From nobody Tue Jun 1 05:53:25 2021 Return-Path: <01000179c7a2ab19-82741952-87dd-4247-8f2f-01d3162863b6-000000@amazonses.watsen.net> X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D8F7C3A16CF for ; Tue, 1 Jun 2021 05:53:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.893 X-Spam-Level: X-Spam-Status: No, score=-1.893 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mkAkWfg5VPuH for ; Tue, 1 Jun 2021 05:53:19 -0700 (PDT) Received: from a8-83.smtp-out.amazonses.com (a8-83.smtp-out.amazonses.com [54.240.8.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1C4F3A16CE for ; Tue, 1 Jun 2021 05:53:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1622551997; h=From:Message-Id:Content-Type:Mime-Version:Subject:Date:In-Reply-To:Cc:To:References:Feedback-ID; bh=PJfaciXRuTaS+hHwtPZjRbgvslZLeWXiYHR+zmB+2O8=; b=Q8PdoNupxsKYgscimlrazisPhZtLyJGxJMExOb4AVud/7X2j3zkfidxDlHl65Lvw gNLmhpvJjzG3cuxsciQgadW0zOVjN+WuLv1prZMDydGQDyNjzMznDr1DlZNUXWL/XeA 3h8E4/R6FL/ZgYwx/DQhg/8IwV++xn//vLS6W8/w= From: Kent Watsen Message-ID: <01000179c7a2ab19-82741952-87dd-4247-8f2f-01d3162863b6-000000@email.amazonses.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_0F1D7EDD-3B06-40D9-8336-1AA81FF444FD" Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.60.0.2.21\)) Date: Tue, 1 Jun 2021 12:53:17 +0000 In-Reply-To: Cc: "netconf@ietf.org" To: Andy Bierman References: X-Mailer: Apple Mail (2.3654.60.0.2.21) Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES X-SES-Outgoing: 2021.06.01-54.240.8.83 Archived-At: Subject: Re: [netconf] Should Partial Lock be deprecated? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Jun 2021 12:53:24 -0000 --Apple-Mail=_0F1D7EDD-3B06-40D9-8336-1AA81FF444FD Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi Andy, > I bet some do not remember we have this RFC > https://datatracker.ietf.org/doc/html/rfc5717 = > (So old there is a normative XSD and non-normative YANG module). >=20 > I have not seen this RFC used in several years. > Is anyone using it?=20 > Should it be deprecated? > Just curious. As a contributor, I have never been a fan of this RFC. Significant = complexity for a weak use case. Regarding the use case, my limited perspective is that rarely does more = than one client access a server at a time (esp. when an NMS/orchestrator = is in play) and, when it does occur, the access is typically for a brief = amount of time, such that having a second client wait doesn=E2=80=99t = seem a big deal. Applications vary, of course, with some (multi-tenant app, socials, = etc.) being all about simultaneous access. To the extent these apps = desire YANG-driven interfaces, I much prefer RESTCONF=E2=80=99s If-Match = mechanism and would recommend porting it to NETCONF. > Andy K. --Apple-Mail=_0F1D7EDD-3B06-40D9-8336-1AA81FF444FD Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
Hi Andy,

I bet some do not remember we have this RFC
https://datatracker.ietf.org/doc/html/rfc5717
(So old there is a normative XSD = and non-normative YANG module).

I have not seen this RFC used in = several years.
Is anyone using it? 
Should it be deprecated?
Just = curious.

As a contributor, I have = never been a fan of this RFC.  Significant complexity for a weak = use case.

Regarding the use case, my limited perspective is that rarely = does more than one client access a server at a time (esp. when an = NMS/orchestrator is in play) and, when it does occur, the access is = typically for a brief amount of time, such that having a second client = wait doesn=E2=80=99t seem a big deal.

Applications vary, of course, with some (multi-tenant app, socials, etc.) being all about = simultaneous access.  To the extent these apps desire YANG-driven = interfaces, I much prefer RESTCONF=E2=80=99s If-Match mechanism and = would recommend porting it to NETCONF.


Andy

K.

= --Apple-Mail=_0F1D7EDD-3B06-40D9-8336-1AA81FF444FD-- From nobody Tue Jun 1 06:32:51 2021 Return-Path: <01000179c7c6cbb2-c8799849-e799-4126-81d2-d5384d2b1251-000000@amazonses.watsen.net> X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3A1AF3A1839 for ; Tue, 1 Jun 2021 06:32:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l5zRS2vLfl-w for ; Tue, 1 Jun 2021 06:32:46 -0700 (PDT) Received: from a8-31.smtp-out.amazonses.com (a8-31.smtp-out.amazonses.com [54.240.8.31]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6D5DA3A1838 for ; Tue, 1 Jun 2021 06:32:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1622554365; h=From:Message-Id:Content-Type:Mime-Version:Subject:Date:In-Reply-To:Cc:To:References:Feedback-ID; bh=u+4kE0chOk5njfLdbiR5gzlE9CVYWj8XZ7UFsWjlIRE=; b=cD54BJb7ecm0SH2EE2QB928FNqCO+Yp8wO6w7xTb/T0CspKcirhoILUwY3bbEwy1 QW8SVjkL3rbnciKkM1Exq/1EDqOBXFre7jOlIGas3a1x+YreX7gVKFQqAczq+lqmLfH 4iz0Z+5e7MjtTKWv26X3pT2Bo0ohAfmv1wCsE97Q= From: Kent Watsen Message-ID: <01000179c7c6cbb2-c8799849-e799-4126-81d2-d5384d2b1251-000000@email.amazonses.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_06936F18-ACA0-40EA-ABE3-F92DC70AC3D3" Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.60.0.2.21\)) Date: Tue, 1 Jun 2021 13:32:44 +0000 In-Reply-To: Cc: "netconf@ietf.org" To: Andy Bierman References: <162197056513.1767.16350161534776831688@ietfa.amsl.com> <01000179af378d51-c0a96433-9313-4b0d-bf3f-0a8f54be4852-000000@email.amazonses.com> X-Mailer: Apple Mail (2.3654.60.0.2.21) Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES X-SES-Outgoing: 2021.06.01-54.240.8.31 Archived-At: Subject: Re: [netconf] [Last-Call] Yangdoctors last call review of draft-ietf-netconf-tls-client-server-24 X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Jun 2021 13:32:50 -0000 --Apple-Mail=_06936F18-ACA0-40EA-ABE3-F92DC70AC3D3 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi Andy, > > 2) mandatory choice of only optional-to-implement cases > >=20 > > The choice /ietf-tls-client:client-identity/auth-type > > is mandatory but all cases have if-feature-stmts. > > Does draft mention 1 of the 4 features MUST be implemented? >=20 >=20 >=20 > The same construct is present in the ietf-tls-server module as = well...I=E2=80=99ll apply the agreed upon solution to both. Would the = following update suffice? >=20 > OLD: >=20 > choice auth-type { > mandatory true; > description > "A choice amongst authentication types.=E2=80=9D; >=20 > NEW: >=20 > choice auth-type { > mandatory true; > description > "A choice amongst authentication types, of which one must > be enabled (via its associated 'feature') and selected.=E2=80= =9D; >=20 >=20 >=20 >=20 > Related issue: >=20 > What is a server supposed to do if it is implementing a module with > a configuration that has a mandatory choice but no enabled or defined = cases?=20 >=20 > A) add a deviation to remove the mandatory-stmt > B) always return a data-missing error and block the edit or commit > C) ignore the error and treat it as a NO-OP > D) something else? My server doesn=E2=80=99t detect the logical fallacy at startup but, of = course, will fail any configuration attempt due to a validation error. The assumption is that implementations will choose which features to = support in the course of development. =46rom the perspective of a toolkit like YumaPro, where end-users = selectively enable features themselves, the two choices I see are: 1) no = special logic, as they=E2=80=99ll discover the validation error soon = enough or, 2) add special logic to catch the logical fallacy and fail = startup until resolved. > Andy K. --Apple-Mail=_06936F18-ACA0-40EA-ABE3-F92DC70AC3D3 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hi = Andy,


> 2)  mandatory choice of only = optional-to-implement cases
> 
> The = choice /ietf-tls-client:client-identity/auth-type
> is = mandatory but all cases have if-feature-stmts.
> Does = draft mention 1 of the 4 features MUST be implemented?



The same construct is present = in the ietf-tls-server module as well...I=E2=80=99ll apply the agreed = upon solution to both.  Would the following update suffice?

OLD:

  =     choice = auth-type {
        mandatory true;
        description
          "A choice amongst = authentication types.=E2=80=9D;

NEW:

      choice auth-type {
        mandatory true;
        description
          "A choice amongst = authentication types, of which one must
    =        be enabled (via its associated 'feature') and = selected.=E2=80=9D;




Related issue:

What = is a server supposed to do if it is implementing a module with
a = configuration that has a mandatory choice but no enabled or defined = cases? 

A) add a deviation to remove the = mandatory-stmt
B) always return a data-missing error = and block the edit or commit
C) ignore the error and treat it as a = NO-OP
D) something else?

My server doesn=E2=80=99t detect the logical = fallacy at startup but, of course, will fail any configuration attempt = due to a validation error.

The = assumption is that implementations will choose which features to = support in the course of development.

=46rom = the perspective of a toolkit like YumaPro, where end-users selectively = enable features themselves, the two choices I see are: 1) no special = logic, as they=E2=80=99ll discover the validation error soon enough or, = 2) add special logic to catch the logical = fallacy and fail startup = until resolved.


Andy

K.



= --Apple-Mail=_06936F18-ACA0-40EA-ABE3-F92DC70AC3D3-- From nobody Tue Jun 1 10:15:46 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0ED533A20A1 for ; Tue, 1 Jun 2021 10:15:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.886 X-Spam-Level: X-Spam-Status: No, score=-1.886 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yumaworks-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LgGccWiN7pfN for ; Tue, 1 Jun 2021 10:15:40 -0700 (PDT) Received: from mail-lj1-x231.google.com (mail-lj1-x231.google.com [IPv6:2a00:1450:4864:20::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 18A643A209E for ; Tue, 1 Jun 2021 10:15:39 -0700 (PDT) Received: by mail-lj1-x231.google.com with SMTP id bn21so12985060ljb.1 for ; Tue, 01 Jun 2021 10:15:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yumaworks-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=BKNq13EewCX9UqfVXFJ4zrKmF8zFog1ieBgORDnq5+o=; b=TFIx9mc1Mi5w9CLZRjFqo5+iIBZhv4Ejpxre+/Ntt/Rr9vogYkGShzLhE4Xf/hQEOX jd6VEc7u8qOj9RCL9AxPesfhj+8n2Dw5YQoIBpdoYyNkYkxuX7Pu3US/Tw8UiKUd3kz/ zpqIcQn+5TcSrKccoW1JJZtq4O0hthtbvzT8FsGy/7dpnMTRsbnI8C5fw22dpRsQYoAF 0XWlN2/aB5rJS6bKdihRuKeakV5t8dyU7UDksoUxLk5/PaO6LvwnTkHDWt9akURfk7/o 3wd1N8WRIAnA/pbvv3fkrC2GtoW6r21gVv/r6fojlJwxI0wef6eF8gy1N4r4Hu9RCW+x 0JDw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=BKNq13EewCX9UqfVXFJ4zrKmF8zFog1ieBgORDnq5+o=; b=Sh5+mcFbj8foTGI/7peY+MKoosrB1KBban8sqgFkvlIGGrLy42QzrHSkdD+StlN/1U N4SNFDgMU/GGtESKcT5JhxbnUK9MaS3Q0QpU/lybdJeGi9+OP36fzAmn9CuF24/k4Lza l9WlFe2yG0mIEbaGImxkatpedAjTuM+E73saeqoCP/qCU9u9VcCzk4kLdAOd2y6ILC9H w7mfK3TkYjaZm2c/I3FyiRPWAJWT+DFezMG/q/bNh3D9CL3T6Cfj02hXUz9N2XhxlB4D hsJBoFGDQEuCE3Xy1V2SsiWKPRTE7V4hY6F1QQTrnVTitUHhTSDgbSzqvInPVISnh6o6 rXrw== X-Gm-Message-State: AOAM5337+thzmRXU11szFLzgWfASx0CEEUqGNPNC2yV6hXjLntfJm2TU 3PtGFxJW6aoMQfCMU1NcLf14M/Z39mkczCADudImmw== X-Google-Smtp-Source: ABdhPJwioY+R2Rb6VH//i9w1sktzugQQrsE+pIPC4xTSpSQUlDOPDF2YSgWI4OPEKE1+Bzp0Ei9ywbqgyyLWJI1hm/w= X-Received: by 2002:a05:651c:502:: with SMTP id o2mr21690370ljp.105.1622567737156; Tue, 01 Jun 2021 10:15:37 -0700 (PDT) MIME-Version: 1.0 References: <162197056513.1767.16350161534776831688@ietfa.amsl.com> <01000179af378d51-c0a96433-9313-4b0d-bf3f-0a8f54be4852-000000@email.amazonses.com> <01000179c7c6cbb2-c8799849-e799-4126-81d2-d5384d2b1251-000000@email.amazonses.com> In-Reply-To: <01000179c7c6cbb2-c8799849-e799-4126-81d2-d5384d2b1251-000000@email.amazonses.com> From: Andy Bierman Date: Tue, 1 Jun 2021 10:15:26 -0700 Message-ID: To: Kent Watsen Cc: "netconf@ietf.org" Content-Type: multipart/alternative; boundary="00000000000098f8b405c3b77d73" Archived-At: Subject: Re: [netconf] [Last-Call] Yangdoctors last call review of draft-ietf-netconf-tls-client-server-24 X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Jun 2021 17:15:45 -0000 --00000000000098f8b405c3b77d73 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Tue, Jun 1, 2021 at 6:32 AM Kent Watsen wrote: > Hi Andy, > > > > 2) mandatory choice of only optional-to-implement cases >> > >> > The choice /ietf-tls-client:client-identity/auth-type >> > is mandatory but all cases have if-feature-stmts. >> > Does draft mention 1 of the 4 features MUST be implemented? >> >> >> >> The same construct is present in the ietf-tls-server module as >> well...I=E2=80=99ll apply the agreed upon solution to both. Would the f= ollowing >> update suffice? >> >> OLD: >> >> choice auth-type { >> mandatory true; >> description >> "A choice amongst authentication types.=E2=80=9D; >> >> NEW: >> >> choice auth-type { >> mandatory true; >> description >> "A choice amongst authentication types, of which one must >> be enabled (via its associated 'feature') and selected.=E2=80= =9D; >> >> >> > > Related issue: > > What is a server supposed to do if it is implementing a module with > a configuration that has a mandatory choice but no enabled or defined > cases? > > A) add a deviation to remove the mandatory-stmt > B) always return a data-missing error and block the edit or commit > C) ignore the error and treat it as a NO-OP > D) something else? > > > My server doesn=E2=80=99t detect the logical fallacy at startup but, of c= ourse, > will fail any configuration attempt due to a validation error. > > The assumption is that implementations will choose which features to > support in the course of development. > > From the perspective of a toolkit like YumaPro, where end-users > selectively enable features themselves, the two choices I see are: 1) no > special logic, as they=E2=80=99ll discover the validation error soon enou= gh or, 2) > add special logic to catch the logical fallacy and fail startup until > resolved. > > I see your point. A developer should never ship a server that would have this issue. YANG developers need to be careful about defining choice-stmts with no enabled case-stmts. This is a fairly common practice (e.g. relying on augment from another module to provide the case-stmts). >From the client developer POV, it is bad to assume the augmenting module(s) will be present. (This is a use-case for YANG packages I guess). > Andy > > Andy > > K. > > > > --00000000000098f8b405c3b77d73 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


=
On Tue, Jun 1, 2021 at 6:32 AM Kent W= atsen <kent+ietf@watsen.net> wrote:
Hi Andy,


> 2)=C2=A0 mandatory choice of only optional-to-implement c= ases
>=C2=A0
> The choice /ietf-tls-client:client-= identity/auth-type
> is mandatory but all cases have if-feature-stmts= .
> Does draft mention 1 of the 4 features MUST be implemented?


The same construct is present in the ietf-tls-server module as we= ll...I=E2=80=99ll apply the agreed upon solution to both.=C2=A0 Would the f= ollowing update suffice?

OLD:

=C2=A0 =C2=A0 =C2=A0=C2= =A0choice auth-type {
=C2=A0 =C2=A0 =C2=A0 =C2=A0=C2=A0mandatory true;
=C2=A0 =C2=A0 =C2=A0 =C2=A0=C2=A0descrip= tion
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=C2=A0"A choice= amongst authentication types.=E2=80=9D;

NEW:

=C2=A0 =C2=A0 = =C2=A0=C2=A0choice auth-type {
=C2=A0 =C2=A0 =C2=A0 =C2=A0<= span>=C2=A0mandatory true;
=C2=A0 =C2=A0 =C2=A0 =C2=A0=C2= =A0description
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=C2=A0"A choice amongst authentication types, of which one must
=C2=A0= =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0be enabled (via its associated 'feat= ure') and selected.=E2=80=9D;




Related i= ssue:

What is a se= rver supposed to do if it is implementing a module with
a configuration that has a mandatory choice but no enabled or define= d cases?=C2=A0

A) = add a deviation to remove the mandatory-stmt
B) a= lways return a data-missing error and block the edit or=C2=A0commit
C) ignore the error and treat it as a NO-OP
D) something else?

My server doesn=E2=80=99t detect the logical fallacy at startup but, of c= ourse, will fail any configuration attempt due to a validation error.
=

The assumption is that implementations will choose whic= h features to support=C2=A0in the course o= f development.

From the perspective of a toolkit like = YumaPro, where end-users selectively enable features themselves, the two ch= oices I see are: 1) no special logic, as they=E2=80=99ll discover the valid= ation error soon enough or, 2) add special logic to catch the=C2=A0<= span style=3D"color:rgb(0,0,0)">logical fallacy=C2=A0and fail startup until resolved.


I see your point.
A developer should never ship a server that wo= uld have this issue.

YANG developers need to be ca= reful about defining choice-stmts with no enabled case-stmts.
Thi= s is a fairly common practice (e.g. relying on augment from another module = to provide the case-stmts).
From the client developer POV, it is = bad to assume the augmenting module(s) will be present.
(This is = a use-case for YANG packages I guess).


<= div>
Andy

Andy
=C2=A0

K.

