YANG Groupings for TLS Clients and TLS Servers
draft-ietf-netconf-tls-client-server-21

• Status
• IESG evaluation record
• IESG writeups
• Email expansions
• History

• Versions
• 00
• 01
• 02
• 03
• 04
• 05
• 06
• 07
• 08
• 09
• 10
• 11
• 12
• 13
• 14
• 15
• 16
• 17
• 18
• 19
• 20
• 21

draft-ietf-netconf-tls-client-server-21.txt:
xym 0.4.8:
Extracting 'ietf-tls-common@2020-07-10.yang'
   Removed 0 empty lines
Extracting 'ietf-tls-client@2020-07-10.yang'
   Removed 2 empty lines
Extracting 'ietf-tls-server@2020-07-10.yang'
   Removed 3 empty lines


ietf-tls-server@2020-07-10.yang:
pyang 2.3.2: pyang --verbose --ietf -p {libs} {model}:
# module search path: a/www/ietf-ftp/yang/rfcmod/:/a/www/ietf-ftp/yang/draftmod/:/a/www/ietf-ftp/yang/ianamod/:/a/www/ietf-ftp/yang/catalogmod/:.:/var/lib/wwwrun/yang/modules:/a/www/ietf-datatracker/7.12.0/env/share/yang/modules
# read ietf-tls-server@2020-07-10.yang (CL)
# read /a/www/ietf-datatracker/7.12.0/env/share/yang/modules/ietf/ietf-netconf-acm.yang
# read /a/www/ietf-ftp/yang/rfcmod/ietf-netconf-acm@2018-02-14.yang
# read /a/www/ietf-datatracker/7.12.0/env/share/yang/modules/ietf/ietf-yang-types.yang
# read /a/www/ietf-ftp/yang/draftmod/ietf-yang-types@2020-07-06.yang
# read /a/www/ietf-ftp/yang/draftmod/ietf-crypto-types@2020-07-10.yang
# read /a/www/ietf-ftp/yang/draftmod/ietf-truststore@2020-07-10.yang
# read /a/www/ietf-ftp/yang/draftmod/ietf-keystore@2020-07-10.yang
# read ietf-tls-common@2020-07-10.yang

yanglint SO 1.6.7: yanglint --verbose -p {tmplib} -p {rfclib} -p {draftlib} -p {ianalib} -p {cataloglib} {model} -i:
No validation errors


ietf-tls-common@2020-07-10.yang:
pyang 2.3.2: pyang --verbose --ietf -p {libs} {model}:
# module search path: a/www/ietf-ftp/yang/rfcmod/:/a/www/ietf-ftp/yang/draftmod/:/a/www/ietf-ftp/yang/ianamod/:/a/www/ietf-ftp/yang/catalogmod/:.:/var/lib/wwwrun/yang/modules:/a/www/ietf-datatracker/7.12.0/env/share/yang/modules
# read ietf-tls-common@2020-07-10.yang (CL)

yanglint SO 1.6.7: yanglint --verbose -p {tmplib} -p {rfclib} -p {draftlib} -p {ianalib} -p {cataloglib} {model} -i:
No validation errors


ietf-tls-client@2020-07-10.yang:
pyang 2.3.2: pyang --verbose --ietf -p {libs} {model}:
# module search path: a/www/ietf-ftp/yang/rfcmod/:/a/www/ietf-ftp/yang/draftmod/:/a/www/ietf-ftp/yang/ianamod/:/a/www/ietf-ftp/yang/catalogmod/:.:/var/lib/wwwrun/yang/modules:/a/www/ietf-datatracker/7.12.0/env/share/yang/modules
# read ietf-tls-client@2020-07-10.yang (CL)
ietf-tls-client@2020-07-10.yang:217: error: premature end of file

yanglint SO 1.6.7: yanglint --verbose -p {tmplib} -p {rfclib} -p {draftlib} -p {ianalib} -p {cataloglib} {model} -i:
err : Invalid keyword "". (/ietf-tls-client:{grouping}[tls-client-grouping])
err : Module "ietf-tls-client" parsing failed.
warn: String "local-or-keystore/local/local-definition" not freed from the dictionary, refcount 1
warn: String "string" not freed from the dictionary, refcount 1
warn: String "Adds an 'id' value when the PSK is used by TLS." not freed from the dictionary, refcount 1
warn: String "id" not freed from the dictionary, refcount 1
warn: String "The key id used in the TLS protocol for PSKs." not freed from the dictionary, refcount 1

NETCONF Working Group                                          K. Watsen
Internet-Draft                                           Watsen Networks
Intended status: Standards Track                                   G. Wu
Expires: 11 January 2021                                   Cisco Systems
                                                            10 July 2020

             YANG Groupings for TLS Clients and TLS Servers
                draft-ietf-netconf-tls-client-server-21

Abstract

   This document defines three YANG modules: the first defines groupings
   for a generic TLS client, the second defines groupings for a generic
   TLS server, and the third defines common identities and groupings
   used by both the client and the server.  It is intended that these
   groupings will be used by applications using the TLS protocol.

