ietf-voucher@2018-04-26.yang | sandy.yang | |||
---|---|---|---|---|
skipping to change at line 62 | skipping to change at line 62 | |||
This version of this YANG module is part of RFC 8366; see the RFC | This version of this YANG module is part of RFC 8366; see the RFC | |||
itself for full legal notices."; | itself for full legal notices."; | |||
revision 2018-04-26 { | revision 2018-04-26 { | |||
description | description | |||
"Initial version"; | "Initial version"; | |||
reference "RFC 8366: Voucher Profile for Bootstrapping Protocols"; | reference "RFC 8366: Voucher Profile for Bootstrapping Protocols"; | |||
} | } | |||
// Top-level statement | // Top-level statement | |||
rc:yang-data voucher-artifact { | rc:yang-data "voucher-artifact" { | |||
uses voucher-artifact-grouping; | uses voucher-artifact-grouping; | |||
} | } | |||
// Grouping defined for future augmentations | // Grouping defined for future augmentations | |||
grouping voucher-artifact-grouping { | grouping voucher-artifact-grouping { | |||
description | description | |||
"Grouping to allow reuse/extensions in future work."; | "Grouping to allow reuse/extensions in future work."; | |||
container voucher { | container voucher { | |||
description | description | |||
"A voucher assigns a pledge to an owner (pinned-domain-cert)."; | "A voucher assigns a pledge to an owner (pinned-domain-cert)."; | |||
leaf created-on { | leaf created-on { | |||
type yang:date-and-time; | type yang:date-and-time; | |||
mandatory true; | mandatory true; | |||
description | description | |||
"A value indicating the date this voucher was created. This | "A value indicating the date this voucher was created. This | |||
node is primarily for human consumption and auditing. Future | node is primarily for human consumption and auditing. Future | |||
work MAY create verification requirements based on this | work MAY create verification requirements based on this | |||
node."; | node."; | |||
skipping to change at line 114 | skipping to change at line 114 | |||
integration)."; | integration)."; | |||
} | } | |||
enum logged { | enum logged { | |||
description | description | |||
"Indicates that the voucher has been issued after | "Indicates that the voucher has been issued after | |||
minimal verification of ownership or control. The | minimal verification of ownership or control. The | |||
issuance has been logged for detection of | issuance has been logged for detection of | |||
potential security issues (e.g., recipients of | potential security issues (e.g., recipients of | |||
vouchers might verify for themselves that unexpected | vouchers might verify for themselves that unexpected | |||
vouchers are not in the log). This is similar to | vouchers are not in the log). This is similar to | |||
unsecured trust-on-first-use principles but with | unsecured trust-on-first-use principles but with the | |||
the logging providing a basis for detecting unexpected | logging providing a basis for detecting unexpected | |||
events."; | events."; | |||
} | } | |||
enum proximity { | enum proximity { | |||
description | description | |||
"Indicates that the voucher has been issued after | "Indicates that the voucher has been issued after | |||
the MASA verified a proximity proof provided by the | the MASA verified a proximity proof provided by the | |||
device and target domain. The issuance has been logged | device and target domain. The issuance has been logged | |||
for detection of potential security issues. This is | for detection of potential security issues. This is | |||
stronger than just logging, because it requires some | stronger than just logging, because it requires some | |||
verification that the pledge and owner are | verification that the pledge and owner are | |||
in communication but is still dependent on analysis of | in communication but is still dependent on analysis of | |||
the logs to detect unexpected events."; | the logs to detect unexpected events."; | |||
End of changes. 5 change blocks. | ||||
5 lines changed or deleted | 4 lines changed or added | |||
This html diff was produced by rfcdiff 1.41. The latest version is available from http://tools.ietf.org/tools/rfcdiff/ |