<= br>

--00000000000098f8b405c3b77d73-- From nobody Tue Jun 1 11:37:02 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 389823A211C for ; Tue, 1 Jun 2021 11:37:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.097 X-Spam-Level: X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ynAixI6cwBaF for ; Tue, 1 Jun 2021 11:36:58 -0700 (PDT) Received: from mail-pl1-x631.google.com (mail-pl1-x631.google.com [IPv6:2607:f8b0:4864:20::631]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7A1513A208D for ; Tue, 1 Jun 2021 11:36:58 -0700 (PDT) Received: by mail-pl1-x631.google.com with SMTP id x10so6445630plg.3 for ; Tue, 01 Jun 2021 11:36:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:mime-version:subject:message-id:date:to; bh=5MUYSPntJMIMQknexrl9mU0nk+5dh1BwRM3pGpgKRNE=; b=VcIyHstSIbJa5CVQnFoBJZBSthxMSv/GsIVV9/H5PTH0NMb6FBL1oYvKYfvuugmeUs Up/gDuYc8c+KZLAfQjNOR4YY71r2P8IX5J8Jg6w+2uNXYNAJPObDvxXZm/KR/ndWEwsl 7MACsERqP/YtsBFLj4VYu1sRj0CRgYBU+F8qjWxyalb3Y769KlsJSVNuk+wvCaHgtrFI SUUK1uIRx6ghIiFENowJ+N4SbBaw1NHn93Kb4JOoXtEgEQYvYBE29er0gWNjpq+2b0MJ B5+YaKozNf6SvIZVxnt69r5oJV5RTlEOai2/Oaq6FPbCdJ4AAkJeT9AEv4Oq7olS1OPX CKWg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:mime-version:subject:message-id:date:to; bh=5MUYSPntJMIMQknexrl9mU0nk+5dh1BwRM3pGpgKRNE=; b=AqQPYYwe5YH02WzIBT7p+p2SdoQ7lBgJRmXBR8ExP5GYWRVivWwHhOxQITnWcL846x HjYLTOxMI8U8u6xrl4GZHYCcuSblLeDz4hdjvb4x7v6l/rk4/ns5ntUimENi4Ypna2qp AcMyp4qq7pjqWi+G25W9SISvhdk6LSss6e3YI11D7WajBjrqCp7hYr/BxqN7StwFYzQW xu1ZN7Pm63izp8eDmfJYsECgZFabkz9JuEFijX9prlCsW9EF7VHwJT1cwxS0fjSx6a7g gN6prq72FTqJp9NY/LJMW/gtM7WwLDGh6WaVjimZ7oQ6Xdbvbqopbp33rBhCh7n+ope+ JWaA== X-Gm-Message-State: AOAM530Hg+liaKtMaUZlw5kGLYFsHuyvg4xBTOHecDRAlx4g8PXiAbx4 FOWl2ZimJ9kF4BckPJgZdGfjPrFIUwCeoQ== X-Google-Smtp-Source: ABdhPJyJKeNphb2jr2xqZDdyMMABUNGKzfNb+rHXsvKwMCNb/k9F/PZ3R8/BZ4xO6NEpgGkQgQ3v6A== X-Received: by 2002:a17:90a:88e:: with SMTP id v14mr1247083pjc.83.1622572616986; Tue, 01 Jun 2021 11:36:56 -0700 (PDT) Received: from smtpclient.apple ([2601:647:5600:5020:ed5e:5079:97d0:c61c]) by smtp.gmail.com with ESMTPSA id w74sm13895624pfd.209.2021.06.01.11.36.56 for (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Tue, 01 Jun 2021 11:36:56 -0700 (PDT) From: Mahesh Jethanandani Content-Type: multipart/alternative; boundary="Apple-Mail=_A96BB022-D8DF-495D-BAE1-3A106098D94E" Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.100.0.2.22\)) Message-Id: <21A8520E-2573-494C-92BF-1A07137364C9@gmail.com> Date: Tue, 1 Jun 2021 11:36:54 -0700 To: Netconf X-Mailer: Apple Mail (2.3654.100.0.2.22) Archived-At: Subject: [netconf] Any implementations of draft-ietf-netconf-sztp-csr draft X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Jun 2021 18:37:00 -0000 --Apple-Mail=_A96BB022-D8DF-495D-BAE1-3A106098D94E Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi WG, One of the questions during the WGLC that I forgot to ask is related to = whether there are any implementations of draft-ietf-netconf-sztp-csr = (any version) or have plans to implement them.=20 Thanks. Mahesh Jethanandani (co-chair NETCONF WG) mjethanandani@gmail.com --Apple-Mail=_A96BB022-D8DF-495D-BAE1-3A106098D94E Content-Transfer-Encoding: 7bit Content-Type: text/html; charset=us-ascii
Hi WG,

One of the questions during the WGLC that I forgot to ask is related to whether there are any implementations of draft-ietf-netconf-sztp-csr (any version) or have plans to implement them. 

 --Apple-Mail=_A96BB022-D8DF-495D-BAE1-3A106098D94E-- From nobody Tue Jun 1 13:36:20 2021 Return-Path: <01000179c94a7d4f-19ec69ad-249d-4fb8-b554-14f92c531a3a-000000@amazonses.watsen.net> X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D44E3A268B for ; Tue, 1 Jun 2021 13:36:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.894 X-Spam-Level: X-Spam-Status: No, score=-1.894 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0_ciPuefgAjp for ; Tue, 1 Jun 2021 13:36:14 -0700 (PDT) Received: from a48-95.smtp-out.amazonses.com (a48-95.smtp-out.amazonses.com [54.240.48.95]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3E2853A268A for ; Tue, 1 Jun 2021 13:36:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1622579773; h=From:Message-Id:Content-Type:Mime-Version:Subject:Date:In-Reply-To:Cc:To:References:Feedback-ID; bh=U4WK2hMAgNa/usz3W7Zz/qM6ocMVXgbmp/Pg7NyCAPk=; b=KYK3L3GBogkc6SUqFXufALpABkXTCQ7a8aBKmnVGpDI/hGxMTo+B+w5YInxwwf/i m6yN8z4HTGxTO+Z4W2LRJ/jwebzBzpDNnzg5uMwo0TOqDDLbYgiyiwaU8dtCgQ7h3XI X1V9sxOkyU0tpzqS9eCLpLrAdi3EY7vQuOV57ooo= From: Kent Watsen Message-ID: <01000179c94a7d4f-19ec69ad-249d-4fb8-b554-14f92c531a3a-000000@email.amazonses.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_ACCAF183-9FB8-46AF-94C4-B5F635901A74" Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.60.0.2.21\)) Date: Tue, 1 Jun 2021 20:36:12 +0000 In-Reply-To: <21A8520E-2573-494C-92BF-1A07137364C9@gmail.com> Cc: "netconf@ietf.org" , Russ Housley , Sean Turner To: Mahesh Jethanandani References: <21A8520E-2573-494C-92BF-1A07137364C9@gmail.com> X-Mailer: Apple Mail (2.3654.60.0.2.21) Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES X-SES-Outgoing: 2021.06.01-54.240.48.95 Archived-At: Subject: Re: [netconf] Any implementations of draft-ietf-netconf-sztp-csr draft X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Jun 2021 20:36:19 -0000 --Apple-Mail=_ACCAF183-9FB8-46AF-94C4-B5F635901A74 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 [CC-ing co-authors] Watsen Networks implemented it in its =E2=80=9CSZTPD=E2=80=9D product. K. > On Jun 1, 2021, at 2:36 PM, Mahesh Jethanandani = wrote: >=20 > Hi WG, >=20 > One of the questions during the WGLC that I forgot to ask is related = to whether there are any implementations of draft-ietf-netconf-sztp-csr = (any version) or have plans to implement them.=20 >=20 > Thanks. >=20 > Mahesh Jethanandani (co-chair NETCONF WG) > mjethanandani@gmail.com >=20 >=20 >=20 >=20 >=20 > _______________________________________________ > netconf mailing list > netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf --Apple-Mail=_ACCAF183-9FB8-46AF-94C4-B5F635901A74 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 [CC-ing co-authors]

Watsen Networks implemented it in its =E2=80=9CSZTPD=E2=80=9D = product.

K.



On Jun 1, 2021, at 2:36 PM, Mahesh = Jethanandani <mjethanandani@gmail.com> wrote:

Hi = WG,

One of the questions = during the WGLC that I forgot to ask is related to whether there are any = implementations of draft-ietf-netconf-sztp-csr (any version) or have = plans to implement them. 

Thanks.

Mahesh Jethanandani = (co-chair NETCONF WG)
mjethanandani@gmail.com





_____________________________________________= __
netconf mailing list
netconf@ietf.org
https://www.ietf.org/mailman/listinfo/netconf

= --Apple-Mail=_ACCAF183-9FB8-46AF-94C4-B5F635901A74-- From nobody Tue Jun 1 15:43:49 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 15A9F3A2A32 for ; Tue, 1 Jun 2021 15:43:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.097 X-Spam-Level: X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7p3whWkXg4Ki for ; Tue, 1 Jun 2021 15:43:42 -0700 (PDT) Received: from mail-pl1-x62a.google.com (mail-pl1-x62a.google.com [IPv6:2607:f8b0:4864:20::62a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B4D373A2A30 for ; Tue, 1 Jun 2021 15:43:42 -0700 (PDT) Received: by mail-pl1-x62a.google.com with SMTP id c13so107771plz.0 for ; Tue, 01 Jun 2021 15:43:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=4SivZjQQXSPr3BGmfIG5dTbePjjN3/QHU4q8weQpzv8=; b=gTqiI9k6YVVrjVSHzW1twVNzQwRvAJUFVsaTEmg5p+YMmty5AVxcIIcQ+lB0eA8Vox gPoWw8YzK8aRsxxxl0vL8w1QFw/241/xOmchrB+/2Zp1+M63HBdIlwjmOD3mQ0YFYNv2 HTjmrzuM/JiwHnmhgFm4BUJbXtaJWpLN6E/fylkFGwa7W/+gOXZhOCceotLCQQGgVE3P jt4Xr9O4vdsCmQzKZ+QW4BLZ3SLaYnlRhvUOEtESQBhi14CPPQzZp8Z18WCejPLS/lL4 Btf3CbL7cj0OYDkCuANBtTtufIQGUhYBoahMDHZFsGUYxktnXxkp31DO57QBF8WJp7rD zSiA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=4SivZjQQXSPr3BGmfIG5dTbePjjN3/QHU4q8weQpzv8=; b=SZw+sGJMT7sZ8YdFFpL02VMuTGpJgueK5N/LYV8P9jov3lIduRfmRuPLPSy24FC6ah jOljbVn/+XkIUd/lLrBIp9j2i9a/zsa8rBWrNr2QE6cprxIep99FFXvHA9QY6LGxARvv BbWziaRpc8djVnZOuuUA5CXE0rv9TXS9aFUxfH6kID0GDzBC1UWNwz1gwqgETJYNArK9 NJPBcAlsMVhRXRih8LVuD7tbS4tRrlJZkJrBPll3nhS8ZPjc46qDXnfsLk4IiWthND91 SvSbfLoyWK3quqJruZ7LoX/+/+YilPITuD/vH5KWuhhRAqMfKszcfASSZaQ2N0cVUU41 Wu1Q== X-Gm-Message-State: AOAM531sMrg6stMly5SYzddl4kkUXTL5ImDsT7Gi8NqjZMx9i8g5blGG LWY3UIAHzBgPg+Jc0MaEUlG+bCokTsbVHg== X-Google-Smtp-Source: ABdhPJyHI0cxXmyWsqS0mbwO++tCuTZFVIaqUHhdr59YrMhUewXqTobvmACUlhZKFHD0PDH4vI67BQ== X-Received: by 2002:a17:90b:1d8a:: with SMTP id pf10mr27649070pjb.53.1622587421226; Tue, 01 Jun 2021 15:43:41 -0700 (PDT) Received: from smtpclient.apple ([2601:647:5600:5020:14c1:fda:26ed:c601]) by smtp.gmail.com with ESMTPSA id k7sm2915969pjj.46.2021.06.01.15.43.40 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Tue, 01 Jun 2021 15:43:40 -0700 (PDT) From: Mahesh Jethanandani Message-Id: <3F555FC1-F19E-4BAB-A23A-AA70A935BFBB@gmail.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_51E80E50-02EB-4801-B35F-B8C65C84494A" Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.100.0.2.22\)) Date: Tue, 1 Jun 2021 15:43:38 -0700 In-Reply-To: Cc: Kent Watsen , "netconf@ietf.org" To: Qin Wu References: X-Mailer: Apple Mail (2.3654.100.0.2.22) Archived-At: Subject: Re: [netconf] Capability-fetching mechanisms X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Jun 2021 22:43:47 -0000 --Apple-Mail=_51E80E50-02EB-4801-B35F-B8C65C84494A Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 [Trimming down the e-mail to open topics] Hi Qin, See inline with [mj1] > On May 18, 2021, at 4:40 AM, Qin Wu wrote: >=20 > Hi, Mahesh: > =20 >=20 > The question is whether the receiver needs to be a NETCONF/RESTCONF = server. As maqiufang wrote in his response, if the receiver supports the = data-export-capabilities draft, then it would need to be a = NETCONF/RESTCONF server, whereas with the https-notif draft that is not = the case. This is the case whether the receiver supports RFC 8639 or = not. > [Qin]:My understanding is data-export-capabilities doesn=E2=80=99t = require receiver to be tied with NETCONF/RESTCONF server. I assume the = management system (i.e., receiver) and network device (i.e., publisher) = can use HTTPS to exchange advertised data. > In addition, Maybe what is missing in the data-export-capabilities = draft is to define RPC to allow the publisher get capability from = receiver through HTTPS channel, similar to what is = get-bootstrapping-data RPC defined in RFC8572. [mj1] Stipulating a HTTPs channel works for the HTTPS notif draft. But = what will other transport type drafts use? e.g. the UDP notif draft??=20 > =20 > Please note that RFC 8639 receivers do not have to be NETCONF/RESTCONF = servers for configured subscriptions. RFC 8639, Section 2.7 defines the = control messages such as using one-way YANG = =E2=80=9Cnotification=E2=80=9D statements. > =20 > [Qin]: Understand this case, Do you think we should define a new = notification in the data-export-capabilities draft instead of = considering to define RPC? [mj1] I do not understand this statement. Can you expand? Mahesh Jethanandani mjethanandani@gmail.com --Apple-Mail=_51E80E50-02EB-4801-B35F-B8C65C84494A Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
[Trimming down the e-mail to open topics]

Hi Qin,

See inline with [mj1]

On May 18, 2021, at 4:40 AM, Qin Wu <bill.wu@huawei.com> = wrote:

Hi, Mahesh:
 

The question is whether the = receiver needs to be a NETCONF/RESTCONF server. As maqiufang wrote in = his response, if the receiver supports the data-export-capabilities = draft, then it would need to be a NETCONF/RESTCONF server, whereas with = the https-notif draft that is not the case. This is the case whether the = receiver supports RFC 8639 or not.
[Qin]:My understanding is data-export-capabilities doesn=E2=80=99= t require receiver to be tied with NETCONF/RESTCONF server. I assume the = management system (i.e., receiver) and network device (i.e., publisher) = can use HTTPS to exchange advertised data.
In =
addition, Maybe what is missing in the data-export-capabilities draft is =
to define RPC to allow the publisher get capability from receiver =
through HTTPS channel, similar to what is get-bootstrapping-data RPC =
defined in RFC8572.

[mj1] Stipulating a HTTPs channel works for the HTTPS = notif draft. But what will other transport type drafts use? e.g. the UDP = notif draft?? 

 
Please = note that RFC 8639 receivers do not have to be NETCONF/RESTCONF servers = for configured subscriptions. RFC 8639, Section 2.7 defines the control = messages such as <subscription-started> using one-way YANG = =E2=80=9Cnotification=E2=80=9D statements.
 
[Qin]: Understand this case, Do you think we should define a = new notification in the data-export-capabilities draft instead of = considering to define = RPC?

[mj1] I do not understand this statement. Can you = expand?

