From 50f71042d7a00692ade8caaa32db1102157ad87a Mon Sep 17 00:00:00 2001
From: sarthurdev <965089+sarthurdev@users.noreply.github.com>
Date: Sat, 3 Jul 2021 13:56:42 +0200
Subject: pki: T3642: Add support for signing and revoking subordinate CAs

---
 op-mode-definitions/pki.xml.in | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

(limited to 'op-mode-definitions/pki.xml.in')

diff --git a/op-mode-definitions/pki.xml.in b/op-mode-definitions/pki.xml.in
index 06b15eed4..9c6b56a68 100644
--- a/op-mode-definitions/pki.xml.in
+++ b/op-mode-definitions/pki.xml.in
@@ -12,6 +12,26 @@
               <help>Generate CA certificate</help>
             </properties>
             <children>
+              <tagNode name="sign">
+                <properties>
+                  <help>Sign generated CA certificate with another specified CA certificate</help>
+                  <completionHelp>
+                    <path>pki ca</path>
+                  </completionHelp>
+                </properties>
+                <children>
+                  <tagNode name="install">
+                    <properties>
+                      <help>Commands for installing generated certificate into running configuration</help>
+                      <completionHelp>
+                        <list>&lt;certificate name&gt;</list>
+                      </completionHelp>
+                    </properties>
+                    <command>sudo ${vyos_op_scripts_dir}/pki.py --action generate --ca "$7" --sign "$5" --install</command>
+                  </tagNode>
+                </children>
+                <command>sudo ${vyos_op_scripts_dir}/pki.py --action generate --ca "noname" --sign "$5"</command>
+              </tagNode>
               <tagNode name="install">
                 <properties>
                   <help>Commands for installing generated certificate into running configuration</help>
-- 
cgit v1.2.3