
+
+
+
+
+
+
+
+ Diffie-Hellman parameters
+
+
+
+
+ DH parameters in PEM format
+
+
+
+
+
+
+ Public and private keys
+
+
+
+
+ Public key
+
+
+
+
+ Public key in PEM format
+
+
+
+
+
+
+ Private key
+
+
+
+
+ Private key in PEM format
+
+
+
+
+ Private key is password protected
+
+
+
+
+
+
+
+
+
+ OpenVPN keys
+
+
+
+
+ OpenVPN TLS auth key
+
+
+
+
+ OpenVPN TLS auth key data
+
+
+
+
+ OpenVPN TLS auth key version
+
+
+
+
+
+
+
+
+ X509 Settings
+
+
+
+
+ X509 Default Values
+
+
+
+
+ Default country
+
+ GB
+
+
+
+ Default state
+
+ Some-State
+
+
+
+ Default locality
+
+ Some-City
+
+
+
+ Default organization
+
+ VyOS
+
+
+
+
+
+
+
+
--
cgit v1.2.3