<= br class=3D"">
Mahesh Jethanandani
mjethanandani@gmail.com





= --Apple-Mail=_51E80E50-02EB-4801-B35F-B8C65C84494A-- From nobody Tue Jun 1 15:55:05 2021 Return-Path: <01000179c9c98396-98e37454-f6bd-4753-92a4-0c8911d102d9-000000@amazonses.watsen.net> X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D8DFB3A2A88 for ; Tue, 1 Jun 2021 15:55:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.887 X-Spam-Level: X-Spam-Status: No, score=-1.887 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_NONE=0.001, T_SPF_HELO_TEMPERROR=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FyqxwRI_mjjz for ; Tue, 1 Jun 2021 15:54:59 -0700 (PDT) Received: from a48-92.smtp-out.amazonses.com (a48-92.smtp-out.amazonses.com [54.240.48.92]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E79ED3A2A85 for ; Tue, 1 Jun 2021 15:54:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1622588097; h=Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc:Content-Transfer-Encoding:Message-Id:References:To:Feedback-ID; bh=FSGPzg1t3s3L+gq9XxSoUbXPBZwTrEw3hWugDEOYOlA=; b=WiHGf6B2sHrwymYBUyKw6uGImgelRC5OBQC5qxtop+7+BZoDh1zPb7LbsN1uOTE2 xR5uXH4+45dYfo3etxj3FZMP/6f5Bpb69FlwgCbRdHTks7U1JU1zW0BWzXRBInB715c jEhWyB1hucoCfQhpERVMLnivJ7Eu/PntRhmMdac4= Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.60.0.2.21\)) From: Kent Watsen In-Reply-To: Date: Tue, 1 Jun 2021 22:54:57 +0000 Cc: "netconf@ietf.org" Content-Transfer-Encoding: quoted-printable Message-ID: <01000179c9c98396-98e37454-f6bd-4753-92a4-0c8911d102d9-000000@email.amazonses.com> References: <162197047222.6755.5719177112947542346@ietfa.amsl.com> <01000179af378320-73241cbb-c5a4-45dd-8c87-03ff603cc2f0-000000@email.amazonses.com> To: Andy Bierman X-Mailer: Apple Mail (2.3654.60.0.2.21) Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES X-SES-Outgoing: 2021.06.01-54.240.48.92 Archived-At: Subject: Re: [netconf] [Last-Call] Yangdoctors last call review of draft-ietf-netconf-ssh-client-server-24 X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Jun 2021 22:55:04 -0000 Hi Andy, > > 1) Measuring Interoperability for groupings and identities > >=20 > > [same comment for SSH and TLS drafts] > >=20 > > These modules are intentionally abstract. > > There are no protocol-accessible objects defined at all. > > Interoperability is usually measured in the context of a > > specific protocol (e.g., NETCONF). > >=20 > > There is an assumption that interoperability will be achieved > > by some other RFCs that will have "uses" statements to create > > protocol-accessible or otherwise implementable objects. >=20 > True, and we have, e.g., the "netconf-client-server" and = "restconf-client-server" drafts, and the PCE WG has the "pcep-yang=E2=80=9D= draft. There=E2=80=99s a leap of faith, but also some running code, = so hopefully within the intentions of an =E2=80=9CRFC=E2=80=9D. >=20 >=20 > > There is also an assumption that the groupings will be used the > > same everywhere, and the only difference will be the > > path from root to the objects in these groupings. > > In fact, the "refine" statement allows each usage to be > > different. >=20 > What assumption? Do you mean the description statements in the = various "[ssh/tls]-[client/server]-grouping=E2=80=9D groupings. For = instance, see the 2nd paragraph below: >=20 > grouping ssh-client-grouping { > description > "A reusable grouping for configuring a SSH client without > any consideration for how an underlying TCP session is > established. >=20 > Note that this grouping uses fairly typical descendent > node names such that a stack of 'uses' statements will > have name conflicts. It is intended that the consuming > data model will resolve the issue (e.g., by wrapping > the 'uses' statement in a container called > 'ssh-client-parameters'). This model purposely does > not do this itself so as to provide maximum flexibility > to consuming models."; >=20 > While it is true that =E2=80=9Cstacks=E2=80=9D (or sibling =E2=80=9Cuses= =E2=80=9D statements) are expected (from a "best practice=E2=80=9D POV), = I=E2=80=99m unaware of any Xpath expressions enforcing this. >=20 >=20 >=20 > I was re-reading RFC 7950 and there is nothing to add in these drafts = about it. > Groupings do not define any nodes in the schema tree. >=20 > In the old days the IETF used to be concerned with Interoperability = Reports > in order to advance an RFC from Proposed Standard to Draft Standard. > Now that that is no longer done, it is not that important to point out = that > interoperability can only be evaluated for the module with the "uses" = statement, > since that is how schema tree nodes are defined from a grouping = template. Closed - thanks! >=20 > > Perhaps the drafts should mention these interoperability issues. >=20 > Could you be more specific in what text you=E2=80=99d like to see in = which sections? >=20 >=20 > see above -- no changes requested Ack. > > 2) same feature names in 2 modules > >=20 > > - feature userauth-hostbased > > - feature userauth-none > > - feature userauth-password > > - feature userauth-publickey > >=20 > > The ietf-ssh-client and ietf-ssh-server modules both use these > > feature names. IMO users will not expect this, and this will cause > > confusion. > >=20 > > Why can't these features be defined once in ietf-ssh-common.yang? > > Seems like client and server will advertise the feature for > > implementing their relevant values. >=20 > Well, these were named differently in just the previous version of the = ssh draft=E2=80=A6from the change log: >=20 > * Renamed "client-auth-*" to "userauth-*" > * Renamed "client-identity-*" to "userauth-*=E2=80=9D >=20 > Juergen felt that these were more natural names for SSH. I agreed, = mostly just to get the =E2=80=9Cmonkey off my back=E2=80=9D, but it = breaks with the convention used by the collection if client-server = drafts (where all the variations of "[client/server]-[auth/identity]=E2=80= =9D are typically used). =20 >=20 > Yes, =E2=80=9Cuserauth=E2=80=9D is the term used in the SSH drafts, = and I didn=E2=80=99t think is was a big deal or, really, any deal at = all, for the same feature names to be used in both drafts, such that I'm = surprised by your "users will not expect this, and this will cause = confusion=E2=80=9D comment... >=20 > Moving the definitions to the =E2=80=9Ccommon=E2=80=9D module is = possible, of course, but tricky since the description statements say = different things, to address the different contexts in which they=E2=80=99= re used. The description statement could be expanded to address each = context, but this will get wordy=E2=80=A6I wonder if it wouldn=E2=80=99t = be better to just go back to the previous =E2=80=9Cclient-[auth/identity]-= *=E2=80=9D prefixes - thoughts? >=20 >=20 > OK -- not a big deal except possibly when the feature name is used = outside of YANG, > without any prefix to tell which one is meant. I agree the different = description-stmts > make it difficult to write a common feature definition, so this is not = important to change either. It seems that the following might works: - In ietf-ssh-client, rename "userauth-*" to "client-ident-*=E2=80=9D - since client-side config, the =E2=80=9Cuserauth=E2=80=9D = nomenclature is not as strong - aligns =E2=80=9Cclient-ident=E2=80=9D usage with the =E2=80=9Ctls=E2= =80=9D and =E2=80=9Chttp=E2=80=9D drafts - In ietf-ssh-server, rename "userauth-*" to "local-user-auth-*=E2=80=9D= - makes sense as nodes depend from a container called =E2=80=9Cusers= =E2=80=9D that has a if-feature statement =E2=80=9Clocal-users-supported=E2=80=9D= - thus, can simultaneously be parsed as "[local-user]-auth-*=E2=80=9D= and "local-[user-auth]-*=E2=80=9D I=E2=80=99ll make this change if no objections. > Andy K. From nobody Tue Jun 1 16:10:16 2021 Return-Path: <01000179c9d75c90-d8a3b4c8-0339-4a53-a719-9c7366b16455-000000@amazonses.watsen.net> X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 480483A2AFC for ; Tue, 1 Jun 2021 16:10:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R9rJfzS7ZUbH for ; Tue, 1 Jun 2021 16:10:06 -0700 (PDT) Received: from a8-31.smtp-out.amazonses.com (a8-31.smtp-out.amazonses.com [54.240.8.31]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6A9E13A2AFB for ; Tue, 1 Jun 2021 16:10:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1622589005; h=From:Message-Id:Content-Type:Mime-Version:Subject:Date:In-Reply-To:Cc:To:References:Feedback-ID; bh=mll62Bwntj5j3hirayeFTMDEyCXy9eJYim2m6ETFLM8=; b=UjumhILV0TQ1ckp2EMvfuo3IhvY4jdYEcGKxyc1x1MMSQE+JApuw7WRhHigZ15ga FbOYR5no0JE3lQub75iDMaN1V/k8IlV+Bo2Vo+HLIjQtHHQHVkHfrfSIajR1e4O5RX2 h+9DK2q2sSwh848/rGwvxFAogZXJ+SZ6M74P3MUk= From: Kent Watsen Message-ID: <01000179c9d75c90-d8a3b4c8-0339-4a53-a719-9c7366b16455-000000@email.amazonses.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_B2DA8EFA-52A8-4F79-8A9E-B76252C9B086" Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.60.0.2.21\)) Date: Tue, 1 Jun 2021 23:10:05 +0000 In-Reply-To: <257b1be7eb5044ae9654c0104f31bf6d@huawei.com> Cc: Wei Wang , Qin Wu , "netconf@ietf.org" To: "maqiufang (A)" References: <3a058efa22df47239b8d016c6ba9e431@huawei.com> <010001797c58025b-fb6d6a97-d7bc-4161-90f6-a0fad771f6ee-000000@email.amazonses.com> <257b1be7eb5044ae9654c0104f31bf6d@huawei.com> X-Mailer: Apple Mail (2.3654.60.0.2.21) Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES X-SES-Outgoing: 2021.06.01-54.240.8.31 Archived-At: Subject: Re: [netconf] Capability-fetching mechanisms X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Jun 2021 23:10:11 -0000 --Apple-Mail=_B2DA8EFA-52A8-4F79-8A9E-B76252C9B086 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi Qiufang Ma, > Hi, Kent, > Please see my reply inline. > =20 > =46rom my perspective, The data-export-capability does not have to = require the receiver to function as a NETCONF/RESTCONF server. The = capability discovery mechanism in these two drafts can complement each = other in this case. In other cases, data-export-capability provides the = receiver with an overall acquisition of the transport capabilities = about the device. > =20 > =20 > I=E2=80=99m unclear on each of your sentences above. Could you, for = for sentence, provide more context regarding what you mean? For = instance, how could the data-export-capability draft not imply the = receiver be a NC/RC server? Likewise, how could the two drafts = compliment each other? Also, by mentioning =E2=80=9Cother cases=E2=80=9D,= but what is the =E2=80=9Dfirst=E2=80=9D case that this contrasts to? =20= > [Qiufang Ma] Sorry for being unclear. > On the one hand, data-export-capability draft focuses more on = discovering a set of capabilities supported by the publisher, and the = publisher can learn the capabilities of the receiver through the = mechanism defined in http-notif draft. Therefore the capability = discovery mechanisms of these two drafts complement each other to = realize the capability discovery of both receiver and publisher. Now I understand what was meant before - thanks. To be honest, I didn=E2=80=99t realize that "data-export-capability=E2=80=9D= was primarily for clients to retrieve server-capabilities. Of course, = its obvious now, but somehow I thought it was defining a different way = for a server to get client capabilities. > On the other hand, as Qin has clarified, maybe we can define a shared = mechanism to fetch the receiver capability in the data-export-capability = draft that does not need the receiver to be a NC/RC server. > So I do not think it would be necessary for the receiver to be a NC/RC = server. Maybe, but the desire to do so is now less in my mind given the above = =E2=80=9Crevelation=E2=80=9D to me. That said, let=E2=80=99s see how = this matter plays out in the thread between Qin and Mahesh... > Other cases refer to cases other than capability discovery at the = receiver side. For example, the receiver learns capability supported by = the publisher(e.g., encoding format), which helps (e.g., in the = selection of the encoding format) when establishing a dynamic = subscription. Noted. K. --Apple-Mail=_B2DA8EFA-52A8-4F79-8A9E-B76252C9B086 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hi Qiufang Ma,


Hi, Kent,
Please see my reply = inline.
 
=46rom my = perspective, The data-export-capability does not have to require the = receiver to function as a NETCONF/RESTCONF server. The capability = discovery mechanism in these two drafts can complement each other in = this case. In other cases, data-export-capability provides the receiver = with an overall  acquisition of the transport capabilities about = the device.
 
 
I=E2=80=99m unclear on each of your sentences above. =  Could you, for for sentence, provide more context regarding what = you mean?  For instance, how could the data-export-capability draft = not imply the receiver be a NC/RC server?  Likewise, how could the = two drafts compliment each other?  Also, by mentioning =E2=80=9Cother= cases=E2=80=9D, but what is the =E2=80=9Dfirst=E2=80=9D case that this = contrasts to?  
[Qiufang Ma] Sorry for being unclear.
On the = one hand, data-export-capability draft  focuses more on discovering = a set of capabilities supported by the publisher, and the publisher can = learn the capabilities of the receiver through the mechanism defined in = http-notif draft. Therefore the capability discovery mechanisms of these = two drafts complement each other to realize the capability discovery of = both receiver and = publisher.

Now I understand what was meant before - = thanks.

To be honest, I didn=E2=80=99t= realize that "data-export-capability=E2=80=9D was primarily for clients = to retrieve server-capabilities.  Of course, its obvious now, but = somehow I thought it was defining a different way for a server to get = client capabilities.


On the = other hand, as Qin has clarified, maybe we can define a shared mechanism = to fetch the receiver capability in the data-export-capability draft = that does not need the receiver to be a NC/RC server.
So I do = not think it would be necessary for the receiver to be a NC/RC = server.

Maybe, but the desire to do so is now less in my = mind given the above =E2=80=9Crevelation=E2=80=9D to me.  That = said,  let=E2=80=99s see how this = matter plays out in the thread between Qin = and Mahesh...


Other = cases refer to cases other than capability discovery at the receiver = side. For example, the receiver learns capability supported by the = publisher(e.g., encoding format), which helps (e.g., in the selection of = the encoding format) when establishing a dynamic = subscription.

Noted.


K.


