[netconf] updates to client/server suite of drafts

[Kent Watsen <[e-mail]>]

I just pushed an update to all the client/server drafts (except TCP).  Below is the change log entry for each draft.

The most noteworthy update is that the http-01 update should (hopefully) resolve the concerns raised by the httpbis chairs.

The biggest non-update is that the "config false" algs-supported lists were NOT moved from crypto-types to the ssh/tls drafts, only because I ran out of time (and I'm hoping that my co-authors all do it).

There are still number of FIXME's remaining in the drafts.

Kent // contributor


crypto-types:
   -  Added the four features: "[encrypted-]one-[a]symmetric-key-
      format", each protecting a 'key-format' identity of the same name.
   -  Added 'must' expressions asserting that the 'key-format' leaf
      exists whenever a non-hidden key is specified.
   -  Improved the 'description' statements and added 'reference'
      statements for the 'key-format' identities.
   -  Added a questionable forward reference to "encrypted-*" leafs in a
      couple 'when' expressions.

truststore:
   -  Added new "Support for Built-in Trust Anchors" section.
   -  Removed spurious "uses ct:trust-anchor-certs-grouping" line.


keystore:
   -  Added new "Support for Built-in Trust Anchors" section.
   -  Added 'must' expressions asserting that the 'key-format' leaf
      whenever an encrypted key is specified.


tcp-client-server:
  - No update


ssh-client-server:
   -  Removed choice local-or-external by removing the 'external' case
      and flattening the 'local' case and adding a "client-auth-config-
      supported" feature.
   -  Updated examples to include the "*-key-format" nodes.
   -  Augmented-in "must" expressions ensuring that locally-defined
      public-key-format are "ct:ssh-public-key-format" (must expr for
      ref'ed keys are TBD).


tls-client-server:
   -  Removed choice local-or-external by removing the 'external' case
      and flattening the 'local' case and adding a "client-auth-config-
      supported" feature.
   -  Removed choice required-or-optional.
   -  Updated examples to include the "*-key-format" nodes.
   -  Augmented-in "must" expressions ensuring that locally-defined
      public-key-format are "ct:ssh-public-key-format" (must expr for
      ref'ed keys are TBD).


http-client-server:
   -  Modified Abstract and Intro to be more accurate wrt intended
      applicability.
   -  In ietf-http-client, removed "protocol-version" and all auth
      schemes except "basic".
   -  In ietf-http-client, factored out "client-identity-grouping" for
      proxy connections.
   -  In ietf-http-server, removed "choice required-or-optional" and
      "choice local-or-external".
   -  In ietf-http-server, moved the basic auth under a "choice auth-
      type" limited by new "feature basic-auth".


netconf-client-server:
   -  Updated examples to include the "*-key-format" nodes.
   -  Updated examples to remove the "required" nodes.
   -  Updated examples to remove the "client-auth-defined-elsewhere"
      nodes.


restconf-client-server:
   -  Updated examples to include the "*-key-format" nodes.
   -  Updated examples to remove the "required" nodes.