| ietf-voucher@2018-04-26.yang | sandy.yang | |||
|---|---|---|---|---|
| skipping to change at line 62 | skipping to change at line 62 | |||
| This version of this YANG module is part of RFC 8366; see the RFC | This version of this YANG module is part of RFC 8366; see the RFC | |||
| itself for full legal notices."; | itself for full legal notices."; | |||
| revision 2018-04-26 { | revision 2018-04-26 { | |||
| description | description | |||
| "Initial version"; | "Initial version"; | |||
| reference "RFC 8366: Voucher Profile for Bootstrapping Protocols"; | reference "RFC 8366: Voucher Profile for Bootstrapping Protocols"; | |||
| } | } | |||
| // Top-level statement | // Top-level statement | |||
| rc:yang-data voucher-artifact { | rc:yang-data "voucher-artifact" { | |||
| uses voucher-artifact-grouping; | uses voucher-artifact-grouping; | |||
| } | } | |||
| // Grouping defined for future augmentations | // Grouping defined for future augmentations | |||
| grouping voucher-artifact-grouping { | grouping voucher-artifact-grouping { | |||
| description | description | |||
| "Grouping to allow reuse/extensions in future work."; | "Grouping to allow reuse/extensions in future work."; | |||
| container voucher { | container voucher { | |||
| description | description | |||
| "A voucher assigns a pledge to an owner (pinned-domain-cert)."; | "A voucher assigns a pledge to an owner (pinned-domain-cert)."; | |||
| leaf created-on { | leaf created-on { | |||
| type yang:date-and-time; | type yang:date-and-time; | |||
| mandatory true; | mandatory true; | |||
| description | description | |||
| "A value indicating the date this voucher was created. This | "A value indicating the date this voucher was created. This | |||
| node is primarily for human consumption and auditing. Future | node is primarily for human consumption and auditing. Future | |||
| work MAY create verification requirements based on this | work MAY create verification requirements based on this | |||
| node."; | node."; | |||
| skipping to change at line 114 | skipping to change at line 114 | |||
| integration)."; | integration)."; | |||
| } | } | |||
| enum logged { | enum logged { | |||
| description | description | |||
| "Indicates that the voucher has been issued after | "Indicates that the voucher has been issued after | |||
| minimal verification of ownership or control. The | minimal verification of ownership or control. The | |||
| issuance has been logged for detection of | issuance has been logged for detection of | |||
| potential security issues (e.g., recipients of | potential security issues (e.g., recipients of | |||
| vouchers might verify for themselves that unexpected | vouchers might verify for themselves that unexpected | |||
| vouchers are not in the log). This is similar to | vouchers are not in the log). This is similar to | |||
| unsecured trust-on-first-use principles but with | unsecured trust-on-first-use principles but with the | |||
| the logging providing a basis for detecting unexpected | logging providing a basis for detecting unexpected | |||
| events."; | events."; | |||
| } | } | |||
| enum proximity { | enum proximity { | |||
| description | description | |||
| "Indicates that the voucher has been issued after | "Indicates that the voucher has been issued after | |||
| the MASA verified a proximity proof provided by the | the MASA verified a proximity proof provided by the | |||
| device and target domain. The issuance has been logged | device and target domain. The issuance has been logged | |||
| for detection of potential security issues. This is | for detection of potential security issues. This is | |||
| stronger than just logging, because it requires some | stronger than just logging, because it requires some | |||
| verification that the pledge and owner are | verification that the pledge and owner are | |||
| in communication but is still dependent on analysis of | in communication but is still dependent on analysis of | |||
| the logs to detect unexpected events."; | the logs to detect unexpected events."; | |||
| End of changes. 5 change blocks. | ||||
| 5 lines changed or deleted | 4 lines changed or added | |||
This html diff was produced by rfcdiff 1.41. The latest version is available from http://tools.ietf.org/tools/rfcdiff/ | ||||