= --Apple-Mail=_B2DA8EFA-52A8-4F79-8A9E-B76252C9B086-- From nobody Tue Jun 1 18:07:16 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF8333A2E42 for ; Tue, 1 Jun 2021 18:07:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6U9TltNxvp0P for ; Tue, 1 Jun 2021 18:07:09 -0700 (PDT) Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A0FA43A2E1B for ; Tue, 1 Jun 2021 18:07:09 -0700 (PDT) Received: from fraeml735-chm.china.huawei.com (unknown [172.18.147.200]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4FvrCS64Crz6K5VQ; Wed, 2 Jun 2021 08:54:44 +0800 (CST) Received: from dggeml703-chm.china.huawei.com (10.3.17.136) by fraeml735-chm.china.huawei.com (10.206.15.216) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.1.2176.2; Wed, 2 Jun 2021 03:07:07 +0200 Received: from dggeml753-chm.china.huawei.com (10.1.199.152) by dggeml703-chm.china.huawei.com (10.3.17.136) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2176.2; Wed, 2 Jun 2021 09:07:05 +0800 Received: from dggeml753-chm.china.huawei.com ([10.1.199.152]) by dggeml753-chm.china.huawei.com ([10.1.199.152]) with mapi id 15.01.2176.012; Wed, 2 Jun 2021 09:07:05 +0800 From: Qin Wu To: Mahesh Jethanandani CC: Kent Watsen , "netconf@ietf.org" Thread-Topic: [netconf] Capability-fetching mechanisms Thread-Index: AddL2HWsR2fQuKr/T2WNMl8IjZzG7ALHAwYAABUslUA= Date: Wed, 2 Jun 2021 01:07:05 +0000 Message-ID: References: <3F555FC1-F19E-4BAB-A23A-AA70A935BFBB@gmail.com> In-Reply-To: <3F555FC1-F19E-4BAB-A23A-AA70A935BFBB@gmail.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.136.123.117] Content-Type: multipart/alternative; boundary="_000_d3e28c3359b34352b42c6f99ce881405huaweicom_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [netconf] =?utf-8?b?562U5aSNOiAgQ2FwYWJpbGl0eS1mZXRjaGluZyBtZWNo?= =?utf-8?q?anisms?= X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Jun 2021 01:07:15 -0000 --_000_d3e28c3359b34352b42c6f99ce881405huaweicom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksIE1haGVzaDoNCg0K5Y+R5Lu25Lq6OiBNYWhlc2ggSmV0aGFuYW5kYW5pIFttYWlsdG86bWpl dGhhbmFuZGFuaUBnbWFpbC5jb21dDQrlj5HpgIHml7bpl7Q6IDIwMjHlubQ25pyIMuaXpSA2OjQ0 DQrmlLbku7bkuro6IFFpbiBXdSA8YmlsbC53dUBodWF3ZWkuY29tPg0K5oqE6YCBOiBLZW50IFdh dHNlbiA8a2VudCtpZXRmQHdhdHNlbi5uZXQ+OyBuZXRjb25mQGlldGYub3JnDQrkuLvpopg6IFJl OiBbbmV0Y29uZl0gQ2FwYWJpbGl0eS1mZXRjaGluZyBtZWNoYW5pc21zDQoNCltUcmltbWluZyBk b3duIHRoZSBlLW1haWwgdG8gb3BlbiB0b3BpY3NdDQoNCkhpIFFpbiwNCg0KU2VlIGlubGluZSB3 aXRoIFttajFdDQoNCg0KT24gTWF5IDE4LCAyMDIxLCBhdCA0OjQwIEFNLCBRaW4gV3UgPGJpbGwu d3VAaHVhd2VpLmNvbTxtYWlsdG86YmlsbC53dUBodWF3ZWkuY29tPj4gd3JvdGU6DQoNCkhpLCBN YWhlc2g6DQoNCg0KVGhlIHF1ZXN0aW9uIGlzIHdoZXRoZXIgdGhlIHJlY2VpdmVyIG5lZWRzIHRv IGJlIGEgTkVUQ09ORi9SRVNUQ09ORiBzZXJ2ZXIuIEFzIG1hcWl1ZmFuZyB3cm90ZSBpbiBoaXMg cmVzcG9uc2UsIGlmIHRoZSByZWNlaXZlciBzdXBwb3J0cyB0aGUgZGF0YS1leHBvcnQtY2FwYWJp bGl0aWVzIGRyYWZ0LCB0aGVuIGl0IHdvdWxkIG5lZWQgdG8gYmUgYSBORVRDT05GL1JFU1RDT05G IHNlcnZlciwgd2hlcmVhcyB3aXRoIHRoZSBodHRwcy1ub3RpZiBkcmFmdCB0aGF0IGlzIG5vdCB0 aGUgY2FzZS4gVGhpcyBpcyB0aGUgY2FzZSB3aGV0aGVyIHRoZSByZWNlaXZlciBzdXBwb3J0cyBS RkMgODYzOSBvciBub3QuDQpbUWluXTpNeSB1bmRlcnN0YW5kaW5nIGlzIGRhdGEtZXhwb3J0LWNh cGFiaWxpdGllcyBkb2VzbuKAmXQgcmVxdWlyZSByZWNlaXZlciB0byBiZSB0aWVkIHdpdGggTkVU Q09ORi9SRVNUQ09ORiBzZXJ2ZXIuIEkgYXNzdW1lIHRoZSBtYW5hZ2VtZW50IHN5c3RlbSAoaS5l LiwgcmVjZWl2ZXIpIGFuZCBuZXR3b3JrIGRldmljZSAoaS5lLiwgcHVibGlzaGVyKSBjYW4gdXNl IEhUVFBTIHRvIGV4Y2hhbmdlIGFkdmVydGlzZWQgZGF0YS4NCg0KSW4gYWRkaXRpb24sIE1heWJl IHdoYXQgaXMgbWlzc2luZyBpbiB0aGUgZGF0YS1leHBvcnQtY2FwYWJpbGl0aWVzIGRyYWZ0IGlz IHRvIGRlZmluZSBSUEMgdG8gYWxsb3cgdGhlIHB1Ymxpc2hlciBnZXQgY2FwYWJpbGl0eSBmcm9t IHJlY2VpdmVyIHRocm91Z2ggSFRUUFMgY2hhbm5lbCwgc2ltaWxhciB0byB3aGF0IGlzIGdldC1i b290c3RyYXBwaW5nLWRhdGEgUlBDIGRlZmluZWQgaW4gUkZDODU3Mi4NCg0KW21qMV0gU3RpcHVs YXRpbmcgYSBIVFRQcyBjaGFubmVsIHdvcmtzIGZvciB0aGUgSFRUUFMgbm90aWYgZHJhZnQuIEJ1 dCB3aGF0IHdpbGwgb3RoZXIgdHJhbnNwb3J0IHR5cGUgZHJhZnRzIHVzZT8gZS5nLiB0aGUgVURQ IG5vdGlmIGRyYWZ0Pz8NCg0KW1Fpbl06SSB0aGluayBVRFAgbm90aWYgZHJhZnQgY291bGQgYWxz byB1c2UgSFRUUHMgY2hhbm5lbCB0byBjYXJyeSBjYXBhYmlsaXR5IGluZm9ybWF0aW9uIGZyb20g dGhlIHNlcnZlciB0byB0aGUgY2xpZW50IGluIHRoZSBmb3JtIG9mIFlBTkcgaW5zdGFuY2UgZmls ZSBmb3JtYXQuDQoNClBsZWFzZSBub3RlIHRoYXQgUkZDIDg2MzkgcmVjZWl2ZXJzIGRvIG5vdCBo YXZlIHRvIGJlIE5FVENPTkYvUkVTVENPTkYgc2VydmVycyBmb3IgY29uZmlndXJlZCBzdWJzY3Jp cHRpb25zLiBSRkMgODYzOSwgU2VjdGlvbiAyLjcgZGVmaW5lcyB0aGUgY29udHJvbCBtZXNzYWdl cyBzdWNoIGFzIDxzdWJzY3JpcHRpb24tc3RhcnRlZD4gdXNpbmcgb25lLXdheSBZQU5HIOKAnG5v dGlmaWNhdGlvbuKAnSBzdGF0ZW1lbnRzLg0KDQpbUWluXTogVW5kZXJzdGFuZCB0aGlzIGNhc2Us IERvIHlvdSB0aGluayB3ZSBzaG91bGQgZGVmaW5lIGEgbmV3IG5vdGlmaWNhdGlvbiBpbiB0aGUg ZGF0YS1leHBvcnQtY2FwYWJpbGl0aWVzIGRyYWZ0IGluc3RlYWQgb2YgY29uc2lkZXJpbmcgdG8g ZGVmaW5lIFJQQz8NCg0KW21qMV0gSSBkbyBub3QgdW5kZXJzdGFuZCB0aGlzIHN0YXRlbWVudC4g Q2FuIHlvdSBleHBhbmQ/DQoNCltRaW5dOiBJIGFtIG5vdCBzdXJlIHRoZSBSUEMgaXMgYSBnb29k IGRlc2lnbiBjaG9pY2UsIEkgdGhpbmsgd2UgY291bGQgaGF2ZSAzIG9wdGlvbnMNCu+8iGHvvIlS ZXBvcnQgY2FwYWJpbGl0eSBpbmZvcm1hdGlvbiBmcm9tIHRoZSBIVFRQcyBzZXJ2ZXIgb3IgdGhl IEhUVFBzIGNsaWVudCBhdCBydW4tdGltZSBvciBpbXBsZW1lbnRhdGlvbi0gdGltZSwgcGVyIHRo ZSBZQU5HIEluc3RhbmNlIERhdGEgRmlsZSBGb3JtYXQuDQooYikgRGVmaW5lIG9uZSB3YXkgWUFO RyBub3RpZmljYXRpb24gc2ltaWxhciB0byA8c3Vic2NyaXB0aW9uLXN0YXJ0ZWQ+IHRoYXQgaXMg c2VudCBmcm9tIHRoZSBzZXJ2ZXIgdG8gdGhlIGNsaWVudA0KKGMpIFJlcG9ydCBjYXBhYmlsaXR5 IGluZm9ybWF0aW9uIG9ubHkgZnJvbSBORVRDT05GIHNlcnZlciB1c2luZyBZQU5HIG1vZGVsIGRl ZmluZSBpbiBkYXRhLWV4cG9ydC1jYXBhaWJsaXRpZXMgZHJhZnQNCkkgdGhpbmsgKGIpIG9ubHkg YWxsb3cgdGhlIHNlcnZlciBhZHZlcnRpc2UgdGhlIHNlcnZlciBjYXBhYmlsaXR5IHRvIHRoZSBj bGllbnQgYnV0IGRvZXMgbm90IGFsbG93IHRoZSBjbGllbnQgaXNzdWUgbm90aWZpY2F0aW9uIGFu ZCBhZHZlcnRpc2UgY2xpZW50IGNhcGFiaWxpdHkgdG8gdGhlIHNlcnZlcg0KKGMpIGlzIHNvbWV0 aGluZyB5b3UgZW52aXNpb24gaG93IGl0IGlzIHVzZWQsIHRoZSBsaW1pdGF0aW9uIGlzIHRvIHJl cXVpcmUgTkVUQ09ORiBzZXJ2ZXIgdG8gYmUgc3VwcG9ydGVkIGJ5IHRoZSByZWNlaXZlciBvciB0 aGUgY2xpZW50LCBidXQgdGhpcyBvcHRpb24gaXMgbm90IHdoYXQgd2UgcHJvcG9zZWQgaW4gdGhl IGRhdGEtZXhwb3J0LWNhcGFiaWxpdGllcyBkcmFmdC4NClRoZSBzb2x1dGlvbiB3ZSBwcm9wb3Nl ZCBpcyAoYSkgd2hpY2ggYWxsb3dzIHJlcG9ydCBjYXBhYmlsaXR5IGluZm9ybWF0aW9uIGVpdGhl ciBmcm9tIHRoZSBTZXJ2ZXIgb3IgdGhlIGNsaWVudCB1c2luZyBZQU5HIEluc3RhbmNlIGRhdGEg ZmlsZS4gSG9wZSB0aGlzIGNsYXJpZmllcy4NCg0KTWFoZXNoIEpldGhhbmFuZGFuaQ0KbWpldGhh bmFuZGFuaUBnbWFpbC5jb208bWFpbHRvOm1qZXRoYW5hbmRhbmlAZ21haWwuY29tPg0KDQoNCg0K DQo= --_000_d3e28c3359b34352b42c6f99ce881405huaweicom_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk65a6L5L2TOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0K QGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQg NSAzIDUgNCA2IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglw YW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5 OuW+rui9r+mbhem7kTsNCglwYW5vc2UtMToyIDExIDUgMyAyIDIgNCAyIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OiJcQOWui+S9kyI7DQoJcGFub3NlLTE6MiAxIDYgMCAzIDEgMSAx IDEgMTt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJcQOW+rui9r+mbhem7kSI7DQoJcGFu b3NlLTE6MiAxMSA1IDMgMiAyIDQgMiAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAu TXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsNCglt YXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseTrl rovkvZM7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6 OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRl ZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJ Y29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcHJlDQoJe21zby1z dHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiSFRNTCDpooTorr7moLzlvI8gQ2hh ciI7DQoJbWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEy LjBwdDsNCglmb250LWZhbWlseTrlrovkvZM7fQ0KcC5Nc29MaXN0UGFyYWdyYXBoLCBsaS5Nc29M aXN0UGFyYWdyYXBoLCBkaXYuTXNvTGlzdFBhcmFncmFwaA0KCXttc28tc3R5bGUtcHJpb3JpdHk6 MzQ7DQoJbWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJdGV4dC1pbmRlbnQ6 MjEuMHB0Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk65a6L5L2TO30NCnNwYW4u SFRNTENoYXINCgl7bXNvLXN0eWxlLW5hbWU6IkhUTUwg6aKE6K6+5qC85byPIENoYXIiOw0KCW1z by1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiSFRNTCDpooTorr7moLzlvI8i Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTkNCgl7bXNv LXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMt c2VyaWY7DQoJY29sb3I6IzFGNDk3RDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlw ZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0K CXtzaXplOjYxMi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzIuMHB0IDkwLjBwdCA3Mi4wcHQgOTAu MHB0O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBE ZWZpbml0aW9ucyAqLw0KQGxpc3QgbDANCgl7bXNvLWxpc3QtaWQ6NjU2Mjk5MzUwOw0KCW1zby1s aXN0LXR5cGU6aHlicmlkOw0KCW1zby1saXN0LXRlbXBsYXRlLWlkczoxNzM2OTg2NjgyIDE3MTcx MDAyNzQgNjc2OTg3MTMgNjc2OTg3MTUgNjc2OTg3MDMgNjc2OTg3MTMgNjc2OTg3MTUgNjc2OTg3 MDMgNjc2OTg3MTMgNjc2OTg3MTU7fQ0KQGxpc3QgbDA6bGV2ZWwxDQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmFscGhhLWxvd2VyOw0KCW1zby1sZXZlbC10ZXh0Ou+8iCUx77yJOw0KCW1zby1s ZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0 ZXh0LWluZGVudDotMzYuMHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC41cHQ7DQoJZm9udC1m YW1pbHk6IlRpbWVzIE5ldyBSb21hbiIsc2VyaWY7DQoJbXNvLWFzY2lpLWZvbnQtZmFtaWx5OkNh bGlicmk7DQoJbXNvLWZhcmVhc3QtZm9udC1mYW1pbHk65a6L5L2TOw0KCW1zby1oYW5zaS1mb250 LWZhbWlseTpDYWxpYnJpOw0KCW1zby1iaWRpLWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4i Ow0KCWNvbG9yOiMxRjQ5N0Q7fQ0KQGxpc3QgbDA6bGV2ZWwyDQoJe21zby1sZXZlbC1udW1iZXIt Zm9ybWF0OmFscGhhLWxvd2VyOw0KCW1zby1sZXZlbC10ZXh0OiIlMlwpIjsNCgltc28tbGV2ZWwt dGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJbWFyZ2lu LWxlZnQ6NDIuMHB0Ow0KCXRleHQtaW5kZW50Oi0yMS4wcHQ7fQ0KQGxpc3QgbDA6bGV2ZWwzDQoJ e21zby1sZXZlbC1udW1iZXItZm9ybWF0OnJvbWFuLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3Rv cDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246cmlnaHQ7DQoJbWFyZ2luLWxlZnQ6 NjMuMHB0Ow0KCXRleHQtaW5kZW50Oi0yMS4wcHQ7fQ0KQGxpc3QgbDA6bGV2ZWw0DQoJe21zby1s ZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCglt YXJnaW4tbGVmdDo4NC4wcHQ7DQoJdGV4dC1pbmRlbnQ6LTIxLjBwdDt9DQpAbGlzdCBsMDpsZXZl bDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtbG93ZXI7DQoJbXNvLWxldmVsLXRl eHQ6IiU1XCkiOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246bGVmdDsNCgltYXJnaW4tbGVmdDoxMDUuMHB0Ow0KCXRleHQtaW5kZW50Oi0yMS4w cHQ7fQ0KQGxpc3QgbDA6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OnJvbWFuLWxv d2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246cmlnaHQ7DQoJbWFyZ2luLWxlZnQ6MTI2LjBwdDsNCgl0ZXh0LWluZGVudDotMjEuMHB0O30N CkBsaXN0IGwwOmxldmVsNw0KCXttc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwt bnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJbWFyZ2luLWxlZnQ6MTQ3LjBwdDsNCgl0ZXh0LWluZGVu dDotMjEuMHB0O30NCkBsaXN0IGwwOmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDph bHBoYS1sb3dlcjsNCgltc28tbGV2ZWwtdGV4dDoiJThcKSI7DQoJbXNvLWxldmVsLXRhYi1zdG9w Om5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCW1hcmdpbi1sZWZ0OjE2 OC4wcHQ7DQoJdGV4dC1pbmRlbnQ6LTIxLjBwdDt9DQpAbGlzdCBsMDpsZXZlbDkNCgl7bXNvLWxl dmVsLW51bWJlci1mb3JtYXQ6cm9tYW4tbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7 DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpyaWdodDsNCgltYXJnaW4tbGVmdDoxODkuMHB0 Ow0KCXRleHQtaW5kZW50Oi0yMS4wcHQ7fQ0KQGxpc3QgbDENCgl7bXNvLWxpc3QtaWQ6MTcyNjAy OTc0MDsNCgltc28tbGlzdC10eXBlOmh5YnJpZDsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6LTEy NDIxNTMzMDIgOTk3NjIzMTY2IDY3Njk4NzEzIDY3Njk4NzE1IDY3Njk4NzAzIDY3Njk4NzEzIDY3 Njk4NzE1IDY3Njk4NzAzIDY3Njk4NzEzIDY3Njk4NzE1O30NCkBsaXN0IGwxOmxldmVsMQ0KCXtt c28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7 DQoJbWFyZ2luLWxlZnQ6MTguMHB0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7fQ0KQGxpc3QgbDE6 bGV2ZWwyDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLWxvd2VyOw0KCW1zby1sZXZl bC10ZXh0OiIlMlwpIjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVt YmVyLXBvc2l0aW9uOmxlZnQ7DQoJbWFyZ2luLWxlZnQ6NDIuMHB0Ow0KCXRleHQtaW5kZW50Oi0y MS4wcHQ7fQ0KQGxpc3QgbDE6bGV2ZWwzDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OnJvbWFu LWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9z aXRpb246cmlnaHQ7DQoJbWFyZ2luLWxlZnQ6NjMuMHB0Ow0KCXRleHQtaW5kZW50Oi0yMS4wcHQ7 fQ0KQGxpc3QgbDE6bGV2ZWw0DQoJe21zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZl bC1udW1iZXItcG9zaXRpb246bGVmdDsNCgltYXJnaW4tbGVmdDo4NC4wcHQ7DQoJdGV4dC1pbmRl bnQ6LTIxLjBwdDt9DQpAbGlzdCBsMTpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6 YWxwaGEtbG93ZXI7DQoJbXNvLWxldmVsLXRleHQ6IiU1XCkiOw0KCW1zby1sZXZlbC10YWItc3Rv cDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgltYXJnaW4tbGVmdDox MDUuMHB0Ow0KCXRleHQtaW5kZW50Oi0yMS4wcHQ7fQ0KQGxpc3QgbDE6bGV2ZWw2DQoJe21zby1s ZXZlbC1udW1iZXItZm9ybWF0OnJvbWFuLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25l Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246cmlnaHQ7DQoJbWFyZ2luLWxlZnQ6MTI2LjBw dDsNCgl0ZXh0LWluZGVudDotMjEuMHB0O30NCkBsaXN0IGwxOmxldmVsNw0KCXttc28tbGV2ZWwt dGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJbWFyZ2lu LWxlZnQ6MTQ3LjBwdDsNCgl0ZXh0LWluZGVudDotMjEuMHB0O30NCkBsaXN0IGwxOmxldmVsOA0K CXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS1sb3dlcjsNCgltc28tbGV2ZWwtdGV4dDoi JThcKSI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3Np dGlvbjpsZWZ0Ow0KCW1hcmdpbi1sZWZ0OjE2OC4wcHQ7DQoJdGV4dC1pbmRlbnQ6LTIxLjBwdDt9 DQpAbGlzdCBsMTpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6cm9tYW4tbG93ZXI7 DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpy aWdodDsNCgltYXJnaW4tbGVmdDoxODkuMHB0Ow0KCXRleHQtaW5kZW50Oi0yMS4wcHQ7fQ0Kb2wN Cgl7bWFyZ2luLWJvdHRvbTowY207fQ0KdWwNCgl7bWFyZ2luLWJvdHRvbTowY207fQ0KLS0+PC9z dHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVk aXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28g OV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJl ZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9o ZWFkPg0KPGJvZHkgbGFuZz0iWkgtQ04iIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRp diBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+SGksIE1haGVzaDo8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8 ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFk ZGluZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDvlvq7ova/pm4Xpu5EmcXVv dDssc2Fucy1zZXJpZiI+5Y+R5Lu25Lq6PHNwYW4gbGFuZz0iRU4tVVMiPjo8L3NwYW4+PC9zcGFu PjwvYj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q75b6u6L2v6ZuF6buRJnF1b3Q7LHNhbnMtc2VyaWYiPiBNYWhlc2ggSmV0aGFuYW5k YW5pIFttYWlsdG86bWpldGhhbmFuZGFuaUBnbWFpbC5jb21dDQo8YnI+DQo8L3NwYW4+PGI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q75b6u6L2v6ZuF6buR JnF1b3Q7LHNhbnMtc2VyaWYiPuWPkemAgeaXtumXtDxzcGFuIGxhbmc9IkVOLVVTIj46PC9zcGFu Pjwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O+W+rui9r+mbhem7kSZxdW90OyxzYW5zLXNlcmlmIj4gMjAyMTwvc3Bh bj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDvlvq7ova/p m4Xpu5EmcXVvdDssc2Fucy1zZXJpZiI+5bm0PHNwYW4gbGFuZz0iRU4tVVMiPjY8L3NwYW4+5pyI PHNwYW4gbGFuZz0iRU4tVVMiPjI8L3NwYW4+5pelPHNwYW4gbGFuZz0iRU4tVVMiPg0KIDY6NDQ8 YnI+DQo8L3NwYW4+PGI+5pS25Lu25Lq6PHNwYW4gbGFuZz0iRU4tVVMiPjo8L3NwYW4+PC9iPjxz cGFuIGxhbmc9IkVOLVVTIj4gUWluIFd1ICZsdDtiaWxsLnd1QGh1YXdlaS5jb20mZ3Q7PGJyPg0K PC9zcGFuPjxiPuaKhOmAgTxzcGFuIGxhbmc9IkVOLVVTIj46PC9zcGFuPjwvYj48c3BhbiBsYW5n PSJFTi1VUyI+IEtlbnQgV2F0c2VuICZsdDtrZW50JiM0MztpZXRmQHdhdHNlbi5uZXQmZ3Q7OyBu ZXRjb25mQGlldGYub3JnPGJyPg0KPC9zcGFuPjxiPuS4u+mimDxzcGFuIGxhbmc9IkVOLVVTIj46 PC9zcGFuPjwvYj48c3BhbiBsYW5nPSJFTi1VUyI+IFJlOiBbbmV0Y29uZl0gQ2FwYWJpbGl0eS1m ZXRjaGluZyBtZWNoYW5pc21zPG86cD48L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLVVTIj5bVHJpbW1pbmcgZG93biB0aGUgZS1tYWlsIHRvIG9wZW4gdG9waWNzXTxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj5IaSBRaW4sPG86cD48L286cD48 L3NwYW4+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVT Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+U2VlIGlubGluZSB3aXRoIFttajFdPG86cD48 L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLVVTIj48YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8YmxvY2txdW90ZSBz dHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+T24gTWF5IDE4LCAyMDIxLCBhdCA0 OjQwIEFNLCBRaW4gV3UgJmx0OzxhIGhyZWY9Im1haWx0bzpiaWxsLnd1QGh1YXdlaS5jb20iPmJp bGwud3VAaHVhd2VpLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5IaSwgTWFoZXNoOjwvc3Bh bj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xv cjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10 b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+VGhlIHF1ZXN0aW9uIGlzIHdoZXRo ZXIgdGhlIHJlY2VpdmVyIG5lZWRzIHRvIGJlIGEgTkVUQ09ORi9SRVNUQ09ORiBzZXJ2ZXIuIEFz IG1hcWl1ZmFuZyB3cm90ZSBpbiBoaXMgcmVzcG9uc2UsIGlmIHRoZSByZWNlaXZlciBzdXBwb3J0 cyB0aGUgZGF0YS1leHBvcnQtY2FwYWJpbGl0aWVzIGRyYWZ0LCB0aGVuIGl0IHdvdWxkIG5lZWQg dG8gYmUgYSBORVRDT05GL1JFU1RDT05GDQogc2VydmVyLCB3aGVyZWFzIHdpdGggdGhlIGh0dHBz LW5vdGlmIGRyYWZ0IHRoYXQgaXMgbm90IHRoZSBjYXNlLiBUaGlzIGlzIHRoZSBjYXNlIHdoZXRo ZXIgdGhlIHJlY2VpdmVyIHN1cHBvcnRzIFJGQyA4NjM5IG9yIG5vdC48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPltRaW5dOk15IHVuZGVy c3RhbmRpbmcgaXMgZGF0YS1leHBvcnQtY2FwYWJpbGl0aWVzIGRvZXNuPC9zcGFuPjxzcGFuIHN0 eWxlPSJjb2xvcjojMUY0OTdEIj7igJk8c3BhbiBsYW5nPSJFTi1VUyI+dCByZXF1aXJlIHJlY2Vp dmVyIHRvIGJlIHRpZWQgd2l0aCBORVRDT05GL1JFU1RDT05GIHNlcnZlci4gSSBhc3N1bWUgdGhl IG1hbmFnZW1lbnQNCiBzeXN0ZW0gKGkuZS4sIHJlY2VpdmVyKSBhbmQgbmV0d29yayBkZXZpY2Ug KGkuZS4sIHB1Ymxpc2hlcikgY2FuIHVzZSBIVFRQUyB0byBleGNoYW5nZSBhZHZlcnRpc2VkIGRh dGEuPC9zcGFuPjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+ SW4gYWRkaXRpb24sIE1heWJlIHdoYXQgaXMgbWlzc2luZyBpbiB0aGUgZGF0YS1leHBvcnQtY2Fw YWJpbGl0aWVzIGRyYWZ0IGlzIHRvIGRlZmluZSBSUEMgdG8gYWxsb3cgdGhlIHB1Ymxpc2hlciBn ZXQgY2FwYWJpbGl0eSBmcm9tIHJlY2VpdmVyIHRocm91Z2ggSFRUUFMgY2hhbm5lbCwgc2ltaWxh ciB0byB3aGF0IGlzIGdldC1ib290c3RyYXBwaW5nLWRhdGEgUlBDIGRlZmluZWQgaW4gUkZDODU3 Mi48L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPC9k aXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+W21qMV0gU3RpcHVsYXRpbmcg YSBIVFRQcyBjaGFubmVsIHdvcmtzIGZvciB0aGUgSFRUUFMgbm90aWYgZHJhZnQuIEJ1dCB3aGF0 IHdpbGwgb3RoZXIgdHJhbnNwb3J0IHR5cGUgZHJhZnRzIHVzZT8gZS5nLiB0aGUgVURQIG5vdGlm IGRyYWZ0Pz8mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PGJyPg0KPHNwYW4gc3R5bGU9ImNv bG9yOiMxRjQ5N0QiPltRaW5dOkkgdGhpbmsgVURQIG5vdGlmIGRyYWZ0IGNvdWxkIGFsc28gdXNl IEhUVFBzIGNoYW5uZWwgdG8gY2FycnkgY2FwYWJpbGl0eSBpbmZvcm1hdGlvbiBmcm9tIHRoZSBz ZXJ2ZXIgdG8gdGhlIGNsaWVudCBpbiB0aGUgZm9ybSBvZiBZQU5HIGluc3RhbmNlIGZpbGUgZm9y bWF0Ljwvc3Bhbj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFy Z2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzFG NDk3RCI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1VUyI+UGxlYXNlIG5vdGUgdGhhdCBSRkMgODYzOSByZWNlaXZlcnMgZG8g bm90IGhhdmUgdG8gYmUgTkVUQ09ORi9SRVNUQ09ORiBzZXJ2ZXJzIGZvciBjb25maWd1cmVkIHN1 YnNjcmlwdGlvbnMuIFJGQyA4NjM5LCBTZWN0aW9uIDIuNyBkZWZpbmVzIHRoZSBjb250cm9sIG1l c3NhZ2VzIHN1Y2ggYXMgJmx0O3N1YnNjcmlwdGlvbi1zdGFydGVkJmd0OyB1c2luZyBvbmUtd2F5 IFlBTkcNCjwvc3Bhbj7igJw8c3BhbiBsYW5nPSJFTi1VUyI+bm90aWZpY2F0aW9uPC9zcGFuPuKA nTxzcGFuIGxhbmc9IkVOLVVTIj4gc3RhdGVtZW50cy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5n PSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5bUWlu XTogVW5kZXJzdGFuZCB0aGlzIGNhc2UsIERvIHlvdSB0aGluayB3ZSBzaG91bGQgZGVmaW5lIGEg