Re: [netconf] Reuse of SZTP-CSR YANG definition in BRSKI-AE

[Kent Watsen <[e-mail]>]

Hi Hendrik, et. al.,

The other matter is under AD review as well.  I’m currently waiting to see the final text in the SZTP-CSR draft (thank you, and David too, CC-ed).  Once the dust settles there, I’ll look at what can be done.  At a minimum, there seems to be an opportunity to move, to typedefs for “cmc” and “cmp” to the "ietf-crypto-types” module.

Kent // co-author of both drafts “sztp-csr” and "crypto-types”


> On Jul 20, 2021, at 8:19 AM, Brockhaus, Hendrik <[e-mail]> wrote:
> 
> Kent, Russ, Sean
> 
> I was not involved in the discussion of reusing the Yang Module in BRSKI-AE some weeks back. But we would like to use the momentum that draft-ietf-netconf-sztp-csr is currently opened for editing for CMP specific corrections in the YANG module ietf-sztp-csr for brining up this discussion again.
> 
> In BRSKI-AE (https://datatracker.ietf.org/doc/draft-ietf-anima-brski-async-enroll/) we address a use case in which we use a signature wrapped CSR, for which we would like to re-use the existing YANG definition in SZTP (see also the discussion in the thread https://mailarchive.ietf.org/arch/msg/netconf/AFFqdeYJll9IndkQfT6scXWct6U/)
> As BRSKI-AE  currently only utilize the CSR type part without the SZTP bootstrapping server information, it would be advantageous for BRSKI-AE (for general applicability) to extract the CSR types into a separate YANG module, which could be imported by the YANG module ietf-sztp-csr and can be re-used also by BRSKI-AE. This would avoid a potential protocol specific definition of CSR types for SZTP and BRSKI-AE with most likely the same content. In addition, while BRSKI-AE currently only utilizes P10, it would open the possibility to also utilize other certification request types in the future.
> We would like to ask if you see an opportunity for this change (separate ietf-csr-types YANG module as part of draft-ietf-sztp-csr) at this point in time.
> 
> Hendrik
> 
> Siemens AG
> Technology
> Research in Digitalization and Automation
> Security Architecture
> T RDA CST SEA-DE
> Otto-Hahn-Ring 6
> 81739 Muenchen, Germany 
> Tel.: [phone]
> Fax: [phone]
> Mobile: [phone]
> mailto:[e-mail]
> 
> www.siemens.com
> 
> Siemens Aktiengesellschaft: Chairman of the Supervisory Board: Jim Hagemann Snabe; Managing Board: Roland Busch, Chairman, President and Chief Executive Officer; Cedrik Neike, Matthias Rebellius, Ralf P. Thomas, Judith Wiese; Registered offices: Berlin and Munich, Germany; Commercial registries: Berlin-Charlottenburg, HRB 12300, Munich, HRB 6684; WEEE-Reg.-No. DE 23691322