[netconf] Fwd: [netconf-wg/trust-anchors] Missing prefixes in typedefs certificate-ref and public-key-ref (#1)

Kent Watsen <kent+ietf@watsen.net> Wed, 15 July 2020 18:23 UTC

From: Kent Watsen <kent+ietf@watsen.net>
Content-Type: multipart/alternative; boundary="Apple-Mail=_9582C3CA-F9AA-4143-8FBD-6FC6E6EF8C66"
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\))
Message-ID: <0100017353b7bf1e-ff6960e2-28be-4651-90a1-4c91fdfcd212-000000@email.amazonses.com>
References: <netconf-wg/trust-anchors/issues/1@github.com>
To: "netconf@ietf.org" <netconf@ietf.org>
Date: Wed, 15 Jul 2020 18:23:37 +0000
Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/KHaK5U1RAdESDphnoMdjFSprQ0g>
Subject: [netconf] Fwd: [netconf-wg/trust-anchors] Missing prefixes in typedefs certificate-ref and public-key-ref (#1)
Precedence: list

The following issue was submitted via GitHub issue tracker.

I admit that I’ve been lax in prefixing nodes in paths, and it likely occurs in the entire collection of drafts that we’ve been working on.  Honestly, when a prefix should NOT be used isn’t entirely clear.  The grouping rules allow for local-scope resolution when a prefix is not specified, but when that might be needed or useful is unclear to me.

Unless there is an objection, I plan to add prefixes to all paths in all the drafts.

K.


> Begin forwarded message:
> 
> From: Nick Hancock <notifications@github.com>
> Subject: [netconf-wg/trust-anchors] Missing prefixes in typedefs certificate-ref and public-key-ref (#1)
> Date: July 15, 2020 at 4:59:05 AM EDT
> To: netconf-wg/trust-anchors <trust-anchors@noreply.github.com>
> Cc: Subscribed <subscribed@noreply.github.com>
> Reply-To: netconf-wg/trust-anchors <reply+AARGT6XVUHSNEPJJX7YUVQV5DKTFTEVBNHHCOK6YC4@reply.github.com>
> 
> 
> yanglint flags an issue when using the typedefs 'certificate-ref' and 'public-key-ref'.
> 
> Since the typedef references nodes in ietf-truststore and the node, 'certficate-bag', defined in another module as a sibling node to the node where you reference a certificate, you need to use prefixes on all nodes within ietf-truststore.
> 
> If you change the definition, for example, of certificate-ref as follows, yanglint, then returns no errors when the typedef is used:
> 
> typedef certificate-ref {
> type leafref {
> path "/ts:truststore/ts:certificate-bags/ts:certificate-bag" +
> "[ts:name = current()/../certificate-bag]" +
> "/ts:certificate/ts:name";
> }
> description
> "This typedef define a reference to a specific certificate
> in a certificate bag defined in the Truststore. This
> typedef requires that there exist a sibling 'leaf' node
> called 'certificate-bag' that SHOULD have the typedef
> 'certificate-bag-ref'.";
> }
> 
> —
> You are receiving this because you are subscribed to this thread.
> Reply to this email directly, view it on GitHub <https://github.com/netconf-wg/trust-anchors/issues/1>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AARGT6UNK5HM2RXXW2MTHEDR3VVVTANCNFSM4O2KHCZA>.
>

[netconf] Fwd: [netconf-wg/trust-anchors] Missing… Kent Watsen