bmV3IG5vdGlmaWNhdGlvbiBpbiB0aGUgZGF0YS1leHBvcnQtY2FwYWJpbGl0aWVzIGRyYWZ0IGlu c3RlYWQgb2YgY29uc2lkZXJpbmcgdG8gZGVmaW5lIFJQQz88L3NwYW4+PHNwYW4gbGFuZz0iRU4t VVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxv Y2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1VUyI+W21qMV0gSSBkbyBub3QgdW5kZXJzdGFuZCB0aGlzIHN0YXRl bWVudC4gQ2FuIHlvdSBleHBhbmQ/PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxicj4NCjxzcGFuIHN0 eWxlPSJjb2xvcjojMUY0OTdEIj5bUWluXTogSSBhbSBub3Qgc3VyZSB0aGUgUlBDIGlzIGEgZ29v ZCBkZXNpZ24gY2hvaWNlLCBJIHRoaW5rIHdlIGNvdWxkIGhhdmUgMyBvcHRpb25zPC9zcGFuPjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJj b2xvcjojMUY0OTdEIj7vvIg8c3BhbiBsYW5nPSJFTi1VUyI+YTwvc3Bhbj7vvIk8c3BhbiBsYW5n PSJFTi1VUyI+UmVwb3J0IGNhcGFiaWxpdHkgaW5mb3JtYXRpb24gZnJvbSB0aGUgSFRUUHMgc2Vy dmVyIG9yIHRoZSBIVFRQcyBjbGllbnQgYXQgcnVuLXRpbWUgb3IgaW1wbGVtZW50YXRpb24tIHRp bWUsIHBlciB0aGUgWUFORyBJbnN0YW5jZSBEYXRhIEZpbGUgRm9ybWF0LjxvOnA+PC9vOnA+PC9z cGFuPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6 Ni4wcHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+KGIpIERlZmlu ZSBvbmUgd2F5IFlBTkcgbm90aWZpY2F0aW9uIHNpbWlsYXIgdG8gJmx0O3N1YnNjcmlwdGlvbi1z dGFydGVkJmd0OyB0aGF0IGlzIHNlbnQgZnJvbSB0aGUgc2VydmVyIHRvIHRoZSBjbGllbnQ8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRl bnQ6Ni4wcHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+KGMpIFJl cG9ydCBjYXBhYmlsaXR5IGluZm9ybWF0aW9uIG9ubHkgZnJvbSBORVRDT05GIHNlcnZlciB1c2lu ZyBZQU5HIG1vZGVsIGRlZmluZSBpbiBkYXRhLWV4cG9ydC1jYXBhaWJsaXRpZXMgZHJhZnQ8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkkgdGhpbmsgKGIpIG9ubHkgYWxsb3cgdGhlIHNlcnZl ciBhZHZlcnRpc2UgdGhlIHNlcnZlciBjYXBhYmlsaXR5IHRvIHRoZSBjbGllbnQgYnV0IGRvZXMg bm90IGFsbG93IHRoZSBjbGllbnQgaXNzdWUgbm90aWZpY2F0aW9uIGFuZCBhZHZlcnRpc2UgY2xp ZW50IGNhcGFiaWxpdHkgdG8gdGhlIHNlcnZlcg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMUY0OTdE Ij4oYykgaXMgc29tZXRoaW5nIHlvdSBlbnZpc2lvbiBob3cgaXQgaXMgdXNlZCwgdGhlIGxpbWl0 YXRpb24gaXMgdG8gcmVxdWlyZSBORVRDT05GIHNlcnZlciB0byBiZSBzdXBwb3J0ZWQgYnkgdGhl IHJlY2VpdmVyIG9yIHRoZSBjbGllbnQsIGJ1dCB0aGlzIG9wdGlvbiBpcyBub3Qgd2hhdCB3ZSBw cm9wb3NlZCBpbiB0aGUgZGF0YS1leHBvcnQtY2FwYWJpbGl0aWVzDQogZHJhZnQuPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJjb2xvcjojMUY0OTdEIj5UaGUgc29sdXRpb24gd2UgcHJvcG9zZWQgaXMgKGEpIHdoaWNo IGFsbG93cyByZXBvcnQgY2FwYWJpbGl0eSBpbmZvcm1hdGlvbiBlaXRoZXIgZnJvbSB0aGUgU2Vy dmVyIG9yIHRoZSBjbGllbnQgdXNpbmcgWUFORyBJbnN0YW5jZSBkYXRhIGZpbGUuIEhvcGUgdGhp cyBjbGFyaWZpZXMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6YmxhY2siPk1haGVzaCBKZXRoYW5hbmRhbmk8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOmJsYWNrIj48YSBocmVmPSJtYWlsdG86bWpldGhh bmFuZGFuaUBnbWFpbC5jb20iPm1qZXRoYW5hbmRhbmlAZ21haWwuY29tPC9hPjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImNvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PHNw YW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_d3e28c3359b34352b42c6f99ce881405huaweicom_-- From nobody Tue Jun 1 22:56:13 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4DF123A3674 for ; Tue, 1 Jun 2021 22:56:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, MSGID_FROM_MTA_HEADER=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=jacobsuniversity.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G6wMM8pJDuTu for ; Tue, 1 Jun 2021 22:56:03 -0700 (PDT) Received: from EUR03-AM5-obe.outbound.protection.outlook.com (mail-eopbgr30068.outbound.protection.outlook.com [40.107.3.68]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1A2FF3A3673 for ; Tue, 1 Jun 2021 22:56:02 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=aQR660JhchmZaDXIGqn+6vGWMS7NXGbLyXwVGQq8xdYzSzaZ3ISBOpljcSVXgGq7vGRyS7CZIaDawFFqn798cglUMredPBtpzGOPPSuuokpsuDRX9CExfK1IyFpr8RXWcJv0HCoJAJVkMmBwENxFXyQjeJGjYUU/AkYHcutYIxV2s3SUXjRDZkIr0YYUNmMyH1HcOkR2Hh1CZrrkZQA6Vk44zyFnVGL+L32Kjxb1PxvJJtfbC1KHleEpqo4EIbHIbwH9XpP0cOuKorUF3Sr5mJvfuQZ8tITtAiWYGU9dCtmkvSJO4E25jMhTPQrk55c4ZJVhnCPeC/CTOqUUkjGtzw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=beTTFv+Jbxl1oBKbZ2vd8XqXEf7vwO7jGGCcSvqjlGQ=; b=DYxhrRvKbFztVwJc4cSEbuAP2TvgF//q27Bctsuh2+8tmVF1NZvG68fhdIQ1zHfha1qNdXYeVVzMrpZYWkASDdwbBicnQtodC+ePCKIrlCAu7DCF6yvpoUmaIm8Y/fNP46NUrrp1hqzw6+MvD+v+bpfqiLeFf7w4HfgyTsTShtXvceV2kPx+Sw1TBQzfv9sXLTnb9eKDljZ/aRdziuXtelFVrppLpaFRee9WYhLgtABRYTCPdPwP1L2SOeXjJ2toXbZigjBZimOcxwau1dCUyZVnaDV8BZiQEJtyWLeQ7r10nbasOWjy1Tu9wyU7sWI/OuzRqZ6XXxBQ5xEKIedd9A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=jacobs-university.de; dmarc=pass action=none header.from=jacobs-university.de; dkim=pass header.d=jacobs-university.de; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jacobsuniversity.onmicrosoft.com; s=selector2-jacobsuniversity-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=beTTFv+Jbxl1oBKbZ2vd8XqXEf7vwO7jGGCcSvqjlGQ=; b=bBbhiYXyGBWiWSvvY8VtZadVTQ+UmIjlUX6w4VzYssi1dbau4A272dMdgM2OuboYrWETS1lqsFUXw2Z6YdM96+j8P6KiTaNGPIbX3fSUw0X6l1YauJl3dh0iYzkAZOOZa4H5hBQ/HWZ8q8BoAvU8A32sgrc0viVPJlnYie89OPw= Authentication-Results: watsen.net; dkim=none (message not signed) header.d=none;watsen.net; dmarc=none action=none header.from=jacobs-university.de; Received: from AM0P190MB0641.EURP190.PROD.OUTLOOK.COM (2603:10a6:208:194::23) by AM9P190MB1060.EURP190.PROD.OUTLOOK.COM (2603:10a6:20b:26b::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4173.21; Wed, 2 Jun 2021 05:55:59 +0000 Received: from AM0P190MB0641.EURP190.PROD.OUTLOOK.COM ([fe80::fd93:9b33:ac92:ea58]) by AM0P190MB0641.EURP190.PROD.OUTLOOK.COM ([fe80::fd93:9b33:ac92:ea58%8]) with mapi id 15.20.4195.020; Wed, 2 Jun 2021 05:55:59 +0000 Date: Wed, 2 Jun 2021 07:55:58 +0200 From: Juergen Schoenwaelder To: Kent Watsen Cc: Andy Bierman , "netconf@ietf.org" Message-ID: <20210602055558.m4qzan73lt6ebnmt@anna.jacobs.jacobs-university.de> Reply-To: Juergen Schoenwaelder Mail-Followup-To: Kent Watsen , Andy Bierman , "netconf@ietf.org" References: <162197047222.6755.5719177112947542346@ietfa.amsl.com> <01000179af378320-73241cbb-c5a4-45dd-8c87-03ff603cc2f0-000000@email.amazonses.com> <01000179c9c98396-98e37454-f6bd-4753-92a4-0c8911d102d9-000000@email.amazonses.com> Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <01000179c9c98396-98e37454-f6bd-4753-92a4-0c8911d102d9-000000@email.amazonses.com> X-Originating-IP: [212.201.44.244] X-ClientProxiedBy: PR3P251CA0023.EURP251.PROD.OUTLOOK.COM (2603:10a6:102:b5::10) To AM0P190MB0641.EURP190.PROD.OUTLOOK.COM (2603:10a6:208:194::23) MIME-Version: 1.0 X-MS-Exchange-MessageSentRepresentingType: 1 Received: from localhost (212.201.44.244) by PR3P251CA0023.EURP251.PROD.OUTLOOK.COM (2603:10a6:102:b5::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4173.21 via Frontend Transport; Wed, 2 Jun 2021 05:55:59 +0000 X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: e73baa5c-57d6-43fa-5a27-08d9258b1898 X-MS-TrafficTypeDiagnostic: AM9P190MB1060: X-MS-Exchange-Transport-Forked: True X-Microsoft-Antispam-PRVS: X-MS-Oob-TLC-OOBClassifiers: OLM:8882; X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0P190MB0641.EURP190.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(396003)(39840400004)(136003)(346002)(366004)(376002)(86362001)(316002)(786003)(66556008)(66476007)(38350700002)(6486002)(54906003)(186003)(38100700002)(8676002)(26005)(66946007)(4744005)(956004)(2906002)(5660300002)(16526019)(6496006)(52116002)(3450700001)(1076003)(4326008)(478600001)(8936002); DIR:OUT; SFP:1101; X-MS-Exchange-AntiSpam-MessageData: =?utf-8?B?WmhSKy9XTXhyeU1zU253SEdRTnUxbWJXVll0VFczbk5SMVpCbDB4SUlyWXln?= =?utf-8?B?UFdPdTI2YVZkclllRCt4eDMvZk1VT2tQSW9HT2U3VjBiZ3dPbzhzWEtKVmZ1?= =?utf-8?B?dm5GZFFtY3lqdTlvNWZxVEtqaVRpZEswWGpUQk43MkUyYTRQWGpKeE5EN2Rx?= =?utf-8?B?Rm5PQWUrbzBWYWxYdUdma2c4ZytRbUtRYjU0djJ3V21yYkRIZ2VMZHQvUytM?= =?utf-8?B?dEtZSFZHRnVoSFZsOVRtUEpKMDdvZmZWdUxWd1pFVmVtcnM4NVJjU29NTEVY?= =?utf-8?B?enVjWUNLV2x2OHJ0TExkNGZIOUpnc2FzRDNyQ0hVVUlXeVJLZjNBUWZXUmYz?= =?utf-8?B?RUoxVWMwQnZJcmZmY0d0M3ZVRkVJbkFiU2RLRCtKZzFVOUJQaFBHc3BLZTgw?= =?utf-8?B?ZUk0aEEzYkRsVDRGbkczOUtFbEdVSEVzQ21LeGc1b3UzSVNwNEpES2hQZnpv?= =?utf-8?B?azR2c0l1QzFhZFFiaU96eTRKbnVmTkdZSXZybEMrVmsrcS8xSTJIMHZsTXFz?= =?utf-8?B?RTc5YWpoN2VNVFAzUVN0L3RhOHFqaHZUL2RiU2xrUUFVRTh2aUNoMlpidHJD?= =?utf-8?B?YnIvcThPM3VRdXhrYjlreC9tZ2JRc2VtWXViRFNFV2dBL3FGZUdtaGkySzJE?= =?utf-8?B?eC9zRks3RkZPV0pURm5mOGJNZmxJV2J4ZnRkV0s0NzVUcWpnNGd1TzljMXlH?= =?utf-8?B?cXNyK01lOEIzVWxGN2NOSFlrTkNyVFdTSFZOZTRpTFZ5RkxSQmxlak5GQm8y?= =?utf-8?B?KzlHdjJOK0Nxb1F3aFBrKzdRRW9zMnJZZElCMWJJeWQ1Q2pKRFlKSUpzMjhi?= =?utf-8?B?N25ka0RRVk9MZ2lJU3pxSHlsUGNMUk9FMGdubm9NY0RrZDlHeEFjVkYzUDhF?= =?utf-8?B?RjFQSkNvdTAxaXVqOUcwVkNnRTkreWxtZ0lxTjNlNkdzdUo1WTdRbTFGMWQr?= =?utf-8?B?UXk5b3k5djE4cU5DNDVMKzZuemtnWStPa2FOK3JMaE5nVGZRSTN0dnUrOTdS?= =?utf-8?B?MUZEMEJkMHpaYllnZlJLU3RCV3ZSdnh5QVUwMjgzZVFNbmVlMTZPRCt5Ynkr?= =?utf-8?B?WHJJQjhxRmpwTFdzZC9UYlVMQWlqU2NUUjVmL1Y4SXVtSldjcDNYbzJKUVVJ?= =?utf-8?B?eVplYkZwSXlLOHkxc1BnMVVXRU9wR0lDdzhrQlNCR05ybmphY3U5N0dnTHZF?= =?utf-8?B?bGVIQTVmTjlGdmRJbWg1QzM2OGJlN0lnblQzdGtnbnFyM0VncFBNUHhBSU01?= =?utf-8?B?TWdVajRxZjVvVk55aGZlb1B2YmJvVGw2RElXb2Q0QkFiVmVpenloUVk4K1Mv?= =?utf-8?B?d2s5M0tHd3ZicTQva3dOZitOemRhdldqamNZcEdFcWRyZzVYZzM2eTdNTExp?= =?utf-8?B?V2N1a25Eb1ljeEJFZndvd0pRb2ZyK0YrZzNZYzVpSzFCbENlUWRCc2ptLzhu?= =?utf-8?B?RmVHdHd3YlhlK2ZPdDZkRm12azFzYldrRlV6RG52dFczZVJTSFZVbmsrMmdz?= =?utf-8?B?QlVpOWdtQXdRakQ2Um5XZXB4U3BCUWFSYnFNOE4zam1rVVVJMFRBYWV6MWN1?= =?utf-8?B?TWlFZ3h0OGNrbDNpb21memVPY255OEFTMDdxQm5wSm01M1lOeXRkOTRHeUVS?= =?utf-8?B?NUZKRzI5MHRhaDdSNHp1c2Y4RkxUUHg5K3NYMVZjZmZ1WVpEaVNLa3FKaGh2?= =?utf-8?B?K1ZjMEtNbFQ3aTFnbWcwOVdGM01OdWF4R2NkajVyMnRMSVhwQjl6ZHdwbTlj?= =?utf-8?Q?K2qkVXsgwfJJrPFs8U16ARAnwE6IKGHJOmT00W1?= X-OriginatorOrg: jacobs-university.de X-MS-Exchange-CrossTenant-Network-Message-Id: e73baa5c-57d6-43fa-5a27-08d9258b1898 X-MS-Exchange-CrossTenant-AuthSource: AM0P190MB0641.EURP190.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Jun 2021 05:55:59.5404 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: f78e973e-5c0b-4ab8-bbd7-9887c95a8ebd X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: oOEB6/vcWzfRXx4BcnVR7Hw8Lui14OUsIBybUcBCybrKouZIdSOiz02kTW21fuYgN7de9pmo7phms7UWCi+NJj7amX9abnmKY1U7m9PwkU0= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM9P190MB1060 Archived-At: Subject: Re: [netconf] [Last-Call] Yangdoctors last call review of draft-ietf-netconf-ssh-client-server-24 X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Jun 2021 05:56:10 -0000 On Tue, Jun 01, 2021 at 10:54:57PM +0000, Kent Watsen wrote: > > It seems that the following might works: > > - In ietf-ssh-client, rename "userauth-*" to "client-ident-*†> - since client-side config, the “userauth†nomenclature is not as strong > - aligns “client-ident†usage with the “tls†and “http†drafts > > - In ietf-ssh-server, rename "userauth-*" to "local-user-auth-*†> - makes sense as nodes depend from a container called “users†that > has a if-feature statement “local-users-supported†> - thus, can simultaneously be parsed as "[local-user]-auth-*†> and "local-[user-auth]-*†> > I’ll make this change if no objections. I have not understood which problem this renaming solves. SSH authentication mechanisms have well established names, why is it useful to invent different names? /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1 | 28759 Bremen | Germany Fax: +49 421 200 3103 From nobody Wed Jun 2 03:14:04 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C25463A3DAF; Wed, 2 Jun 2021 03:13:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.596 X-Spam-Level: X-Spam-Status: No, score=-2.596 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id q5xCkZBe90AP; Wed, 2 Jun 2021 03:13:47 -0700 (PDT) Received: from smtpout01-ext1.partage.renater.fr (smtpout01-ext1.partage.renater.fr [194.254.240.32]) by ietfa.amsl.com (Postfix) with ESMTP id 895FE3A3D9B; Wed, 2 Jun 2021 03:13:45 -0700 (PDT) Received: from zmtaout01.partage.renater.fr (zmtaout01.partage.renater.fr [194.254.240.30]) by smtpout10.partage.renater.fr (Postfix) with ESMTP id 907B061A4B; Wed, 2 Jun 2021 12:13:39 +0200 (CEST) Received: from zmtaout01.partage.renater.fr (localhost [127.0.0.1]) by zmtaout01.partage.renater.fr (Postfix) with ESMTPS id 835671A0051; Wed, 2 Jun 2021 12:13:39 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by zmtaout01.partage.renater.fr (Postfix) with ESMTP id 7C82F1A006E; Wed, 2 Jun 2021 12:13:39 +0200 (CEST) X-Virus-Scanned: amavisd-new at zmtaout01.partage.renater.fr Received: from zmtaout01.partage.renater.fr ([127.0.0.1]) by localhost (zmtaout01.partage.renater.fr [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id ILs70hmuiKZa; Wed, 2 Jun 2021 12:13:39 +0200 (CEST) Received: from zstore-b0-031.partage.renater.fr (zstore-b0-031.partage.renater.fr [10.254.241.115]) by zmtaout01.partage.renater.fr (Postfix) with ESMTP id 465D21A0051; Wed, 2 Jun 2021 12:13:39 +0200 (CEST) Date: Wed, 2 Jun 2021 12:13:39 +0200 (CEST) From: Alex Huang Feng To: Kent Watsen Cc: draft-ietf-netconf-https-notif , pierre francois , Axel Rosenstiehl , netconf@ietf.org Message-ID: <218761490.2312562.1622628819191.JavaMail.zimbra@insa-lyon.fr> In-Reply-To: <01000179ae5debf2-86973cf9-70d7-4601-b901-962d8ca86334-000000@email.amazonses.com> References: <1448778391.413238.1622108131158.JavaMail.zimbra@insa-lyon.fr> <01000179ae5debf2-86973cf9-70d7-4601-b901-962d8ca86334-000000@email.amazonses.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="=_994973cb-c199-485d-9219-e90d094edda2" X-Mailer: Zimbra 8.8.8_GA_3008 (ZimbraWebClient - SAF14.1 (Mac)/8.8.8_GA_1703) Thread-Topic: RFC8639 capability on https-notif receiver implementation Thread-Index: JsbndvkKWUEAgqSQcQsURgEmZ63qFA== X-Renater-Ptge-SpamState: clean X-Renater-Ptge-SpamScore: -100 X-Renater-Ptge-SpamCause: gggruggvucftvghtrhhoucdtuddrgeduledrvdeljedgvdehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecutffgpfetvffgtfenuceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmnecujfgurhepfffhvffkjghfufggtgfothesrgdttgerredtjeenucfhrhhomheptehlvgigucfjuhgrnhhgucfhvghnghcuoegrlhgvgidrhhhurghnghdqfhgvnhhgsehinhhsrgdqlhihohhnrdhfrheqnecuggftrfgrthhtvghrnhepteevteeiheegjeevudehhfduteffheetuddvgeeiudefvdffuedvffdugeevjeeunecuffhomhgrihhnpehivghtfhdrohhrghenucfkphepuddtrddvheegrddvgedurdduudehnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehinhgvthepuddtrddvheegrddvgedurdduudehpdhhvghlohepiihsthhorhgvqdgstddqtdefuddrphgrrhhtrghgvgdrrhgvnhgrthgvrhdrfhhrpdhmrghilhhfrhhomheptehlvgigucfjuhgrnhhgucfhvghnghcuoegrlhgvgidrhhhurghnghdqfhgvnhhgsehinhhsrgdqlhihohhnrdhfrheqpdhrtghpthhtohepkhgvnhhtodhivghtfhesfigrthhsvghnrdhnvghtpdhrtghpthhtohepughrrghfthdqihgvthhfqdhnvghttghonhhfqdhhthhtphhsqdhnohhtihhfsehivghtfhdrohhrghdprhgtphhtthhopehpihgvrhhrvgdrfhhrrghntghoihhssehinhhsrgdq lhihohhnrdhfrhdprhgtphhtthhopegrgigvlhdrrhhoshgvnhhsthhivghhlhesihhnshgrqdhlhihonhdrfhhrpdhrtghpthhtohepnhgvthgtohhnfhesihgvthhfrdhorhhg Archived-At: Subject: Re: [netconf] RFC8639 capability on https-notif receiver implementation X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Jun 2021 10:14:00 -0000 --=_994973cb-c199-485d-9219-e90d094edda2 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi Kent,=20 Responses below.=20 Alex Huang=20 De: "Kent Watsen" =20 =C3=80: "Alex Huang Feng" =20 Cc: "draft-ietf-netconf-https-notif" , "pierre francois" , "Axel Rosenstiehl" <= axel.rosenstiehl@insa-lyon.fr>, netconf@ietf.org=20 Envoy=C3=A9: Jeudi 27 Mai 2021 17:07:46=20 Objet: Re: RFC8639 capability on https-notif receiver implementation=20 [CC-ing NETCONF WG mailing list]=20 Hi Alex,=20 Thanks for reaching out!=20 I am part of Unyte team and we are now implementing and testing the https-n= otif protocol on the draft [ https://datatracker.ietf.org/doc/html/draft-ie= tf-netconf-https-notif-08 | https://datatracker.ietf.org/doc/html/draft-iet= f-netconf-https-notif-08 ]=20 Always good to know about independent implementations in the works.=20 [Alex]: Are there any others https-notif independent implementations apart = from us ? Any vendor or existant publisher/receiver ?=20 BQ_BEGIN We have implemented a library in C for the receiver and are planning to pub= lish it as an open-source receiver implementation soon.=20 BQ_END Nice contribution - which capabilities will it support?=20 [Alex]: We are now supporting both encodings json and xml. I am still tryin= g to understand the rfc-8639 state machine capability but still not underst= and why should we save a copy of the state machine on the receiver side. Mo= reover, for configured notifications, the rfc-8539 capability is not necess= ary right ?=20 [be aware that there is an ongoing discussion regarding how capabilities sh= ould be supported: [ https://mailarchive.ietf.org/arch/msg/netconf/JmjttafV= mRDaFzeLLNlYgrqfZWw | https://mailarchive.ietf.org/arch/msg/netconf/Jmjttaf= VmRDaFzeLLNlYgrqfZWw ] ]=20 [Alex]: In my opinion, the capabilities export should be independent from t= he "transport" notifications draft. Let's discuss it on the other thread.= =20 BQ_BEGIN We have some questions about the rfc-8639 capability (supporting the state = machine defined in the rfc 8639 ).=20 As I understood in the draft, https-notif receiver is not assumed to be a n= etconf/restconf server=20 BQ_END Correct.=20 BQ_BEGIN and as I read in the rfc-8639, the state machine is implemented in the publ= isher.=20 I'd like to know how does this capability impacts the receiver implementati= on.=20 BQ_END Hopefully the RFC 8639 authors can chime in, but my understanding is that t= he various notifications (subscription-started, subscription-modified, etc.= ) enable the receiver to maintain a local copy of the state machine, in ord= er to know how to internally-dispatch notifications?=20 [Alex]: Internally dispatch to whom ? The receiver/client has already recei= ved the notification at this moment right ? So it has to "deal" with at thi= s moment ? Or I misunderstood the notification flow ?=20 BQ_BEGIN In the draft:=20 Note that, for [ https://datatracker.ietf.org/doc/html/rfc8639 | RFC 8639 ]= configured subscriptions, the very first notification must be the "subscription-started" notification.=20 Does this mean that on the receiver side, the first "/relay-notification" n= otification we receive is the "subscription-started" rpc body ?=20 BQ_END Yes.=20 BQ_BEGIN Do we need to save a state in the receiver for later interaction ? Or the R= FC 8639 support is just the first notification with the rpc ?=20 BQ_END See previous comment, but my understanding is tenuous and hope others to ch= ime in.=20 BQ_BEGIN Another observation on the draft, in the example 3.4, the json body for the= GET capabilities is not valid (a colon is missed after the " receiver-capa= bilities").=20 BQ_END Thanks! Normally we run all code blocks through validation, but some of the= code blocks in this draft elude that given the use of a pseudo YANG module= ...=20 BQ_BEGIN Looking forward to hearing from you,=20 Alex Huang Feng=20 INSA de Lyon | INSA T=C3=A9l=C3=A9com=20 BQ_END K.=20 --=_994973cb-c199-485d-9219-e90d094edda2 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable
Hi Kent,

