Re: [Netconf] ??Re:??WGLC??for??draft-ietf-netcon f-tls-04.txt

On Sun, Sep 28, 2008 at 12:22:51PM +0200, badra@isima.fr wrote:

> Here is the last text we agree on.
> Dear Juergen, based on Washam's comments, I think we need to keep such a
> text even if TLS describes this alert.
> 
> 2.2. Connection Closure
> 
>    TLS [RFC5246] has the ability for secure connection closure using the
>    Alert protocol.  Either NETCONF peer MAY stop the NETCONF connection at
>    any time by sending a TLS close_notify alert.
> 
>    A NETCONF peer MUST close the associated TLS connection if the
>    connection is not expected to deliver any rpc operation or when no data
>    is received from a connection for a long time, where the application
>    decides what "long" means.

I don't really see the value of this sentence. Essentially the text
says "an application MUST close the TLS connection if the application
believes the TLS connection is not used anymore" - something rather
obvious and I am not sure an explicit MUST is needed.

>    The NETCONF peer MUST send a TLS close_notify alert before
>    closing the connection.

But I think you can't rely on being able to do this in all cases.
Perhaps this should be a SHOULD instead of a MUST.

>    A sender's
>    close_notify MAY choose to not wait for the receiver's close_notify
>    alert and simply close the connection, thus generating an incomplete
>    close on the receiver's close_notify side.  Once the receiver gets a
>    close_notify from the sender's close_notify, it MUST reply with a
>    close_notify unless it becomes aware that the connection has already
>    been closed by the sender (e.g., the closure was indicated by TCP). 

See above - I assume a SHOULD is more appropriate than a MUST.

>    In the case the receiver still has pending data to send, it
>    SHOULD send the pending data before sending the close_notify
>    alert.

Here I agree with the SHOULD. ;-)

/js

-- 
Juergen Schoenwaelder           Jacobs University Bremen gGmbH
Phone: +49 421 200 3587         Campus Ring 1, 28759 Bremen, Germany
Fax:   +49 421 200 3103         <http://www.jacobs-university.de/>
_______________________________________________
Netconf mailing list
Netconf@ietf.org
https://www.ietf.org/mailman/listinfo/netconf