Re: [netconf] Updated client-server suite of drafts

[Michal Vasko <[e-mail]>]

Hi Kent,

I have looked at it and it seems fine to me, thanks. Unfortunately, 
Roman, which knows more about it and has actually implemented the 
modules is currently busy with exams and I am not sure he will have a 
chance to look at the changes before the last call ends. But I believe 
there are no more serious issues.

Regards,
Michal

On 28. 12. 2023 19:55, Kent Watsen wrote:
> All,
>
>     I just published an update for the suite of client-server drafts.
>      Please see CHANGE LOGS at bottom for details.
>
>
> Rob,
>
>     These updates primarily address your AD reviews and provided for
>     your ability to see diffs.  For ongoing “discuss” items, please
>     see my responses to your comments in the per draft AD-review email
>     threads.
>
>
> Michal, Roman,
>
>     Please review how private-keys not longer require public-keys to
>     also be specified.
>
>
> Jensen, Med,
>
>     Please note that ietf-truststore now defines typedefs and
>     groupings similar to in your alto draft.
>
>
>
> Kent // author
>
>
> CHANGE LOGS
> =============
>
> Crypto-types
>
>   * Mostly addresses AD review comments.
>   * Also addresses on-list comment regarding public-keys being
>     "mandatory true."
>   * Added note to Editor to fix line foldings.
>   * Factored 'private-key-grouping' from 'asymmetric-key-pair-grouping'.
>   * Made public-key in 'asymmetric-key-pair-grouping' be "mandatory
>     false".
>   * Renamed 'encrypted-by-choice-grouping' to 'encrypted-by-grouping'.
>
>
> Truststore
>
>   * Mostly addresses AD review comments.
>   * Also added typedefs and groupings similar to those created by Alto WG.
>   * Added note to Editor to fix line foldings.
>   * Renamed "truststore" to "central truststore" throughout.
>   * Removed "built-in" section text that overlaps with the
>     "system-config" draft.
>   * Added "certificate-ref-grouping" and "public-key-ref-grouping"
>   * Modified typedef certificate-ref's leafref path to NOT prefix
>     "certificate-bag".
>   * Modified typedef public-key-ref's leafref path to NOT prefix
>     "public-key-bag".
>   * Added groupings "certificate-ref-grouping" and
>     "public-key-ref-grouping".
>
>
> Keystore
>
>   * Addresses AD review comments.
>   * Added note to Editor to fix line foldings.
>   * Renamed "keystore" to "central keystore" throughout.
>   * Renamed "encrypted-by-choice-grouping" to "encrypted-by-grouping".
>   * Removed "public-key-format" and "public-key" nodes from examples.
>
>
> Tcp-client-server
>
>   * Addresses AD review comments.
>   * Added note to Editor to fix line foldings.
>   * Added Security Considerations text to also look a SC-section from
>     imported modules.
>   * Fixed bug: s/augment "keepalives"/refine "keepalives"/
>   * Set defaults for idle-time, max-probes, and probe-interval
>     (removed "mandatory true").
>   * Updated examples to use IETF recommended values for examples.
>
>
> Ssh-client-server
>
>   * Addresses AD review comments.
>   * Added note to Editor to fix line foldings.
>   * Introduction now more clearly identifies the "ietf-" and "iana-"
>     modules defined.
>   * Clarified that the modules, when implemented, do not define any
>     protocol-accessible nodes.
>   * Clarified that IANA may deprecate and/or obsolete identities over
>     time.
>   * Added Security Consideration for the "generate-public-key" RPC.
>   * Added Security Considerations text to also look a SC-section from
>     imported modules.
>   * Fixed private-key "must" expressions to not require public-key
>     nodes to be present.
>   * Renamed leaf from "bits" to "num-bits".
>   * Renamed leaf from "hide" to "hidden".
>   * Added container "private-key-encoding" to wrap existing choice.
>   * Removed "public-key-format" and "public-key" nodes from examples.
>
>
> Tls-client-server
>
>   * Addresses AD review comments.
>   * Added note to Editor to fix line foldings.
>   * Introduction now more clearly identifies the "ietf-" and "iana-"
>     modules defined.
>   * Clarified that the modules, when implemented, do not define any
>     protocol-accessible nodes.
>   * Clarified that IANA may deprecate and/or obsolete identities over
>     time.
>   * Added Security Consideration for the "generate-public-key" RPC.
>   * Added Security Considerations text to also look a SC-section from
>     imported modules.
>   * Added missing if-feature statements.
>   * Fixed private-key "must" expressions to not require public-key
>     nodes to be present.
>   * Fixed ident-tls12-psk and ident-tls13-psk YANG and references.
>   * Renamed leaf from "bits" to "num-bits".
>   * Added missing "ordered-by user" statement.
>   * Added container "private-key-encoding" to wrap existing choice.
>   * Renamed container "encrypt-with" to "encrypted".
>   * Renamed leaf from "hide" to "hidden".
>   * Removed "public-key-format" and "public-key" nodes from examples.
>
>
> Http-client-server
>
>   * Addresses AD review comments.
>   * Added note to Editor to fix line foldings.
>   * Removed "Conventions" section as there are no "BASE64VALUE="
>     values used in draft.
>   * Clarified that the modules, when implemented, do not define any
>     protocol-accessible nodes.
>   * Added Security Considerations text to also look a SC-section from
>     imported modules.
>   * Removed "A wrapper around the foobar parameters to avoid name
>     collisions" text.
>   * Removed "public-key-format" and "public-key" nodes from examples.
>
>
> Netconf-client-server
>
>   * Addresses AD review comments.
>   * Added note to Editor to fix line foldings.
>   * Removed netconf-client-grouping, since it was empty.
>   * Removed erronious statement "client-identity-mappings" must be
>     enabled by a "feature".
>   * Added Security Considerations text to also look a SC-section from
>     imported modules.
>   * Removed "A wrapper around the foobar parameters to avoid name
>     collisions" text.
>   * Added container "endpoints" to wrap list "endpoint".
>
> Resetconf-client-server
>
>   * Addresses AD review comments.
>   * Added note to Editor to fix line foldings.
>   * Removed "Conventions" section as there are no "BASE64VALUE="
>     values used in draft.
>   * Removed restconf-client-grouping, since it was empty.
>   * Removed erronious statement "client-identity-mappings" must be
>     enabled by a "feature".
>   * Added Security Considerations text to also look a SC-section from
>     imported modules.
>   * Removed "A wrapper around the foobar parameters to avoid name
>     collisions" text.
>   * Added container "endpoints" to wrap list "endpoint".
>   * Fixed if-feature "https-listen" to if-feature "https-call-home".
>
>