Responses= below.

Alex Huang

De: "Kent= Watsen" <kent+ietf@watsen.net>
=C3=80: "Alex Huang Feng" &= lt;alex.huang-feng@insa-lyon.fr>
Cc: "draft-ietf-netconf-https= -notif" <draft-ietf-netconf-https-notif@ietf.org>, "pierre francois" = <pierre.francois@insa-lyon.fr>, "Axel Rosenstiehl" <axel.rosenstie= hl@insa-lyon.fr>, netconf@ietf.org
Envoy=C3=A9: Jeudi 27 Mai 2= 021 17:07:46
Objet: Re: RFC8639 capability on https-notif receive= r implementation

[CC-ing NETCONF WG mailing list]


Hi Alex,

Thanks for reaching out!


I am part of Unyte= team and we are now implementing and testing the https-notif protocol on t= he draft https://datatracker.iet= f.org/doc/html/draft-ietf-netconf-https-notif-08

Always= good to know about independent implementations in the works.
[Alex]: Are there any others https-notif indep= endent implementations apart from us ? Any vendor or existant publisher/rec= eiver ?
We have implemented a library in C for the receiver and are pla= nning to publish it as an open-source receiver implementation soon.

Nice contribution  - which capabilities will it support?
[Alex]: We are now supporting both encodings json and xml. I am still= trying to understand the rfc-8639 state machine capability but still not u= nderstand why should we save a copy of the state machine on the receiver si= de. Moreover, for configured notifications, the rfc-8539 capability is not = necessary right ?

[be aware t= hat there is an ongoing discussion regarding how capabilities should be sup= ported: https://mailarchive.ie= tf.org/arch/msg/netconf/JmjttafVmRDaFzeLLNlYgrqfZWw]

[Alex]: In my opinion, the capabilities export = should be independent from the "transport" notifications draft. Let's discu= ss it on the other thread.
We have some questions about the rfc-8639 capability (sup= porting the state machine defined in the rfc 8639).
As I understood in the draft, = https-notif receiver is not assumed to be a netconf/restconf server

Correct.


and as I read in the rfc= -8639, the state machine is implemented in the publisher.
I'd like to know how does this capability impacts the receiver implem= entation.
=
Hopefully the RFC 8639 authors can chime in, but = my understanding is that the various notifications (subscription-started, s= ubscription-modified, etc.) enable the receiver to maintain a local copy of= the state machine, in order to know how to internally-dispatch notificatio= ns?
[Alex]: Internally dispatch to whom ? The receiver/client has= already received the notification at this moment right ? So it has to "dea= l" with at this moment ? Or I misunderstood the notification flow ?

In the draft: 
Note that, for RFC 8639 configured subscriptions, the very first
   notification must be the "subscription-started" notification.

Does this mean that on the receiver side, = the first "/relay-notification" notification we receive is the "subscriptio= n-started" rpc body ?

Yes.


Do we need to save = a state in the receiver for later interaction ? Or the RFC 8639 support is = just the first notification with the rpc ?
=

See pre= vious comment, but my understanding is tenuous and hope others to chime in.=


Another observation on the draft, in the example 3.4, the = json body for the GET capabilities is not valid (a colon is missed after th= e "receiver-capabilities").

Thanks!  Normally we run all code blocks through validat= ion, but some of the code blocks in this draft elude that given the use of = a pseudo YANG module...


Looking forward to hearing from you= ,

Alex Huang F= eng
INSA de Lyon | INSA T=C3=A9l=C3=A9com

K.



