Re: [netconf] I-D Action: draft-ietf-netconf-crypto-types-23.txt

["Brockhaus, Hendrik" <[e-mail]>]

Kent 

> Von: Kent Watsen <[e-mail]> 
>
> Hi Hendrik,
>
> The requests to add support for CMP and CMC were made to the sztp-csr draft, so no cascading opportunity in crypto-types was searched for, including any possible opportunity to more aggressively refactor parts to crypto-types.

Thank you for the explanation. 
I was aware of module ietf-ztp-types and provided input regarding CMP back then. I was not aware that crypto-types is addressing the topic of certificate requests as well and I was wandering why there is no reuse of what was specified in ietf-ztp-types. But I have to admit that I have nearly no experiences with neither YANG nor NETCONF.

>
> The sztp-csr ship has sailed, but I'm not opposed to adding CMP/CMC support to crypto-types, especially if you  can help out.  

If the group wants to add CMP and CMC I am happy to support with CMP expertise.
What I like about CMP and CMC requests is, that they offer a close binding of the CSR to the requesters identity by a wrapping signature or MAC.

> Roughly, we'd want to map the following sztp-csr groupings to crypto-types's YANG as follows:
>
>  SZTP-CSR Grouping  |  ietf-crypto-types
> ---------------------+-----------------------
> csr-support-grouping |  feature statements
> csr-request-grouping |  "input" parameters
> csr-grouping         |  "output" parameters
>
> Kent // author of both drafts

Hendrik

>
>> On May 25, 2022, at 3:57 AM, Brockhaus, Hendrik <mailto:[e-mail]> wrote:
>>
>> Kent
>>
>> There is the grouping grouping generate-csr-grouping for certificate signing requests defined in this document offering usage of PKCS#10 format.
>> This topic is also addressed by draft-ietf-netconf-sztp-csr with the grouping csr-support-grouping offering PKCS#10, CMP and CMC request formats.
>> Is there a reason for the overlap and for not just reusing what is defined in draft-ietf-netconf-sztp-csr regarding CSRs also in draft-ietf-netconf-crypto-types?
>>
>> Hendrik
>>

Von: netconf <mailto:[e-mail]> Im Auftrag von internet-
mailto:[e-mail]

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Network Configuration WG of the IETF.

       Title           : YANG Data Types and Groupings for Cryptography
       Author          : Kent Watsen
	Filename        : draft-ietf-netconf-crypto-types-23.txt
	Pages           : 63
	Date            : 2022-05-24

Abstract:
  This document presents a YANG 1.1 (RFC 7950) module defining
  identities, typedefs, and groupings useful to cryptographic
  applications.