IETF Logo Mail Archive

Re: [alto] [netconf] Comment on typedef 'public-key-ref' of draft-ietf-netconf-trust-anchors-21

Martin Björklund <mbj+ietf@4668.se> Wed, 13 December 2023 12:51 UTC

Return-Path: <mbj+ietf@4668.se>
X-Original-To: alto@ietfa.amsl.com
Delivered-To: alto@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7D31DC14F680; Wed, 13 Dec 2023 04:51:33 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.106
X-Spam-Level:
X-Spam-Status: No, score=-7.106 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=4668.se header.b="H1wgm0el"; dkim=pass (2048-bit key) header.d=messagingengine.com header.b="Oe7Nl9DK"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qO3HM6hkbC7T; Wed, 13 Dec 2023 04:51:29 -0800 (PST)
Received: from out3-smtp.messagingengine.com (out3-smtp.messagingengine.com [66.111.4.27]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 49BC2C14F5F6; Wed, 13 Dec 2023 04:51:22 -0800 (PST)
Received: from compute5.internal (compute5.nyi.internal [10.202.2.45]) by mailout.nyi.internal (Postfix) with ESMTP id 090DD5C04D6; Wed, 13 Dec 2023 07:51:22 -0500 (EST)
Received: from mailfrontend1 ([10.202.2.162]) by compute5.internal (MEProxy); Wed, 13 Dec 2023 07:51:22 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=4668.se; h=cc:cc :content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm3; t=1702471882; x=1702558282; bh=tHYyF2R+TRntTVkKrngzUrb9t72mwp8LeQE7EXlu81M=; b= H1wgm0elYdPcAD4BP7anYYguFgjatnnrvzGY1TMurQNs6x6JaPAqgR9M/iZ2jOCd mMMbAbscOvOsthrewl+plZQKRkyV6cXydglM3O27VYlew3v3qtH71gcmhTYcZe/t ZKkKTqvgKEnnISyvuaa45Mrx0lPtolRmIQs7hSyACGyFIF2vC77/ID6Kqr9rphe+ zoq9Mp8w+QjO4zZsfYNDQG33I3klIJm2GPncRaogpwtVY+jtu92Z8VzXaGxw+2Vn 6IPs4EPBeiib1P+TuodrvDTlKsstxpjmqsUL0DN6oHOuHQjwpUtzq45VI/En98de 9kyArbQMTAOOrqxZipgAsQ==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:content-type:date:date:feedback-id:feedback-id :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to:x-me-proxy:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm1; t=1702471882; x= 1702558282; bh=tHYyF2R+TRntTVkKrngzUrb9t72mwp8LeQE7EXlu81M=; b=O e7Nl9DKjk9mWu8sLPkF0QvfnxNC5uYh8OlylipA1haJzB2DuVM9qJr45I2IAWx79 Cyq05obY/fIUVTr9EDYgBCMzmEADx17i3i9ow5nWRQ5Wqk7KExH3NqJVS6RcDLJc CvQEhaHTk+pAXyzHZVL9pd4AxVIRlxBnEsBxGCFHw64bdOfbJbBPvmiJ+Zy/wbgc aBP6RY6DZbJ65+O0/Ff0KJdfnASRnfcIbfwXeMGcI+ACpZtITEyyl3hd7nE6ttKl I6JpBEzZRw3ZZo0BjPR6V2utpmSrwx73LkXrXt864WAURE8RJJbWrdVMjgKH7dDd Pz53j90AEozj4mI8Ze00g==
X-ME-Sender: <xms:yah5Zf-XuYdSENaQ3H8AcOXQQQADuBdNi4d7s4Becn3QSEJZof4bnw> <xme:yah5ZbvtnhGItHpdmuwYtxsf-rFsXf_ZG5ZAHO2uZ9hYDEBYkX3pJ2pbB1cxKlP9T Nwm670ilcvqWHRm3c8>
X-ME-Received: <xmr:yah5ZdCSBZSGfVXgTDYdNzr-MqpHzicGiC2eCe0q8vHlaUFgthyP4246e5fEzYpfIqLrhrc6p2obqiX45fG55XWNPL-4Lxn73w>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvkedrudeliedggeegucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpeffkffvvefuhfgjfhfogggtgfesth ejredtredtvdenucfhrhhomhepofgrrhhtihhnuceujhpnrhhklhhunhguuceomhgsjhdo ihgvthhfseegieeikedrshgvqeenucggtffrrghtthgvrhhnpeehheehhfetueeuvefghf efieehuddvteelvedtgfelgfejieeiueekuddvteegteenucevlhhushhtvghrufhiiigv pedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehmsghjodhivghtfhesgeeiieekrdhsvg
X-ME-Proxy: <xmx:yah5ZbfO6QSvlELiL_oAMp5NBPqOWKbAy8m01c1--OjJN4yTT4rUvw> <xmx:yah5ZUMyPaYAww2amCaAeZbeQ2iKc7GVzWDmwnHAk8pwyc-zXOafgg> <xmx:yah5Zdk04bOE2Uv765v4P_8FOMRmbKpINlFXLt2TPkXk8e1bZFIxow> <xmx:yqh5ZZr831-W_yLbe6qmMAqujGwPQtmx4G3iAJUErlxZs-zBAmoiUQ>
Feedback-ID: icc614784:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Wed, 13 Dec 2023 07:51:20 -0500 (EST)
Date: Wed, 13 Dec 2023 13:51:18 +0100
Message-Id: <20231213.135118.734339006048411888.id@4668.se>
To: jingxuan.n.zhang@gmail.com
Cc: kent+ietf@watsen.net, draft-ietf-netconf-trust-anchors@ietf.org, netconf@ietf.org, alto@ietf.org
From: Martin Björklund <mbj+ietf@4668.se>
In-Reply-To: <CAAbpuyqiscNH+m4M3=5z_3KcinjdhYeSS=xf0PcH0w-wtWxYkw@mail.gmail.com>
References: <CAAbpuypYpm863NC3ka6LvEJMBEarpSguQKdHNs7EiooSWNsXcA@mail.gmail.com> <0100018c5f5160d6-5b04359a-1517-4563-a9ab-42ee29b41a2e-000000@email.amazonses.com> <CAAbpuyqiscNH+m4M3=5z_3KcinjdhYeSS=xf0PcH0w-wtWxYkw@mail.gmail.com>
X-Mailer: Mew version 6.8 on Emacs 27.1
Mime-Version: 1.0
Content-Type: Text/Plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/alto/1Fu3GxqwdDKAj0-JmDLpB-Prdpk>
Subject: Re: [alto] [netconf] Comment on typedef 'public-key-ref' of draft-ietf-netconf-trust-anchors-21
X-BeenThere: alto@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Application-Layer Traffic Optimization \(alto\) WG mailing list" <alto.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/alto>, <mailto:alto-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/alto/>
List-Post: <mailto:alto@ietf.org>
List-Help: <mailto:alto-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/alto>, <mailto:alto-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Dec 2023 12:51:33 -0000