--=_994973cb-c199-485d-9219-e90d094edda2-- From nobody Wed Jun 2 07:34:36 2021 Return-Path: <01000179cd25b935-41381155-4d11-4e36-a6ec-b71b55fde875-000000@amazonses.watsen.net> X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C08FE3A03EF for ; Wed, 2 Jun 2021 07:34:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qsGFKv5vL153 for ; Wed, 2 Jun 2021 07:34:33 -0700 (PDT) Received: from a8-88.smtp-out.amazonses.com (a8-88.smtp-out.amazonses.com [54.240.8.88]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7C67D3A0332 for ; Wed, 2 Jun 2021 07:34:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1622644472; h=Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc:Content-Transfer-Encoding:Message-Id:References:To:Feedback-ID; bh=z+XZX8YwJATQRiSBn5APs4zqw4s2sAbCjsGUPPfqU14=; b=Pi0cs3ZMvUy5V1Hc0SijSMTmQCwuQCMsrT81+BL0OTgKkCECUltJfaLLmoMyUnZI OGwbqQy/Tua6yagl6fzFxwjW6N/pFH/YHY2GDRqOkViyY5bHnbXeUQj2BclgRQ4xSUZ 7LxSU2k9HKdpUrOiM2sSO20isZnidgIrENRJyJ7g= Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.60.0.2.21\)) From: Kent Watsen In-Reply-To: <20210602055558.m4qzan73lt6ebnmt@anna.jacobs.jacobs-university.de> Date: Wed, 2 Jun 2021 14:34:32 +0000 Cc: Andy Bierman , "netconf@ietf.org" Content-Transfer-Encoding: quoted-printable Message-ID: <01000179cd25b935-41381155-4d11-4e36-a6ec-b71b55fde875-000000@email.amazonses.com> References: <162197047222.6755.5719177112947542346@ietfa.amsl.com> <01000179af378320-73241cbb-c5a4-45dd-8c87-03ff603cc2f0-000000@email.amazonses.com> <01000179c9c98396-98e37454-f6bd-4753-92a4-0c8911d102d9-000000@email.amazonses.com> <20210602055558.m4qzan73lt6ebnmt@anna.jacobs.jacobs-university.de> To: Juergen Schoenwaelder X-Mailer: Apple Mail (2.3654.60.0.2.21) Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES X-SES-Outgoing: 2021.06.02-54.240.8.88 Archived-At: Subject: Re: [netconf] [Last-Call] Yangdoctors last call review of draft-ietf-netconf-ssh-client-server-24 X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Jun 2021 14:34:35 -0000 >> It seems that the following might works: >>=20 >> - In ietf-ssh-client, rename "userauth-*" to "client-ident-*=E2=80=9D >> - since client-side config, the =E2=80=9Cuserauth=E2=80=9D = nomenclature is not as strong >> - aligns =E2=80=9Cclient-ident=E2=80=9D usage with the =E2=80=9Ctl= s=E2=80=9D and =E2=80=9Chttp=E2=80=9D drafts >>=20 >> - In ietf-ssh-server, rename "userauth-*" to "local-user-auth-*=E2=80=9D= >> - makes sense as nodes depend from a container called = =E2=80=9Cusers=E2=80=9D that >> has a if-feature statement =E2=80=9Clocal-users-supported=E2=80=9D= >> - thus, can simultaneously be parsed as "[local-user]-auth-*=E2=80= =9D >> and "local-[user-auth]-*=E2=80=9D >>=20 >> I=E2=80=99ll make this change if no objections. >=20 > I have not understood which problem this renaming solves. SSH > authentication mechanisms have well established names, why is it > useful to invent different names? Focus on the method names: "publickey" REQUIRED "password" OPTIONAL "hostbased" OPTIONAL "none" NOT RECOMMENDED The =E2=80=9Cuserauth=E2=80=9D string isn=E2=80=99t important. K. From nobody Wed Jun 2 07:39:55 2021 Return-Path: <01000179cd2a8e75-b2096264-8d0f-41b0-8164-4941ad744ce2-000000@amazonses.watsen.net> X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3B48E3A05A7; Wed, 2 Jun 2021 07:39:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G1ha0GmVjm60; Wed, 2 Jun 2021 07:39:50 -0700 (PDT) Received: from a48-94.smtp-out.amazonses.com (a48-94.smtp-out.amazonses.com [54.240.48.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 32C383A0593; Wed, 2 Jun 2021 07:39:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1622644789; h=Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc:Content-Transfer-Encoding:Message-Id:References:To:Feedback-ID; bh=0lEjlM/DSzKh0RDtDT2YiMV7Cf3/KW62dykBvGntFSE=; b=CIYwfxWbwzKwqYbayflOIx2kWPLTtybdkKOrJ9/K8U2NkQ603yYzBNKzLAZc290g gL6pXdddRqIeyrdCIAyuJlY/QPVtvnrXUuUW9DWwIdFnnmGZnoxpSSF4b+BpzeUtgjt MIqsZl8A9iy31zq0ZlUQ0HBmabs35t6ZZ/mhqelw= Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.60.0.2.21\)) From: Kent Watsen In-Reply-To: <218761490.2312562.1622628819191.JavaMail.zimbra@insa-lyon.fr> Date: Wed, 2 Jun 2021 14:39:48 +0000 Cc: draft-ietf-netconf-https-notif , pierre francois , Axel Rosenstiehl , "netconf@ietf.org" , "Eric Voit (evoit)" Content-Transfer-Encoding: quoted-printable Message-ID: <01000179cd2a8e75-b2096264-8d0f-41b0-8164-4941ad744ce2-000000@email.amazonses.com> References: <1448778391.413238.1622108131158.JavaMail.zimbra@insa-lyon.fr> <01000179ae5debf2-86973cf9-70d7-4601-b901-962d8ca86334-000000@email.amazonses.com> <218761490.2312562.1622628819191.JavaMail.zimbra@insa-lyon.fr> To: Alex Huang Feng X-Mailer: Apple Mail (2.3654.60.0.2.21) Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES X-SES-Outgoing: 2021.06.02-54.240.48.94 Archived-At: Subject: Re: [netconf] RFC8639 capability on https-notif receiver implementation X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Jun 2021 14:39:53 -0000 [CC-ing Eric Voit] > [Alex]: Are there any others https-notif independent implementations = apart from us ? Any vendor or existant publisher/receiver ? Not that I=E2=80=99m aware of. > [Alex]: We are now supporting both encodings json and xml. I am still = trying to understand the rfc-8639 state machine capability but still not = understand why should we save a copy of the state machine on the = receiver side. Moreover, for configured notifications, the rfc-8539 = capability is not necessary right ? Maybe Eric can say? > [Alex]: In my opinion, the capabilities export should be independent = from the "transport" notifications draft. Let's discuss it on the other = thread. > We have some questions about the rfc-8639 capability (supporting the = state machine defined in the rfc 8639). It=E2=80=99s beginning to look at way to me as well, but the other = thread is discussing it=E2=80=A6 > [Alex]: Internally dispatch to whom ? The receiver/client has already = received the notification at this moment right ? So it has to "deal" = with at this moment ? Or I misunderstood the notification flow ? Hopefully Eric can explain. > Alex Huang Feng > INSA de Lyon | INSA T=C3=A9l=C3=A9com K. From nobody Wed Jun 2 08:32:29 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE1FF3A0DBC for ; Wed, 2 Jun 2021 08:32:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, MSGID_FROM_MTA_HEADER=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=jacobsuniversity.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DEDTLwlLex9X for ; Wed, 2 Jun 2021 08:32:22 -0700 (PDT) Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-eopbgr80082.outbound.protection.outlook.com [40.107.8.82]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E722A3A0DB9 for ; Wed, 2 Jun 2021 08:32:21 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=R2niv5IzPQash9yc0pjDh/DB3qY4AScnuh+l41KqQ/0ZGu7zLda5f8ILIK/fHQ6YOM2CKVefnx0VwOwTkRxcgLAE01gSRI+zYfQEhS4EzVrgXcyU64QVDrfRXGvCNFDTmM2PY9DeqerhfswXvbA3VcGpl+J52VMRctg1URJJeWwuDYaoQyDtFuoI1iqDXh0/5Vv5eqI8S2V7tPpktYwlmCFEBv55LBU469Am30BXXy1+nJgZRhdMzBfip1GVAMgasnzy9P4msuxnRRkwgy0v/15S8upi5SuOsudRdfzAoq+QIV8riVj0G7ZijlDYGgyuntz7DlOIl3a8PiSlNmzqPA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=PRjpC4oFU6TxtdazV9TQGOw7bDw2u9E5sN5mwrfaFq8=; b=bITpEhEw8sq+DUnqs9yq+UGIuLTxpVWKD7J5IZyiEZl3bmHQNm1e6YYqRKM4vuqaim7PTe2SOXv7FEETeODwaVo9j8L2DnRsg0WxFvBKxisAC0Fba8wpXUa9zxujtf6B91UylI9VEdr5lVHZa9fYThB7Y1OYLPxAPMIgi/H+TB3p7Eqj6IhP7F1orpQnUzolH/iDhI/7yOLBLWU5MpIhm6twmoVtjOgdVZXO6TpOC7NWRLBHL0jb2Scj4kPfhC87wq59yJ5Ardm2Nr2ebmkeOEyBmCQQSkS7gNfLYpZTcEN0kX2G3nPj0Cs2Kv0CwltS/VlrIzjwn3d2aJyaQd2m3Q== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=jacobs-university.de; dmarc=pass action=none header.from=jacobs-university.de; dkim=pass header.d=jacobs-university.de; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jacobsuniversity.onmicrosoft.com; s=selector2-jacobsuniversity-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=PRjpC4oFU6TxtdazV9TQGOw7bDw2u9E5sN5mwrfaFq8=; b=D4bxTZl9evEXISyXMI+s8xdZUSWm1Eq6ArxybZz/uu8Iv7zBjRuCJOzOjv539jyplVQQ0HDW8CHPFr6ES2/6BvclBPxOvVXuQEdR9ytVdyD1P37f1FetzxWPkW4HQWs7HiN1BPbvhiQ/0X5vQ7jmuR/YPCknNgQNv6dwAK45V3w= Authentication-Results: watsen.net; dkim=none (message not signed) header.d=none;watsen.net; dmarc=none action=none header.from=jacobs-university.de; Received: from AM0P190MB0641.EURP190.PROD.OUTLOOK.COM (2603:10a6:208:194::23) by AM0P190MB0705.EURP190.PROD.OUTLOOK.COM (2603:10a6:208:19e::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4173.21; Wed, 2 Jun 2021 15:32:18 +0000 Received: from AM0P190MB0641.EURP190.PROD.OUTLOOK.COM ([fe80::fd93:9b33:ac92:ea58]) by AM0P190MB0641.EURP190.PROD.OUTLOOK.COM ([fe80::fd93:9b33:ac92:ea58%8]) with mapi id 15.20.4195.020; Wed, 2 Jun 2021 15:32:18 +0000 Date: Wed, 2 Jun 2021 17:32:17 +0200 From: Juergen Schoenwaelder To: Kent Watsen Cc: Andy Bierman , "netconf@ietf.org" Message-ID: <20210602153217.4uukkxm6c2lmdqyc@anna.jacobs.jacobs-university.de> Reply-To: Juergen Schoenwaelder Mail-Followup-To: Kent Watsen , Andy Bierman , "netconf@ietf.org" References: <162197047222.6755.5719177112947542346@ietfa.amsl.com> <01000179af378320-73241cbb-c5a4-45dd-8c87-03ff603cc2f0-000000@email.amazonses.com> <01000179c9c98396-98e37454-f6bd-4753-92a4-0c8911d102d9-000000@email.amazonses.com> <20210602055558.m4qzan73lt6ebnmt@anna.jacobs.jacobs-university.de> <01000179cd25b935-41381155-4d11-4e36-a6ec-b71b55fde875-000000@email.amazonses.com> Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <01000179cd25b935-41381155-4d11-4e36-a6ec-b71b55fde875-000000@email.amazonses.com> X-Originating-IP: [212.201.44.244] X-ClientProxiedBy: AM0PR05CA0076.eurprd05.prod.outlook.com (2603:10a6:208:136::16) To AM0P190MB0641.EURP190.PROD.OUTLOOK.COM (2603:10a6:208:194::23) MIME-Version: 1.0 X-MS-Exchange-MessageSentRepresentingType: 1 Received: from localhost (212.201.44.244) by AM0PR05CA0076.eurprd05.prod.outlook.com (2603:10a6:208:136::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4195.20 via Frontend Transport; Wed, 2 Jun 2021 15:32:17 +0000 X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: a67fced3-6759-4a21-9d6e-08d925db9b19 X-MS-TrafficTypeDiagnostic: AM0P190MB0705: X-MS-Exchange-Transport-Forked: True X-Microsoft-Antispam-PRVS: X-MS-Oob-TLC-OOBClassifiers: OLM:9508; X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0P190MB0641.EURP190.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(396003)(39840400004)(136003)(346002)(366004)(376002)(86362001)(316002)(786003)(66556008)(66476007)(6486002)(54906003)(83380400001)(956004)(38100700002)(8676002)(26005)(66946007)(16526019)(186003)(5660300002)(1076003)(478600001)(52116002)(2906002)(4326008)(8936002)(3450700001)(38350700002)(6496006); DIR:OUT; SFP:1101; X-MS-Exchange-AntiSpam-MessageData: =?utf-8?B?WmVFaHBLdGhFWnJNZFBNMWxuUWczMTFiYVNXdUwwYmFRTGZZcVc5aFBIN29Y?= =?utf-8?B?ZnlCNVhvdmNUWG5pYUovZUlMTXV1dHV2bkpNR1AzWU5EZ3lmTFViZjJMYjFl?= =?utf-8?B?YmIvaXMwendJSDd6dndNZHZKSkxEUHlJTFRIQXF6aW12OTRUMGh4c0xUeTFi?= =?utf-8?B?RlVtZXlDWDRLWlR6UCs0aU1wb0pyL2FKRGY1VE41ejQ5SENvdjdzWDYyUWMv?= =?utf-8?B?VkdFU0NQUlRxZ0o1blZDK050Zy9JdHZxakdaZkRiNnp2SjhqWlN1UHRjNkJV?= =?utf-8?B?Tm5LVmxqNVdDTTlFOXNmSVJBK0theEZiZmZoeW1GNlF1a3poQ0Fod1pGVkRy?= =?utf-8?B?a3BJK0lHNTR4Wjh5a3dTY3pIM2J3WDkxOFBPb1YxQ2FUbmRXOFdqVTI4eTJq?= =?utf-8?B?MTlKWStRRW5mYzFLdDZTWGF4SDZnYTBsaWVpeVpkeUF4bUJxMGNIU2NaUnlm?= =?utf-8?B?Z1BJZElBZTVGaE42ZFc0NUs5d2dvcHNXNDdieGlMV01aQzRRekNObjlNN05R?= =?utf-8?B?d1Q3RFNTUE9nNVJ4czVseWlrbjZFT2I2ekxLRDBQenByRmtKckIxc2JzczFz?= =?utf-8?B?dHNpd2cyd09HNGhLNjV6dXRUM2l0SmZtd1p6L0JyREo2V0RVL2VDcncwdWZ1?= =?utf-8?B?RG9mQ1FEN0ljOEhpeDR3SEQzcUNMSjZCL3lkVXpQS24rMXdGNEJjZ00yd0VX?= =?utf-8?B?cjU0OGVPRVZjckpMdUVZOXBDbnhHTVhIeDVrN2kxTVNWVDR4eXY0TjBoRXFV?= =?utf-8?B?cnFjSEtmY2llNEo3NjNYNmwrR3lINDFxZDZtcVpvZW5NQzhqR011ZjZWMFYz?= =?utf-8?B?L3VseVRheUFsWDh6RXBMWlBsZi9hNEUzWmN3NDJNenZWMmk2VkJQKzhWMkhO?= =?utf-8?B?UVJyVGFHeEVQTUdCdHM4dFlnSmtaRmwwQ1BSOXhUYzhSZUdMR1lOTFJaK1RG?= =?utf-8?B?aHRlTzFFNllIQzl2MXhLKzdHNVd3TEZTbzFubS9vQVRzZDNENUxLRzk1QW14?= =?utf-8?B?dElVR0tlcTVBN29hTENNUjdubWg2ZmpzMkQwbVVSM1pMdVFaMGUzODBScHFw?= =?utf-8?B?dXlQTGRWdWNPMWdXN2JFMCtEbHBKZjU0b2tVSVM2TlpobzI2TnI5OWJiYnM4?= =?utf-8?B?MkM5dFYvbGRuN2FTMGg3VHBaVjZ5N3N6MStjZ2RNKzYzNjIrSldYYTFBSE9r?= =?utf-8?B?MHVkLzYyYWdjTnRPa3F6dWNlTkkxK1JlMHFYQ2c4Vkp3TUJHSHlUQlNuMEN2?= =?utf-8?B?RXEwbDNxbkRUdVZ3eWEvbFN2MDRFQ2lkUkFKN2liMi9BeU0reDd5dWZXTGFI?= =?utf-8?B?NnJFQkZxRHdRa2lNQ0tlTVpzZnlYQm5nR05TZ1VwUE9tbmx6RDhscDRDNGIy?= =?utf-8?B?Z01MSXNRN0g2a0JkK3c3Ry9uWDhzWXRRQUFvT1ZwRk9SWEViZEQ2Q2tnMUQr?= =?utf-8?B?TGkyNGowd3dCTGZsZkpJdTJhc1k0cVNreFFhWFBYa3J2L1gvbFVsSFhERWc5?= =?utf-8?B?U3ZEVGdKMVRtcVV1RXd5aUdqZXB5dHA2WGFReSswLzRKTzRRNGM1Tk55OHZq?= =?utf-8?B?N2MvcmVUbThsWmxMRnJkUnhRVXdPNWdZaE9RZXl2MnRFd1dkTHQvK0hvYTZW?= =?utf-8?B?UkE2Z2RZdjd0SENCN1pCanczWkRzZjByZ1o3Sm1FU1pNL2hvTXVtM2lMbm9M?= =?utf-8?B?U3RJV2lWUzBvQlA3THNrM3hkdE1wS0FOV1QxellnTzNqRWFqNDBnQ1ZBcDlQ?= =?utf-8?Q?7xoQIT3NaE1wvchq2qw1vcr0KStedV8Nli8D3bH?= X-OriginatorOrg: jacobs-university.de X-MS-Exchange-CrossTenant-Network-Message-Id: a67fced3-6759-4a21-9d6e-08d925db9b19 X-MS-Exchange-CrossTenant-AuthSource: AM0P190MB0641.EURP190.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Jun 2021 15:32:18.1262 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: f78e973e-5c0b-4ab8-bbd7-9887c95a8ebd X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: 32FzU+etj+JfxRcql8M8OiCX07D34hwJLI75GkuP2raFX2Yeet6QUfoTV6zusrDogjayXDbbAZXmaaqS+G5RG26pC55+KosCKraN8UOB5yQ= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0P190MB0705 Archived-At: Subject: Re: [netconf] [Last-Call] Yangdoctors last call review of draft-ietf-netconf-ssh-client-server-24 X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Jun 2021 15:32:27 -0000 On Wed, Jun 02, 2021 at 02:34:32PM +0000, Kent Watsen wrote: > > >> It seems that the following might works: > >> > >> - In ietf-ssh-client, rename "userauth-*" to "client-ident-*†> >> - since client-side config, the “userauth†nomenclature is not as strong > >> - aligns “client-ident†usage with the “tls†and “http†drafts > >> > >> - In ietf-ssh-server, rename "userauth-*" to "local-user-auth-*†> >> - makes sense as nodes depend from a container called “users†that > >> has a if-feature statement “local-users-supported†> >> - thus, can simultaneously be parsed as "[local-user]-auth-*†> >> and "local-[user-auth]-*†> >> > >> I’ll make this change if no objections. > > > > I have not understood which problem this renaming solves. SSH > > authentication mechanisms have well established names, why is it > > useful to invent different names? > > Focus on the method names: > > "publickey" REQUIRED > "password" OPTIONAL > "hostbased" OPTIONAL > "none" NOT RECOMMENDED > > The “userauth†string isn’t important. > I guess I have not understood the proposed edits. /js -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1 | 28759 Bremen | Germany Fax: +49 421 200 3103 From nobody Wed Jun 2 19:25:31 2021 Return-Path: <01000179cfb08608-c708dd5b-c015-4608-986f-52d5d013153b-000000@amazonses.watsen.net> X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 60F733A24FE for ; Wed, 2 Jun 2021 19:25:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.893 X-Spam-Level: X-Spam-Status: No, score=-1.893 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9_nyEatDJ1TK for ; Wed, 2 Jun 2021 19:25:24 -0700 (PDT) Received: from a8-88.smtp-out.amazonses.com (a8-88.smtp-out.amazonses.com [54.240.8.88]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7CFB73A2502 for ; Wed, 2 Jun 2021 19:25:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1622687123; h=From:Message-Id:Content-Type:Mime-Version:Subject:Date:In-Reply-To:Cc:To:References:Feedback-ID; bh=n+6mh/VUH6Tg9IWQJvBoTopJdsfxI8LNAqVRHB9rh5s=; b=flGS6sIcM/zJNf024GB1CYSF1ZCS7CE5BhvxLWM2kzltA82ayeRxR0+c++z7ndKd f2OuGNboM2me+J5WL0LBbU+/m2tWv6dyGU0yu/m2l/sD6RdflGoz/fFdANKrSSrXaxq JfVbzTrUr4ucgDhzGcyvkmGOup0otScoDdH3onqw= From: Kent Watsen Message-ID: <01000179cfb08608-c708dd5b-c015-4608-986f-52d5d013153b-000000@email.amazonses.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_537A74C5-7724-42FF-8F52-304E23144B69" Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.60.0.2.21\)) Date: Thu, 3 Jun 2021 02:25:23 +0000 In-Reply-To: <5F969C92-1A1F-4983-878F-9C222C3DEC05@cisco.com> To: "netconf@ietf.org" References: <01000179aa118e62-0d8dd2b2-f001-4ff3-9d10-4b4e15098055-000000@email.amazonses.com> <5F969C92-1A1F-4983-878F-9C222C3DEC05@cisco.com> X-Mailer: Apple Mail (2.3654.60.0.2.21) Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES X-SES-Outgoing: 2021.06.03-54.240.8.88 Archived-At: Subject: Re: [netconf] Create IANA-defined modules? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Jun 2021 02:25:30 -0000 --Apple-Mail=_537A74C5-7724-42FF-8F52-304E23144B69 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 I=E2=80=99ve been looking at this change (since no one volunteered to = help :sigh:) and noticed that Gary had feature statements for = optional-to-implement algorithms. =20 When we were doing the now-abandoned =E2=80=9Calgorithms=E2=80=9D work = in crypto-types, we defined a top-level =E2=80=9Cconfig false=E2=80=9D = tree for a list of supported algorithms. For instance, see = "supported-symmetric-algorithms=E2=80=9D here: = https://datatracker.ietf.org/doc/html/draft-ietf-netconf-crypto-types-14#a= ppendix-A.1. This seems better to me, agreed? Would an RPC be better = than a "config false" tree? Does it matter if the algorithms are defined using an enumeration or as = an identity? Gary defined them as identities, but the abandoned crypto-types work had = them as enumerations. In either case, the IANA-maintained module needs = to be *implemented* - thoughts? Note: if =E2=80=9Cidentity=E2=80=9D statements are used, and the module = is *implemented* (for the top-level =E2=80=9Csupported algorithms=E2=80=9D= data tree) does NOT mean the server supports all the algorithms, which = is true only if the algorithm appears in the =E2=80=9Csupported = algorithms=E2=80=9D list - still makes sense, or is this a compelling = reason to NOT use identities? PS: putting each algorithm into its own module that can be distinctly = =E2=80=9Cimplemented* is a non-starter. K. > On May 26, 2021, at 9:40 PM, Gary Wu (garywu) = wrote: >=20 > Hi Kent, >=20 > I'm out of the loop with the happenings in the WG, so apologies in = advance if > my views are ill-informed. >=20 > The IANA maintained module for parameters makes good sense to me. >=20 > The if-features are less important than being able to configure or = unconfigure > which ciphers are able to be used, so if one has to go, it should be = the former. > Presumably, administrators are making security considerations based on = sources > other than just what the YANG module has defined. >=20 > Thanks, > Gary >=20 > =EF=BB=BFOn 5/26/21, 12:05 PM, "Kent Watsen" = wrote: >=20 > [CC-ing Gary, who contributed the =E2=80=9Cietf-[tls/ssh]-common" = modules originally] >=20 >=20 > NETCONF WG, >=20 > The =E2=80=9Ctls-client-server=E2=80=9D draft just received the = following GitHub =E2=80=9Cissue=E2=80=9D: >=20 > =3D=3D=3D=3D=3Dstart=3D=3D=3D=3D=3D > This is rather a question than an issue, maybe. >=20 > Given that IANA maintains the TLS parameters at = https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml, = would it not be better for that content to come from something like = iana-tls[-parameters].yang rather than an IETF maintained YANG module? > =3D=3D=3D=3D=3Dstop=3D=3D=3D=3D=3D >=20 > This is a good point. Perhaps we should move all the identities = for the algorithms defined in the =E2=80=9Cietf-tls-common=E2=80=9D = module to an IANA-maintained =E2=80=9Ciana-tls-parameters=E2=80=9D = module. Thoughts? >=20 > By extension, the same statement applies to the = =E2=80=9Cssh-client-server=E2=80=9D draft and the IANA maintained SSH = parameters page: = https://www.iana.org/assignments/ssh-parameters/ssh-parameters.xhtml. >=20 > One potential issue with doing this is that the existing identities = have =E2=80=9Cif-feature=E2=80=9D statements that constrain them to = specific TLS-versions and algorithm-families, and are sometimes marked = as =E2=80=9Cdeprecated". By example: >=20 > identity ecdhe-ecdsa-with-aes-128-cbc-sha256 { > if-feature "tls-1_2"; > if-feature "tls-ecc and tls-sha2"; > base cipher-suite-base; > status "deprecated"; > description > "Cipher suite TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256."; > reference > "RFC 5289: TLS Elliptic Curve Cipher Suites with > SHA-256/384 and AES Galois Counter = Mode (GCM)"; > } >=20 > But that information is NOT captured in the IANA-maintained page. = What to do? >=20 > One option would be to drop all the feature statements. All they = do is limit the totality of algorithms presented to an administrator, = when configuring which algorithms the client/server should support. = Worst case, all algorithms (of a given type) are presented, regardless = if supported by the, e.g., TLS protocol version. When configuring = clients/servers using, e.g., text-based configuration files, such = filters are never available. Does anyone know what Cisco/Juniper/etc. = devices do in their command-line and/or web interfaces? >=20 > Another option, which I like because it=E2=80=99s less work for me = (unless someone can volunteer a GitHub pull request), is to remove the = ietf-[tls/ssh]-common modules altogether. They=E2=80=99re currently = optional-to-configure and, when not configured, it=E2=80=99s an = implementation-specific decision what, e.g., algorithms to list as being = supported during the protocol handshake. Personally, I=E2=80=99ve never = used them (or implemented support for them), happily deferring to = internal code and underlying libraries. In lieu of us not defining = these modules now, applications could augment-in their own configuration = nodes and, of course, a future WG effort could add them. Thoughts on = this approach? >=20 > K. >=20 >=20 >=20 >=20 --Apple-Mail=_537A74C5-7724-42FF-8F52-304E23144B69 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 I=E2=80=99ve been looking at this change (since no one = volunteered to help :sigh:) and noticed that Gary had feature statements = for optional-to-implement algorithms.  

When we were doing the now-abandoned = =E2=80=9Calgorithms=E2=80=9D work in crypto-types, we defined a = top-level =E2=80=9Cconfig false=E2=80=9D tree for a list of supported = algorithms.  For instance, see "supported-symmetric-algorithms=E2=80=9D= here:  https://datatracker.ietf.org/doc/html/draft-ietf-netconf-crypto= -types-14#appendix-A.1.  This seems better to me, agreed? =  Would an RPC be better than a "config false" tree?

Does it matter if the = algorithms are defined using an enumeration or as an identity?

Gary defined them as identities, but the abandoned = crypto-types work had them as enumerations.  In either = case, the IANA-maintained module needs to be *implemented* - = thoughts?

Note: if =E2=80=9Cidentity=E2=80=9D statements are used, and = the module is *implemented* (for the top-level =E2=80=9Csupported = algorithms=E2=80=9D data tree) does NOT mean the server supports all the = algorithms, which is true only if the algorithm appears in the = =E2=80=9Csupported algorithms=E2=80=9D list - still makes sense, or is = this a compelling reason to NOT use identities?

PS: putting each algorithm into its own = module that can be distinctly =E2=80=9Cimplemented* is a = non-starter.

K.



On May = 26, 2021, at 9:40 PM, Gary Wu (garywu) <garywu@cisco.com> = wrote:

Hi Kent,

I'm out of the loop = with the happenings in the WG, so apologies in advance if
my= views are ill-informed.

The IANA = maintained module for parameters makes good sense to me.
The if-features are less important than being able to = configure or unconfigure
which ciphers are able to be = used, so if one has to go, it should be the former.
Presumably, administrators are making security considerations = based on sources
other than just what the YANG module has = defined.

Thanks,
Gary

=EF=BB=BFOn 5/26/21, 12:05 PM, "Kent Watsen" = <kent+ietf@watsen.net> wrote:

   [CC-ing Gary, who contributed the = =E2=80=9Cietf-[tls/ssh]-common" modules originally]


   NETCONF WG,
   The =E2=80=9Ctls-client-server=E2=80=9D = draft just received the following GitHub =E2=80=9Cissue=E2=80=9D:

   =3D=3D=3D=3D=3Dstart=3D=3D=3D= =3D=3D
   This is rather a question than = an issue, maybe.

   Given = that IANA maintains the TLS parameters at   https://www.iana.org/assignments/tls-parameters/tls-parameters.= xhtml, would it not be better for that content to come from = something like iana-tls[-parameters].yang rather than an IETF maintained = YANG module?
   =3D=3D=3D=3D=3Dstop=3D=3D=3D= =3D=3D

   This is a good = point.  Perhaps we should move all the identities for the = algorithms defined in the =E2=80=9Cietf-tls-common=E2=80=9D module to an = IANA-maintained =E2=80=9Ciana-tls-parameters=E2=80=9D module. =  Thoughts?

   By = extension, the same statement applies to the =E2=80=9Cssh-client-server=E2= =80=9D draft and the IANA maintained SSH parameters page: https://www.iana.org/assignments/ssh-parameters/ssh-parameters.= xhtml.

   One potential = issue with doing this is that the existing identities have = =E2=80=9Cif-feature=E2=80=9D statements that constrain them to specific = TLS-versions and algorithm-families, and are sometimes marked as = =E2=80=9Cdeprecated".  By example:

=        identity = ecdhe-ecdsa-with-aes-128-cbc-sha256 {
=           if-feature = "tls-1_2";
=           if-feature = "tls-ecc and tls-sha2";
=           base = cipher-suite-base;
=           status = "deprecated";
=           description =             &n= bsp; "Cipher suite TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256.";
=           reference
=             &n= bsp;"RFC 5289: TLS Elliptic Curve Cipher Suites with
=             &n= bsp;           &nbs= p;       SHA-256/384 and AES Galois = Counter Mode (GCM)";
=        }

=    But that information is NOT captured in the = IANA-maintained page.   What to do?

