Re: [netconf] Adoption-suitability for draft-kwatsen-netconf-sztp-csr

[Sean Turner <[e-mail]>]

> NETCONF WG,
>
> Per the previous email sent moments ago, the chairs would like to solicit input on the following draft:
>   Title: Conveying a CSR in an SZTP Bootstrapping Request
>   Link: https://tools.ietf.org/html/draft-kwatsen-netconf-sztp-csr
>   Abstract:
>
>      This draft extends the "get-bootstrapping-data" RPC defined in
>      RFC 8572 to include an optional certificate signing request (CSR),
>      enabling a bootstrapping device to additionally obtain an identity
>      certificate (e.g., an LDevID, from IEEE 802.1AR) as part of the
>      "onboarding information" response provided in the RPC-reply.
>
> In particular, please discuss adoption-suitability as it regards to the following questions:
>
>   1) is the problem important for the NETCONF WG to solve?

My reading of the charter puts this squarely in scope for the WG. Configuring an LDevID certificate as part of the bootstrap is important and the most straightforward way to do this is authentication based on IDevID.

>   2) is the draft a suitable basis for the work?

I am a wee bit biased as an author I think this is a good a first draft. It would obviously be good to get some additional eyes on it though.

spt