Hi,


Jensen Zhang <jingxuan.n.zhang@gmail.com> wrote:
> Hi Kent,
> 
> Thanks for your quick response.
> 
> Maybe I did not make it clear. I am just pointing out a very simple
> specific issue in the current 'ietf-truststore' module, which is that the
> typedef 'public-key-ref' cannot be used by another module.
> 
> The reason is very simple: Based on the description, if module A wants to
> use this typedef to reference a public key in the central trust store, it
> is supposed to provide another sibling leaf node called 'public-key-bag'
> that has the typedef 'public-key-bag-ref', so that the public-key-ref can
> use the relative path '[ts:name = current()/../ts:public-key-bag]' to
> locate in which public-key-bag the referenced public key should be.
> However, in this relative path, 'public-key-bag' is prefixed by 'ts', it
> cannot reference the sibling leaf node 'public-key-bag' defined in module A
> correctly.
> 
> The fix should also be very simple: Just remove the prefix of the
> 'public-key-bag', i.e.,
> 
> OLD:
> 
>          + "[ts:name = current()/../ts:public-key-bag]/"
> 
> NEW:
> 
>          + "[ts:name = current()/../public-key-bag]/"


I agree, this is the correct fix to the problem.


/martin

v2.23.0 | Report a Bug | By Email