[netconf] Updated client-server suite of drafts

[Kent Watsen <[e-mail]>]

All,
I just published an update for the suite of client-server drafts.  Please see CHANGE LOGS at bottom for details.

Rob,
These updates primarily address your AD reviews and provided for your ability to see diffs.  For ongoing “discuss” items, please see my responses to your comments in the per draft AD-review email threads.

Michal, Roman,
Please review how private-keys not longer require public-keys to also be specified.

Jensen, Med,
Please note that ietf-truststore now defines typedefs and groupings similar to in your alto draft.


Kent // author


CHANGE LOGS
=============

Crypto-types
Mostly addresses AD review comments.
Also addresses on-list comment regarding public-keys being "mandatory true."
Added note to Editor to fix line foldings.
Factored 'private-key-grouping' from 'asymmetric-key-pair-grouping'.
Made public-key in 'asymmetric-key-pair-grouping' be "mandatory false".
Renamed 'encrypted-by-choice-grouping' to 'encrypted-by-grouping'.

Truststore
Mostly addresses AD review comments.
Also added typedefs and groupings similar to those created by Alto WG.
Added note to Editor to fix line foldings.
Renamed "truststore" to "central truststore" throughout.
Removed "built-in" section text that overlaps with the "system-config" draft.
Added "certificate-ref-grouping" and "public-key-ref-grouping"
Modified typedef certificate-ref's leafref path to NOT prefix "certificate-bag".
Modified typedef public-key-ref's leafref path to NOT prefix "public-key-bag".
Added groupings "certificate-ref-grouping" and "public-key-ref-grouping".

Keystore
Addresses AD review comments.
Added note to Editor to fix line foldings.
Renamed "keystore" to "central keystore" throughout.
Renamed "encrypted-by-choice-grouping" to "encrypted-by-grouping".
Removed "public-key-format" and "public-key" nodes from examples.

Tcp-client-server
Addresses AD review comments.
Added note to Editor to fix line foldings.
Added Security Considerations text to also look a SC-section from imported modules.
Fixed bug: s/augment "keepalives"/refine "keepalives"/
Set defaults for idle-time, max-probes, and probe-interval (removed "mandatory true").
Updated examples to use IETF recommended values for examples.

Ssh-client-server
Addresses AD review comments.
Added note to Editor to fix line foldings.
Introduction now more clearly identifies the "ietf-" and "iana-" modules defined.
Clarified that the modules, when implemented, do not define any protocol-accessible nodes.
Clarified that IANA may deprecate and/or obsolete identities over time.
Added Security Consideration for the "generate-public-key" RPC.
Added Security Considerations text to also look a SC-section from imported modules.
Fixed private-key "must" expressions to not require public-key nodes to be present.
Renamed leaf from "bits" to "num-bits".
Renamed leaf from "hide" to "hidden".
Added container "private-key-encoding" to wrap existing choice.
Removed "public-key-format" and "public-key" nodes from examples.

Tls-client-server
Addresses AD review comments.
Added note to Editor to fix line foldings.
Introduction now more clearly identifies the "ietf-" and "iana-" modules defined.
Clarified that the modules, when implemented, do not define any protocol-accessible nodes.
Clarified that IANA may deprecate and/or obsolete identities over time.
Added Security Consideration for the "generate-public-key" RPC.
Added Security Considerations text to also look a SC-section from imported modules.
Added missing if-feature statements.
Fixed private-key "must" expressions to not require public-key nodes to be present.
Fixed ident-tls12-psk and ident-tls13-psk YANG and references.
Renamed leaf from "bits" to "num-bits".
Added missing "ordered-by user" statement.
Added container "private-key-encoding" to wrap existing choice.
Renamed container "encrypt-with" to "encrypted".
Renamed leaf from "hide" to "hidden".
Removed "public-key-format" and "public-key" nodes from examples.

Http-client-server
Addresses AD review comments.
Added note to Editor to fix line foldings.
Removed "Conventions" section as there are no "BASE64VALUE=" values used in draft.
Clarified that the modules, when implemented, do not define any protocol-accessible nodes.
Added Security Considerations text to also look a SC-section from imported modules.
Removed "A wrapper around the foobar parameters to avoid name collisions" text.
Removed "public-key-format" and "public-key" nodes from examples.

Netconf-client-server
Addresses AD review comments.
Added note to Editor to fix line foldings.
Removed netconf-client-grouping, since it was empty.
Removed erronious statement "client-identity-mappings" must be enabled by a "feature".
Added Security Considerations text to also look a SC-section from imported modules.
Removed "A wrapper around the foobar parameters to avoid name collisions" text.
Added container "endpoints" to wrap list "endpoint".
	
Resetconf-client-server
Addresses AD review comments.
Added note to Editor to fix line foldings.
Removed "Conventions" section as there are no "BASE64VALUE=" values used in draft.
Removed restconf-client-grouping, since it was empty.
Removed erronious statement "client-identity-mappings" must be enabled by a "feature".
Added Security Considerations text to also look a SC-section from imported modules.
Removed "A wrapper around the foobar parameters to avoid name collisions" text.
Added container "endpoints" to wrap list "endpoint".
Fixed if-feature "https-listen" to if-feature "https-call-home".