Re: [netconf] Adoption-suitability for draft-kwatsen-netconf-sztp-csr

[Russ Housley <[e-mail]>]

> 
> NETCONF WG,
> 
> Per the previous email sent moments ago, the chairs would like to solicit input on the following draft:
> 
>    Title: Conveying a CSR in an SZTP Bootstrapping Request
>    Link: https://tools.ietf.org/html/ <https://tools.ietf.org/html/>draft-kwatsen-netconf-sztp-csr
>    Abstract:
> 
>       This draft extends the "get-bootstrapping-data" RPC defined in
>       RFC 8572 to include an optional certificate signing request (CSR),
>       enabling a bootstrapping device to additionally obtain an identity
>       certificate (e.g., an LDevID, from IEEE 802.1AR) as part of the
>       "onboarding information" response provided in the RPC-reply.
> 
> 
> In particular, please discuss adoption-suitability as it regards to the following questions:
> 
>     1) is the problem important for the NETCONF WG to solve?

I believe that it is important to configure an LDevID certificate as part of the bootstrap, and authentication based on the IDevID seems like the most pragmatic way to do so.

>     2) is the draft a suitable basis for the work?

As a co-author I am biased; however, I think this is a good start at the work to be done.  I am aware of one implementation that is underway.

If adopted, I am willing to continue to work on the document as a co-author.

Russ