Editorial Note (To be removed by RFC Editor)

   This draft contains placeholder values that need to be replaced with
   finalized values at the time of publication.  This note summarizes
   all of the substitutions that are needed.  No other RFC Editor
   instructions are specified elsewhere in this document.

   Artwork in this document contains shorthand references to drafts in
   progress.  Please apply the following replacements:

   *  "AAAA" --> the assigned RFC value for draft-ietf-netconf-crypto-
      types

   *  "BBBB" --> the assigned RFC value for draft-ietf-netconf-trust-
      anchors

   *  "CCCC" --> the assigned RFC value for draft-ietf-netconf-keystore

   *  "DDDD" --> the assigned RFC value for draft-ietf-netconf-tcp-
      client-server

   *  "FFFF" --> the assigned RFC value for this draft

   Artwork in this document contains placeholder values for the date of
   publication of this draft.  Please apply the following replacement:

   *  "2020-07-10" --> the publication date of this draft

   The following Appendix section is to be removed prior to publication:

Watsen & Wu              Expires 11 January 2021                [Page 1]
Internet-Draft    Groupings for TLS Clients and Servers        July 2020

   *  Appendix A.  Change Log

Status of This Memo

   This Internet-Draft is submitted in full conformance with the
   provisions of BCP 78 and BCP 79.

   Internet-Drafts are working documents of the Internet Engineering
   Task Force (IETF).  Note that other groups may also distribute
   working documents as Internet-Drafts.  The list of current Internet-
   Drafts is at https://datatracker.ietf.org/drafts/current/.

   Internet-Drafts are draft documents valid for a maximum of six months
   and may be updated, replaced, or obsoleted by other documents at any
   time.  It is inappropriate to use Internet-Drafts as reference
   material or to cite them other than as "work in progress."

   This Internet-Draft will expire on 11 January 2021.

Copyright Notice

   Copyright (c) 2020 IETF Trust and the persons identified as the
   document authors.  All rights reserved.

   This document is subject to BCP 78 and the IETF Trust's Legal
   Provisions Relating to IETF Documents (https://trustee.ietf.org/
   license-info) in effect on the date of publication of this document.
   Please review these documents carefully, as they describe your rights
   and restrictions with respect to this document.  Code Components
   extracted from this document must include Simplified BSD License text
   as described in Section 4.e of the Trust Legal Provisions and are
   provided without warranty as described in the Simplified BSD License.

Table of Contents

   1.  Introduction  . . . . . . . . . . . . . . . . . . . . . . . .   4
     1.1.  Relation to other RFCs  . . . . . . . . . . . . . . . . .   4
     1.2.  Specification Language  . . . . . . . . . . . . . . . . .   6
     1.3.  Adherence to the NMDA . . . . . . . . . . . . . . . . . .   6
   2.  The "ietf-tls-common" Module  . . . . . . . . . . . . . . . .   6
     2.1.  Data Model Overview . . . . . . . . . . . . . . . . . . .   7
     2.2.  Example Usage . . . . . . . . . . . . . . . . . . . . . .   9
     2.3.  YANG Module . . . . . . . . . . . . . . . . . . . . . . .  10
   3.  The "ietf-tls-client" Module  . . . . . . . . . . . . . . . .  19
     3.1.  Data Model Overview . . . . . . . . . . . . . . . . . . .  19
     3.2.  Example Usage . . . . . . . . . . . . . . . . . . . . . .  21
     3.3.  YANG Module . . . . . . . . . . . . . . . . . . . . . . .  24
   4.  The "ietf-tls-server" Module  . . . . . . . . . . . . . . . .  32

Watsen & Wu              Expires 11 January 2021                [Page 2]
Internet-Draft    Groupings for TLS Clients and Servers        July 2020

     4.1.  Data Model Overview . . . . . . . . . . . . . . . . . . .  32
     4.2.  Example Usage . . . . . . . . . . . . . . . . . . . . . .  35
     4.3.  YANG Module . . . . . . . . . . . . . . . . . . . . . . .  39
   5.  Security Considerations . . . . . . . . . . . . . . . . . . .  46
     5.1.  The "ietf-tls-common" YANG Module . . . . . . . . . . . .  46