Re: [netmod] [Anima] [anima-wg/anima-brski-async-enroll] Definition of new assertion type (agent-proximity) for the voucher (#18)

Andy Bierman <andy@yumaworks.com> Thu, 17 June 2021 15:19 UTC

Return-Path: <andy@yumaworks.com>
X-Original-To: netmod@ietfa.amsl.com
Delivered-To: netmod@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 123803A237A for <netmod@ietfa.amsl.com>; Thu, 17 Jun 2021 08:19:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.886
X-Spam-Level:
X-Spam-Status: No, score=-1.886 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yumaworks-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7jhpyzyA41Dc for <netmod@ietfa.amsl.com>; Thu, 17 Jun 2021 08:19:04 -0700 (PDT)
Received: from mail-lf1-x12f.google.com (mail-lf1-x12f.google.com [IPv6:2a00:1450:4864:20::12f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 95DF83A23F5 for <netmod@ietf.org>; Thu, 17 Jun 2021 08:19:04 -0700 (PDT)
Received: by mail-lf1-x12f.google.com with SMTP id q20so11173509lfo.2 for <netmod@ietf.org>; Thu, 17 Jun 2021 08:19:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yumaworks-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=l2jIQKSxt3sN5uz6aNPP1d0m5AtsKLwMKWD88sWPli0=; b=W2c/BqjyuHXgEf7va2ucJI7FxbDpN3Y2aU1pO3lu6je8PZlyGmmy81TApOTPmuBtcl F1BWS/ExG93p7gJfzFIG1PFmE7OzNcmixjeoYcem7+qNOFJyvpJqyDchMDpGWiTq6Qzg X5oxgN7KnYK8qu1Mc/T+5jjupMeWbhwivIMHgk5N7IACdeHc9dvH7Jm2FCbYtahJ9OO/ 00MVGchDdHHbs6kaCPlkFX/Zsv0VFDOeC22kWx7QYY9Tvbl+7aOipsNkJYSHd9P33v4M RlNOTQb5n4PamaZeCxyq+LfeSYNoI6QgYt9/kIMNncfBqnk/ZFBrdd69PTG5Khe1wAq1 EIKg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=l2jIQKSxt3sN5uz6aNPP1d0m5AtsKLwMKWD88sWPli0=; b=kFYeo3KhYXJoCwNUGygzCPb8TnXCI2ItYtZh07mSJpJGsYoglQU385Z7nsBnG7lRO8 4BSstolRiFafJLLQY0RvUFnto3dwkijiNjYSK/MrDyuBm1nHqT/8jYF6B8EiMNQwP0vN /on6Je1wwjHIdZvfW4CXGY+0d/a1A2gux560iXXleyf5Wy8wbiP0Qm8k6Vlb7MqE4V20 EUvwkNZZ6pZGG7Mz6LcxL8Bi7Kx+CYXIb8sqno2tb3dhIpQZspNeK8b7MiepzPVVZ7x5 3p0+2Yowu7Pkfpr/2Uv0j4Jr/F2ltRkfTQJHP3YSD4IDQbvFk22RimUuMSXXYZxpfKLH VQ1Q==
X-Gm-Message-State: AOAM532YqZIW5o0Zvqem2vB7B089XEv09k2/kE2BIBxlWwp8P83n1H26 1NlIQY6HJy/JjSx365KWjNvrlO5emxFLa3S4gCgEzQ==
X-Google-Smtp-Source: ABdhPJwYxanHpJIe3/KwQ5YxMO2SAGQqOD6ajRZ8RVaco2ThaUYhx6KijOLZ9lGMha4hELQ/lQvVQ8VUnpAyeIGbvB0=
X-Received: by 2002:ac2:5310:: with SMTP id c16mr4350177lfh.512.1623943141860; Thu, 17 Jun 2021 08:19:01 -0700 (PDT)
MIME-Version: 1.0
References: <anima-wg/anima-brski-async-enroll/issues/18@github.com> <19872.1623779796@localhost> <0100017a16ff590b-6803346f-2ef6-4b19-88bf-3c670e32d5a0-000000@email.amazonses.com> <CABCOCHQRJB3nca36bz+gVykw5fxym7ji3GJrVMcrsW+6uUopYg@mail.gmail.com> <c8c4ea615bb2450c9a1a9fccb956909f@siemens.com>
In-Reply-To: <c8c4ea615bb2450c9a1a9fccb956909f@siemens.com>
From: Andy Bierman <andy@yumaworks.com>
Date: Thu, 17 Jun 2021 08:18:51 -0700
Message-ID: <CABCOCHRs7npz4nv3KnfHSGaDEuskPbdOSn-bjXt83r+46VEaRg@mail.gmail.com>
To: "Fries, Steffen" <steffen.fries@siemens.com>
Cc: Kent Watsen <kent+ietf@watsen.net>, Michael Richardson <mcr+ietf@sandelman.ca>, "netmod@ietf.org" <netmod@ietf.org>, "anima@ietf.org" <anima@ietf.org>, "Werner, Thomas" <thomas-werner@siemens.com>
Content-Type: multipart/alternative; boundary="0000000000001b3ae505c4f7ba6e"
Archived-At: <https://mailarchive.ietf.org/arch/msg/netmod/Lb1LKa1dlJLOhRfn41oXMkBOSuw>
Subject: Re: [netmod] [Anima] [anima-wg/anima-brski-async-enroll] Definition of new assertion type (agent-proximity) for the voucher (#18)
X-BeenThere: netmod@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NETMOD WG list <netmod.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netmod>, <mailto:netmod-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netmod/>
List-Post: <mailto:netmod@ietf.org>
List-Help: <mailto:netmod-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netmod>, <mailto:netmod-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 17 Jun 2021 15:19:09 -0000

On Thu, Jun 17, 2021 at 8:05 AM Fries, Steffen <steffen.fries@siemens.com>
wrote:

> Hi Andy,
>
>
>
> Thank you for pointing out that it will not be possible to have a straight
> forward enhancement of the enum.
>
> I have some questions to the points you raised:
>
>
>

I am not really following this specific issue.
I was just pointing out that YANG enumeration types cannot be augmented.
It is the wrong terminology, since only schema nodes can be augmented.




> *>From:* Anima anima-bounces@ietf.org *On Behalf Of *Andy Bierman
> >An enumeration type is hard-wired.
>
> Hardwired in terms of a fixed definition of values for the enum in RFC
> 8366?
>
>
>
> >No enums can be added via augmentation.
>
> That means just the definition of an additional enum value is not enough.
>
>
>
> >You have to "deviate replace" the type-stmt to add an enum externally,
>
> As I’m not too deep in YANG, could you provide more information on this
> part?  Would this be an approach to (just) redefine the type enumeration in
> the leaf “assertion” (
> https://datatracker.ietf.org/doc/html/rfc8366#page-11) and adding the new
> assertion type “agent-proximity”? Would this require to keep all enums
> already defined in RFC 8366 or could we just use the ones necessary in
> BRSKI-AE?
>
>
>

https://datatracker.ietf.org/doc/html/rfc7950#section-7.20.3



> >or you have to update the module and add the enum inline.
>
> Does this result in an update of the module “ietf-voucher” or to define a
> new module, which imports and augments the voucher by adding the new enum?
>
>
>
> Best regards
>
> Steffen
>


Andy