Re: [netconf] I-D Action: draft-ietf-netconf-crypto-types-23.txt

[Kent Watsen <[e-mail]>]

Hi Hendrik,

The requests to add support for CMP and CMC were made to the sztp-csr draft, so no cascading opportunity in crypto-types was searched for, including any possible opportunity to more aggressively refactor parts to crypto-types.

The sztp-csr ship has sailed, but I'm not opposed to adding CMP/CMC support to crypto-types, especially if you  can help out.  Roughly, we'd want to map the following sztp-csr groupings to crypto-types's YANG as follows:

  SZTP-CSR Grouping  |  ietf-crypto-types
---------------------+-----------------------
csr-support-grouping |  feature statements
csr-request-grouping |  "input" parameters
csr-grouping         |  "output" parameters

Kent // author of both drafts


> On May 25, 2022, at 3:57 AM, Brockhaus, Hendrik <[e-mail]> wrote:
> 
> Kent
> 
> There is the grouping grouping generate-csr-grouping for certificate signing requests defined in this document offering usage of PKCS#10 format.
> This topic is also addressed by draft-ietf-netconf-sztp-csr with the grouping csr-support-grouping offering PKCS#10, CMP and CMC request formats.
> Is there a reason for the overlap and for not just reusing what is defined in draft-ietf-netconf-sztp-csr regarding CSRs also in draft-ietf-netconf-crypto-types?
> 
> Hendrik
> 
>> Von: netconf <[e-mail]> Im Auftrag von internet-
>> [e-mail]
>> 
>> A New Internet-Draft is available from the on-line Internet-Drafts directories.
>> This draft is a work item of the Network Configuration WG of the IETF.
>> 
>>        Title           : YANG Data Types and Groupings for Cryptography
>>        Author          : Kent Watsen
>> 	Filename        : draft-ietf-netconf-crypto-types-23.txt
>> 	Pages           : 63
>> 	Date            : 2022-05-24
>> 
>> Abstract:
>>   This document presents a YANG 1.1 (RFC 7950) module defining
>>   identities, typedefs, and groupings useful to cryptographic
>>   applications.
>>