Open kwatsen opened 5 years ago
Perhaps YANG Library be used for this?
This is already captured in #40.
Also see #124 and #107
Must Do: complexity: medium, bc: medium, importance: high
There are 2 types of usage
There are no conformance requirements for a registry module. This is not clear in YANG 1.1. It is unclear for a regular module if a server MUST support all identities in the module (unless if-feature).
It is unclear if a server must implement the standard identities or use their own identities that are derived from the standard identities
I don't think deviation should be used for this. A "config false" list seems better. Another idea would be to have an implicit "if-feature" on each identity, so then its a list of features (which is what I was alluding to above with the "YANG Library" comment)
This issue regards identities, which are one of the two ways that IANA-maintained modules can be implemented. The other way being by using enumerations. Both the ssh-client-server
and tis-client-server
drafts define enumerations for SSH/TLS algorithms supported. A config false
leaf-list is used to know what algorithms are supported, e.g.:
+--ro supported-algorithms {algorithm-discovery}?
+--ro supported-algorithm* tlscsa:tls-cipher-suite-algorithm
Maybe something similar for identities? capabilities
?
Juergen writes: