Re: [netconf] today's updates to the client-server suite of drafts

Martin Bjorklund <mbj@tail-f.com> Wed, 06 November 2019 09:53 UTC

Return-Path: <mbj@tail-f.com>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 867C712080E for <netconf@ietfa.amsl.com>; Wed, 6 Nov 2019 01:53:36 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wIiBA_9swvyr for <netconf@ietfa.amsl.com>; Wed, 6 Nov 2019 01:53:35 -0800 (PST)
Received: from mail.tail-f.com (mail.tail-f.com [46.21.102.45]) by ietfa.amsl.com (Postfix) with ESMTP id D374A12080D for <netconf@ietf.org>; Wed, 6 Nov 2019 01:53:34 -0800 (PST)
Received: from localhost (unknown [173.38.220.41]) by mail.tail-f.com (Postfix) with ESMTPSA id 009521AE018B; Wed, 6 Nov 2019 10:53:32 +0100 (CET)
Date: Wed, 06 Nov 2019 10:53:03 +0100 (CET)
Message-Id: <20191106.105303.176994873055471743.mbj@tail-f.com>
To: kent+ietf@watsen.net
Cc: netconf@ietf.org
From: Martin Bjorklund <mbj@tail-f.com>
In-Reply-To: <0100016e2de6a66d-ff5aea75-edfc-4d98-8c0e-95674c411430-000000@email.amazonses.com>
References: <0100016e2de6a66d-ff5aea75-edfc-4d98-8c0e-95674c411430-000000@email.amazonses.com>
X-Mailer: Mew version 6.8 on Emacs 25.2
Mime-Version: 1.0
Content-Type: Text/Plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/nmDcGFKCMTMZtlg2t3lFa6qrqsE>
Subject: Re: [netconf] today's updates to the client-server suite of drafts
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETCONF WG list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 06 Nov 2019 09:53:37 -0000

Hi,

What happened to the YANG module in
draft-ietf-netconf-trust-anchors-07?  It just has:

   <CODE BEGINS> file "ietf-truststore@2019-11-02.yang";


   <CODE ENDS>


/martin


Kent Watsen <kent+ietf@watsen.net>; wrote:
> 
> The biggest change is in the crypto-types draft, as it continues to
> try to grapple with the "algorithm" problem.
> 
> I don't think there is consensus for having distinct "iana-" modules
> for each type of algorithm yet.  For one, if it were a module to be be
> supported by IANA, one might expect more of a template but, as the
> algorithm-lists pull from numerous RFCs, how to make a template wasn't
> clear to me and, besides, having a distinct module for each type of
> algorithm became a convenient way to define a "config false" list for
> the algorithms supported by the server.
> 
> In any case, I offer this update to the WG for discussion.  Below are
> the change logs for each draft.
> 
> Kent // contributor
> 
> 
> ===== change logs =====
> 
> crypto-types:
> 
>    o  Removed all non-essential (to NC/RC) algorithm types.
> 
>    o  Moved remaining algorithm types each into its own module.
> 
>    o  Added a 'config false' "algorithms-supported" list to each of the
>       algorithm-type modules.
> 
> 
> 
> trust-anchors (truststore):
> 
>    o  Added Henk Birkholz as a co-author (thanks Henk!)
> 
>    o  Added PSKs and raw public keys to Truststore.
> 
> 
> 
> keystore:
> 
>    o  Updated YANG module and examples to incorporate the new
>       iana-*-algorithm modules in the crypto-types draft.
> 
> 
> 
> tcp-client-server
> 
>    o  No update.
> 
> 
> 
> 
> ssh-client-server
> 
>    o  Removed unnecessary if-feature statements in the -client and
>       -server modules.
> 
>    o  Cleaned up some description statements in the -client and -server
>       modules.
> 
>    o  Fixed a canonical ordering issue in ietf-ssh-common detected by
>       new pyang.
> 
> 
> 
> tls-client-server
> 
>    o  Removed unnecessary if-feature statements in the -client and
>       -server modules.
> 
>    o  Cleaned up some description statements in the -client and -server
>       modules.
> 
>    o  Fixed a canonical ordering issue in ietf-ssh-common detected by
>       new pyang.
> 
> 
> 
> http-client-server
> 
>    o  Removed "protocol-version" leaf in http-client-grouping.
> 
> 
> 
> netconf-client-server
> 
>    o  Added refinement to make "cert-to-name/fingerprint" be mandatory
>       false.
> 
>    o  Commented out refinement to "tls-server-grouping/client-
>       authentication" until a better "must" expression is defined.
> 
> 
> 
> restconf-client-server
> 
>    o  Added refinement to make "cert-to-name/fingerprint" be mandatory
>       false.
> 
>    o  Commented out refinement to "tls-server-grouping/client-
>       authentication" until a better "must" expression is defined.
> 
>    o  Updated restconf-client example to reflect that http-client-
>       grouping no longer has a "protocol-version" leaf.
> 
>