ietf-voucher@2018-04-26.yang   sandy.yang 
skipping to change at line 62 skipping to change at line 62
This version of this YANG module is part of RFC 8366; see the RFC This version of this YANG module is part of RFC 8366; see the RFC
itself for full legal notices."; itself for full legal notices.";
revision 2018-04-26 { revision 2018-04-26 {
description description
"Initial version"; "Initial version";
reference "RFC 8366: Voucher Profile for Bootstrapping Protocols"; reference "RFC 8366: Voucher Profile for Bootstrapping Protocols";
} }
// Top-level statement // Top-level statement
rc:yang-data voucher-artifact { rc:yang-data "voucher-artifact" {
uses voucher-artifact-grouping; uses voucher-artifact-grouping;
} }
// Grouping defined for future augmentations // Grouping defined for future augmentations
grouping voucher-artifact-grouping { grouping voucher-artifact-grouping {
description description
"Grouping to allow reuse/extensions in future work."; "Grouping to allow reuse/extensions in future work.";
container voucher { container voucher {
description description
"A voucher assigns a pledge to an owner (pinned-domain-cert)."; "A voucher assigns a pledge to an owner (pinned-domain-cert).";
leaf created-on { leaf created-on {
type yang:date-and-time; type yang:date-and-time;
mandatory true; mandatory true;
description description
"A value indicating the date this voucher was created. This "A value indicating the date this voucher was created. This
node is primarily for human consumption and auditing. Future node is primarily for human consumption and auditing. Future
work MAY create verification requirements based on this work MAY create verification requirements based on this
node."; node.";
skipping to change at line 114 skipping to change at line 114
integration)."; integration).";
} }
enum logged { enum logged {
description description
"Indicates that the voucher has been issued after "Indicates that the voucher has been issued after
minimal verification of ownership or control. The minimal verification of ownership or control. The
issuance has been logged for detection of issuance has been logged for detection of
potential security issues (e.g., recipients of potential security issues (e.g., recipients of
vouchers might verify for themselves that unexpected vouchers might verify for themselves that unexpected
vouchers are not in the log). This is similar to vouchers are not in the log). This is similar to
unsecured trust-on-first-use principles but with unsecured trust-on-first-use principles but with the
the logging providing a basis for detecting unexpected logging providing a basis for detecting unexpected
events."; events.";
} }
enum proximity { enum proximity {
description description
"Indicates that the voucher has been issued after "Indicates that the voucher has been issued after
the MASA verified a proximity proof provided by the the MASA verified a proximity proof provided by the
device and target domain. The issuance has been logged device and target domain. The issuance has been logged
for detection of potential security issues. This is for detection of potential security issues. This is
stronger than just logging, because it requires some stronger than just logging, because it requires some
verification that the pledge and owner are verification that the pledge and owner are
in communication but is still dependent on analysis of in communication but is still dependent on analysis of
the logs to detect unexpected events."; the logs to detect unexpected events.";
 End of changes. 5 change blocks. 
5 lines changed or deleted 4 lines changed or added

This html diff was produced by rfcdiff 1.41. The latest version is available from http://tools.ietf.org/tools/rfcdiff/