Re: [Anima] [netmod] [anima-wg/anima-brski-async-enroll] Definition of new assertion type (agent-proximity) for the voucher (#18)

"Fries, Steffen" <steffen.fries@siemens.com> Thu, 17 June 2021 15:05 UTC

Return-Path: <steffen.fries@siemens.com>
X-Original-To: anima@ietfa.amsl.com
Delivered-To: anima@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 49B303A2382; Thu, 17 Jun 2021 08:05:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.895
X-Spam-Level:
X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jt3ZhyG5u6kg; Thu, 17 Jun 2021 08:05:40 -0700 (PDT)
Received: from gw-eagle2.siemens.com (gw-eagle2.siemens.com [194.138.20.69]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4657B3A237F; Thu, 17 Jun 2021 08:05:40 -0700 (PDT)
Received: from mail3.dc4ca.siemens.de (mail3.dc4ca.siemens.de [139.23.14.198]) by gw-eagle2.siemens.com (Postfix) with ESMTPS id 26BF44682A3; Thu, 17 Jun 2021 17:05:35 +0200 (CEST)
Received: from DEMCHDC8A2A.ad011.siemens.net (demchdc8a2a.ad011.siemens.net [139.25.226.108]) by mail3.dc4ca.siemens.de (Postfix) with ESMTPS id BCF6E27D840B; Thu, 17 Jun 2021 17:05:32 +0200 (CEST)
Received: from DEMCHDC89XA.ad011.siemens.net (139.25.226.103) by DEMCHDC8A2A.ad011.siemens.net (139.25.226.108) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2176.14; Thu, 17 Jun 2021 17:05:32 +0200
Received: from DEMCHDC89XA.ad011.siemens.net ([139.25.226.103]) by DEMCHDC89XA.ad011.siemens.net ([139.25.226.103]) with mapi id 15.01.2176.014; Thu, 17 Jun 2021 17:05:32 +0200
From: "Fries, Steffen" <steffen.fries@siemens.com>
To: Andy Bierman <andy@yumaworks.com>, Kent Watsen <kent+ietf@watsen.net>
CC: Michael Richardson <mcr+ietf@sandelman.ca>, "netmod@ietf.org" <netmod@ietf.org>, "anima@ietf.org" <anima@ietf.org>, "Werner, Thomas" <thomas-werner@siemens.com>
Thread-Topic: [Anima] [netmod] [anima-wg/anima-brski-async-enroll] Definition of new assertion type (agent-proximity) for the voucher (#18)
Thread-Index: AQHXYwO5qG4OVLZ5lUaNPr0y7qLU/qsYOWZg
Date: Thu, 17 Jun 2021 15:05:32 +0000
Message-ID: <c8c4ea615bb2450c9a1a9fccb956909f@siemens.com>
References: <anima-wg/anima-brski-async-enroll/issues/18@github.com> <19872.1623779796@localhost> <0100017a16ff590b-6803346f-2ef6-4b19-88bf-3c670e32d5a0-000000@email.amazonses.com> <CABCOCHQRJB3nca36bz+gVykw5fxym7ji3GJrVMcrsW+6uUopYg@mail.gmail.com>
In-Reply-To: <CABCOCHQRJB3nca36bz+gVykw5fxym7ji3GJrVMcrsW+6uUopYg@mail.gmail.com>
Accept-Language: en-US, de-DE
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_Enabled=true; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_SetDate=2021-06-17T15:05:31Z; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_Method=Standard; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_Name=restricted-default; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_SiteId=38ae3bcd-9579-4fd4-adda-b42e1495d55a; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_ActionId=05cb58e2-da39-44d6-8af1-91da9f905c38; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_ContentBits=0
document_confidentiality: Restricted
x-originating-ip: [144.145.220.66]
Content-Type: multipart/alternative; boundary="_000_c8c4ea615bb2450c9a1a9fccb956909fsiemenscom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/anima/J8CC3PfBl4yQuG0jDrR7TYzydq4>
Subject: Re: [Anima] [netmod] [anima-wg/anima-brski-async-enroll] Definition of new assertion type (agent-proximity) for the voucher (#18)
X-BeenThere: anima@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Autonomic Networking Integrated Model and Approach <anima.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/anima>, <mailto:anima-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/anima/>
List-Post: <mailto:anima@ietf.org>
List-Help: <mailto:anima-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/anima>, <mailto:anima-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 17 Jun 2021 15:05:46 -0000

Hi Andy,

Thank you for pointing out that it will not be possible to have a straight forward enhancement of the enum.
I have some questions to the points you raised:

>From: Anima anima-bounces@ietf.org<mailto:anima-bounces@ietf.org> On Behalf Of Andy Bierman
>An enumeration type is hard-wired.
Hardwired in terms of a fixed definition of values for the enum in RFC 8366?

>No enums can be added via augmentation.
That means just the definition of an additional enum value is not enough.

>You have to "deviate replace" the type-stmt to add an enum externally,
As I’m not too deep in YANG, could you provide more information on this part?  Would this be an approach to (just) redefine the type enumeration in the leaf “assertion” (https://datatracker.ietf.org/doc/html/rfc8366#page-11) and adding the new assertion type “agent-proximity”? Would this require to keep all enums already defined in RFC 8366 or could we just use the ones necessary in BRSKI-AE?

>or you have to update the module and add the enum inline.
Does this result in an update of the module “ietf-voucher” or to define a new module, which imports and augments the voucher by adding the new enum?

Best regards
Steffen