Re: [netconf] updates to client/server drafts

[Juergen Schoenwaelder <[e-mail]>]

On Fri, Jun 07, 2019 at 10:28:09PM +0000, Kent Watsen wrote:
> 
> The updates can be broadly described as thus:
> 
> 1) in crypto-types, replaced the 'action' statements with 'crypt-hash' like equivalents.  If folks don't like the "verbs", then we can simply remove them, having no solution for asking the device to generate a key or install a hidden key.
>

I am not sure this approach. This just hides the discussion in a
special purpose construction:

               Without the optional '-and-hidden' postfix, the generated
               key pair is stored in the configuration data store as if
               the values had been configured by the client.

A more general note: I assume that humans configuring systems are
mostly familiar with common file formats for X.509 certificates like
.pem files or similar. It seems these formats can't be used with the
YANG module and that tools are needed to extract the pieces of data
and to ship them to the server. Perhaps usability would be higher if
the module would support upload/download of X.509 related material in
commonly used formats.

/js

-- 
Juergen Schoenwaelder           Jacobs University Bremen gGmbH
Phone: [phone]         Campus Ring 1 | 28759 Bremen | Germany
Fax:   [phone]         <https://www.jacobs-university.de/>