   One option would be to drop all the = feature statements.  All they do is limit the totality of = algorithms presented to an administrator, when configuring which = algorithms the client/server should support.  Worst case, all = algorithms (of a given type) are presented, regardless if supported by = the, e.g., TLS protocol version.  When configuring clients/servers = using, e.g., text-based configuration files, such filters are never = available.  Does anyone know what Cisco/Juniper/etc. devices do in = their command-line and/or web interfaces?

=    Another option, which I like because it=E2=80=99s less = work for me (unless someone can volunteer a GitHub pull request), is to = remove the ietf-[tls/ssh]-common modules altogether.  They=E2=80=99re= currently optional-to-configure and, when not configured, it=E2=80=99s = an implementation-specific decision what, e.g., algorithms to list as = being supported during the protocol handshake.  Personally, I=E2=80=99= ve never used them (or implemented support for them), happily deferring = to internal code and underlying libraries.  In lieu of us not = defining these modules now, applications could augment-in their own = configuration nodes and, of course, a future WG effort could add them. =  Thoughts on this approach?

=    K.





= --Apple-Mail=_537A74C5-7724-42FF-8F52-304E23144B69-- From nobody Wed Jun 2 21:28:32 2021 Return-Path: X-Original-To: netconf@ietf.org Delivered-To: netconf@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id E6B9B3A28A8; Wed, 2 Jun 2021 21:28:30 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Mahesh Jethanandani via Datatracker To: X-Test-IDTracker: no X-IETF-IDTracker: 7.30.0 Auto-Submitted: auto-generated Precedence: bulk Cc: iesg-secretary@ietf.org, mjethanandani@gmail.com, netconf-chairs@ietf.org, netconf@ietf.org Message-ID: <162269451093.11334.4477593131220559865@ietfa.amsl.com> Date: Wed, 02 Jun 2021 21:28:30 -0700 Archived-At: Subject: [netconf] Publication has been requested for draft-ietf-netconf-sztp-csr-02 X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Jun 2021 04:28:31 -0000 Mahesh Jethanandani has requested publication of draft-ietf-netconf-sztp-csr-02 as Proposed Standard on behalf of the NETCONF working group. Please verify the document's state at https://datatracker.ietf.org/doc/draft-ietf-netconf-sztp-csr/ From nobody Fri Jun 4 10:14:48 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CB16F3A19AE for ; Fri, 4 Jun 2021 10:14:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.698, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nokia.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id biHPTZj4Kg40 for ; Fri, 4 Jun 2021 10:14:42 -0700 (PDT) Received: from NAM11-DM6-obe.outbound.protection.outlook.com (mail-dm6nam11on2120.outbound.protection.outlook.com [40.107.223.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E0C333A19AA for ; Fri, 4 Jun 2021 10:14:41 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Xkh/XFKcejlv5KhmIj2HIVduM8owdkda5FbRe0Pv0oOxs93M+O8+ggKSWdycysJ7Iw1k1kIoos8z4QGj/z3ebATBWFWgErMcWaXfCUD/HWZW64tK3MXdyarEsps7REXAGr9dWVspNiRSi8hdXckZd3/OqoNtubYkS/+oNgYwYNaOQ9zcNtDVxDYgJooE0qY8u7SMtDCleWsFekmFHtljiwfCJVRfAZkL5QO1soicmy2ynv9AEnI78/W/ztXmrDJAgCcGTxYX8j4+vEHKqhDmQXAXzuYgzeG5FIKxI1JUVZnxV8HqqOcfQZ0FLnCl+IPoX9yibzrGBzANL04M7MR4Cw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=1ODH4Ml7y8eonafijdNdyjBSKcVe1Mvk2lVkJ3g69CE=; b=Qsw9MDiZA9fGRVdPGe++rQPfeD8l5UJX1tJvYhTXbMGwbLsXsdQAlRnjeIZrxAlPH1nMihYb9ew452XRDOlIYUSKprO2OWJW7FtArsS1Zw2/XRUqOWCFBSpsRXg3f4zAyCtHVBzbdQalG/gJLZ++/+sEQZHokReJpokgAUJLZQMD7VTxzXeMBQHO6zm3N4xl/u/EklpV6jmA9pxH7HCjumIM22JczpZXnHME8jNYLuXvs1gqVh9yfz4nFLNPtP6m9Z/xMgBDuGo9iCZX+GRwXTnRJo+Q8iHCbmpIWPyluQhEn3yhnh+lQLzoiMYnTcww1DAawGahjUAMmgCg2Xlm+A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nokia.com; dmarc=pass action=none header.from=nokia.com; dkim=pass header.d=nokia.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.onmicrosoft.com; s=selector1-nokia-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=1ODH4Ml7y8eonafijdNdyjBSKcVe1Mvk2lVkJ3g69CE=; b=lw1kSr51DHKw5la3aKhSQbO7c3kF3sX1iRmWtWkpwOpMDCUVHAobRyaOYiXM0W/+CYOAdK09XK53LNe2vgrt+/iVLR+tladaLN3tBA7FEO1ETgNKo3XY/Jv4Y2mY3Laq3z80Nq87Odq1lscqgMRZN8/BV27s/rky1dOj7TQTJIc= Received: from DM6PR08MB5084.namprd08.prod.outlook.com (2603:10b6:5:41::29) by DM5PR08MB2409.namprd08.prod.outlook.com (2603:10b6:3:71::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4195.22; Fri, 4 Jun 2021 17:14:40 +0000 Received: from DM6PR08MB5084.namprd08.prod.outlook.com ([fe80::616e:7de0:be27:e9b1]) by DM6PR08MB5084.namprd08.prod.outlook.com ([fe80::616e:7de0:be27:e9b1%3]) with mapi id 15.20.4173.030; Fri, 4 Jun 2021 17:14:39 +0000 From: "Sterne, Jason (Nokia - CA/Ottawa)" To: Kent Watsen , Andy Bierman CC: "netconf@ietf.org" Thread-Topic: [netconf] Should Partial Lock be deprecated? Thread-Index: AQHXVuUmo/+OxTJVzkKO92n3G96bp6sEG6iQ Date: Fri, 4 Jun 2021 17:14:39 +0000 Message-ID: References: <01000179c7a2ab19-82741952-87dd-4247-8f2f-01d3162863b6-000000@email.amazonses.com> In-Reply-To: <01000179c7a2ab19-82741952-87dd-4247-8f2f-01d3162863b6-000000@email.amazonses.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: watsen.net; dkim=none (message not signed) header.d=none;watsen.net; dmarc=none action=none header.from=nokia.com; x-originating-ip: [24.226.236.156] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 5246a9da-bd7d-4414-ca3f-08d9277c3cd8 x-ms-traffictypediagnostic: DM5PR08MB2409: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8273; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DM6PR08MB5084.namprd08.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(376002)(39860400002)(366004)(136003)(396003)(346002)(186003)(4326008)(7696005)(86362001)(6506007)(33656002)(316002)(53546011)(26005)(8676002)(9686003)(166002)(8936002)(478600001)(110136005)(83380400001)(966005)(52536014)(5660300002)(38100700002)(122000001)(66556008)(66476007)(64756008)(66946007)(76116006)(2906002)(55016002)(71200400001)(66446008); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: =?utf-8?B?QjVUNnN5WktkN1hEdk9Yd2VoN0xEcHVOMVpKVFJPS3JVTGxMWmFtRkF3emNv?= =?utf-8?B?S0l0Q21GRWZadlhab0VNR0JkVWJ5TnFwclhKRVNacUEyK3BJTEErUkRiTGFv?= =?utf-8?B?MFJuUlY2Mk9sSnF4amJHV1dFOG50NDVPU2J1UWZ3ZnplZDI2OTlpd2h6b1BN?= =?utf-8?B?dzJHbHVvTzV2M0pFM215TGxScVZpZU9NenRudERyZkdPbTdYbXJ2UllWMWFY?= =?utf-8?B?ZGM0RllRMmlXZ0VBZ0pNQ3ZXRTNIUWpyMUJhL2xEOEVOZ3VkemZDTU0yVC9X?= =?utf-8?B?UVYvWkRucUVCT0pySVhudmVYaFU5NWNza1FQbmhYditZSWUrSXhnQnpFOVJB?= =?utf-8?B?NzQ3eC9KZ3RKdnpqL3Rzc2JOSmw3UGNvM0lKbitYejFteXQweE1iZ2RXaUtm?= =?utf-8?B?bjRJMDlFUmNjYW5EYnA3MTZPbzI1ZXFEdHowRHF4RklnKzRqTzFNdEU4VFRu?= =?utf-8?B?NldMaWU4TUZaY2NKRjhEZ2pwSHJPcU9YeFZ6ZkxuVUNKbU9OTS9WbE5WSnZF?= =?utf-8?B?d0RLQ1lnTkNLYjUrdUZTaXA2OFhHTmZvVXlKMktORHJDTjJzRkx1eG4zRC8x?= =?utf-8?B?OUpxWVZjZkZNV2tjcm1taFZLRmN2UEtqL0lTeWJkOFVxaVBhS042NkZVRzg5?= =?utf-8?B?bVZ5NmhIS1JOb1RxLzhnUTQxVUVZNVluTDVZUU9NcDZJekY5NDZ1TGk4UXVQ?= =?utf-8?B?cTkvQlhxNEIrYzlsMCs2UHEva3diMnRZSlluSlBvMHdxQ2NETk9BQzZrTXFa?= =?utf-8?B?M21PQTV2ZDd4UTE4dGZvMU93SFhlditCYzR5NzhBalBIMVFSWVJZMm9LUlZn?= =?utf-8?B?TFplN2llc1JNNHJsSHRRblJXQ1dnc2RmM2h0L2FUZjdVVWpvTXJXZ0FuYXpT?= =?utf-8?B?UDBTS3N1QmRDdWtTWjZZNml1Q0ppZjJoQTU5SDZNMmZlS0V0U2NueitpSDEx?= =?utf-8?B?NnU3WHQ1NmQ3T0psYUl0N0dBemx4MitST21hVlBUZDhXNlBFblJ1bnhiaFU5?= =?utf-8?B?UklRUURzRE9wUU0rd0RQczNJckVoZkQ2U3J4TXU0SmE2SHdSdFl2YTJldVR5?= =?utf-8?B?UFlDNlNISlFyQ05DTWR6Tk8vVk13TFFPb1NhYzdDaHNPTWRLdnp2TjZnMURI?= =?utf-8?B?OWF5ZGlxbUhnMmx5NGlUNldBQk9BVm5taURienVWbS9XK1pyQkd5OW13SzFV?= =?utf-8?B?REFaZEFwQUJXV3NiL1lqZUpsYlJUSHJVZEhxTFVTYkpqbS9hZTdXYUM4em5T?= =?utf-8?B?VG5ZQjBNb0Fwd1NJQTNxYkxVN2x2WlEzZG9rbXdtV2hyU091Z3RCMTByZGpn?= =?utf-8?B?RHhaak02N1o0Unovb01ySXF0ZWhDL2NHZXAxbUxwMlJIM2o3a2crcncveFN2?= =?utf-8?B?bm94SFVTOHJNSnFhTjYwVWgxdk1rQW9QZmNkWGJ0cDR3OUZvQ1hrdVlTbjVS?= =?utf-8?B?ZkNJc1lyL3ZqR2wyUTFaVnNJZlRLdGNUR1hEYjhsVkI5VVVaM3JMU25nbDFt?= =?utf-8?B?U051N3BRRkRraGNwWmgvZkVaWHY0ZVF2T24rQXlKajJkLzZDLytFYlRWb0tj?= =?utf-8?B?YVVnR2VLUGlGaDQ3enIzMVJGeUI2N0JRN0dKRlFQYjZVTEEweEgvSmFiNU1x?= =?utf-8?B?MGErNDJZVWw5VkM1RGhNajhGWUNtZTVoSGhzN0crZmlUWjRobXNUQVhycllu?= =?utf-8?B?QzJtRGExeWxXZDYvWFN0aWRsTGw5UlorRFZYQVpsd0wxOGhmcm4waFQ5Ujcv?= =?utf-8?Q?nFMTr+ZuVTIsuwzoySoEvCccM0/pd31XF2ioawC?= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_DM6PR08MB508413CA41FACA497338B52B9B3B9DM6PR08MB5084namp_" MIME-Version: 1.0 X-OriginatorOrg: nokia.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM6PR08MB5084.namprd08.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 5246a9da-bd7d-4414-ca3f-08d9277c3cd8 X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Jun 2021 17:14:39.8954 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 0mVdGVTF+AQiAWFiZLypv+OWZpkRD/+7YCm53R7MxRpP1f2VURe9J3kWWkVUmjFhW4RiUNiRGvZkckItRcMAIQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR08MB2409 Archived-At: Subject: Re: [netconf] Should Partial Lock be deprecated? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 04 Jun 2021 17:14:47 -0000 --_000_DM6PR08MB508413CA41FACA497338B52B9B3B9DM6PR08MB5084namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgZ3V5cywNCg0KSSd2ZSBhbHdheXMgYmVlbiBhIGJpdCBkb3VidGZ1bCBhYm91dCB0aGlzIFJG QyBhcyB3ZWxsIChjb21wbGV4aXR5IGFuZCBpc3N1ZXMgdnMgYmVuZWZpdHMgYW5kIGxpa2VseSB1 c2UgY2FzZXMpLg0KDQpKYXNvbg0KDQpGcm9tOiBuZXRjb25mIDxuZXRjb25mLWJvdW5jZXNAaWV0 Zi5vcmc+IE9uIEJlaGFsZiBPZiBLZW50IFdhdHNlbg0KU2VudDogVHVlc2RheSwgSnVuZSAxLCAy MDIxIDg6NTMgQU0NClRvOiBBbmR5IEJpZXJtYW4gPGFuZHlAeXVtYXdvcmtzLmNvbT4NCkNjOiBu ZXRjb25mQGlldGYub3JnDQpTdWJqZWN0OiBSZTogW25ldGNvbmZdIFNob3VsZCBQYXJ0aWFsIExv Y2sgYmUgZGVwcmVjYXRlZD8NCg0KSGkgQW5keSwNCg0KSSBiZXQgc29tZSBkbyBub3QgcmVtZW1i ZXIgd2UgaGF2ZSB0aGlzIFJGQw0KaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRt bC9yZmM1NzE3DQooU28gb2xkIHRoZXJlIGlzIGEgbm9ybWF0aXZlIFhTRCBhbmQgbm9uLW5vcm1h dGl2ZSBZQU5HIG1vZHVsZSkuDQoNCkkgaGF2ZSBub3Qgc2VlbiB0aGlzIFJGQyB1c2VkIGluIHNl dmVyYWwgeWVhcnMuDQpJcyBhbnlvbmUgdXNpbmcgaXQ/DQpTaG91bGQgaXQgYmUgZGVwcmVjYXRl ZD8NCkp1c3QgY3VyaW91cy4NCg0KQXMgYSBjb250cmlidXRvciwgSSBoYXZlIG5ldmVyIGJlZW4g YSBmYW4gb2YgdGhpcyBSRkMuICBTaWduaWZpY2FudCBjb21wbGV4aXR5IGZvciBhIHdlYWsgdXNl IGNhc2UuDQoNCg0KUmVnYXJkaW5nIHRoZSB1c2UgY2FzZSwgbXkgbGltaXRlZCBwZXJzcGVjdGl2 ZSBpcyB0aGF0IHJhcmVseSBkb2VzIG1vcmUgdGhhbiBvbmUgY2xpZW50IGFjY2VzcyBhIHNlcnZl ciBhdCBhIHRpbWUgKGVzcC4gd2hlbiBhbiBOTVMvb3JjaGVzdHJhdG9yIGlzIGluIHBsYXkpIGFu ZCwgd2hlbiBpdCBkb2VzIG9jY3VyLCB0aGUgYWNjZXNzIGlzIHR5cGljYWxseSBmb3IgYSBicmll ZiBhbW91bnQgb2YgdGltZSwgc3VjaCB0aGF0IGhhdmluZyBhIHNlY29uZCBjbGllbnQgd2FpdCBk b2VzbuKAmXQgc2VlbSBhIGJpZyBkZWFsLg0KDQpBcHBsaWNhdGlvbnMgdmFyeSwgb2YgY291cnNl LCB3aXRoIHNvbWUgKG11bHRpLXRlbmFudCBhcHAsIHNvY2lhbHMsIGV0Yy4pIGJlaW5nIGFsbCBh Ym91dCBzaW11bHRhbmVvdXMgYWNjZXNzLiAgVG8gdGhlIGV4dGVudCB0aGVzZSBhcHBzIGRlc2ly ZSBZQU5HLWRyaXZlbiBpbnRlcmZhY2VzLCBJIG11Y2ggcHJlZmVyIFJFU1RDT05G4oCZcyBJZi1N YXRjaCBtZWNoYW5pc20gYW5kIHdvdWxkIHJlY29tbWVuZCBwb3J0aW5nIGl0IHRvIE5FVENPTkYu DQoNCg0KQW5keQ0KDQpLLg0KDQo= --_000_DM6PR08MB508413CA41FACA497338B52B9B3B9DM6PR08MB5084namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQt ZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsN Cgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9u OnVuZGVybGluZTt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25s eTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYxMi4w cHQgNzkyLjBwdDsNCgltYXJnaW46NzIuMHB0IDcyLjBwdCA3Mi4wcHQgNzIuMHB0O30NCmRpdi5X b3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0 ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEw MjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNo YXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAv Pg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFu Zz0iRU4tQ0EiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiIHN0eWxlPSJ3b3JkLXdyYXA6YnJl YWstd29yZCI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj5IaSBndXlzLDxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28t ZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVT Ij5JJ3ZlIGFsd2F5cyBiZWVuIGEgYml0IGRvdWJ0ZnVsIGFib3V0IHRoaXMgUkZDIGFzIHdlbGwg KGNvbXBsZXhpdHkgYW5kIGlzc3VlcyB2cyBiZW5lZml0cyBhbmQgbGlrZWx5IHVzZSBjYXNlcyku PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6 RU4tVVMiPkphc29uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBi bHVlIDEuNXB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9 ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0 IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIGxhbmc9IkVOLVVT Ij5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiPiBuZXRjb25mICZsdDtuZXRjb25m LWJvdW5jZXNAaWV0Zi5vcmcmZ3Q7DQo8Yj5PbiBCZWhhbGYgT2YgPC9iPktlbnQgV2F0c2VuPGJy Pg0KPGI+U2VudDo8L2I+IFR1ZXNkYXksIEp1bmUgMSwgMjAyMSA4OjUzIEFNPGJyPg0KPGI+VG86 PC9iPiBBbmR5IEJpZXJtYW4gJmx0O2FuZHlAeXVtYXdvcmtzLmNvbSZndDs8YnI+DQo8Yj5DYzo8 L2I+IG5ldGNvbmZAaWV0Zi5vcmc8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtuZXRjb25mXSBT aG91bGQgUGFydGlhbCBMb2NrIGJlIGRlcHJlY2F0ZWQ/PG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkhpIEFuZHksPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjxkaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9t OjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgYmV0 IHNvbWUgZG8gbm90IHJlbWVtYmVyIHdlIGhhdmUgdGhpcyBSRkM8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxhIGhyZWY9Imh0dHBzOi8vZGF0YXRy YWNrZXIuaWV0Zi5vcmcvZG9jL2h0bWwvcmZjNTcxNyI+aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRm Lm9yZy9kb2MvaHRtbC9yZmM1NzE3PC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+KFNvIG9sZCB0aGVyZSBpcyBhJm5ic3A7bm9ybWF0aXZlIFhT RCBhbmQgbm9uLW5vcm1hdGl2ZSBZQU5HIG1vZHVsZSkuPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgaGF2ZSBub3Qgc2VlbiB0aGlzIFJGQyB1 c2VkIGluIHNldmVyYWwgeWVhcnMuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5JcyBhbnlvbmUgdXNpbmcgaXQ/Jm5ic3A7PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5TaG91bGQgaXQgYmUgZGVwcmVj YXRlZD88bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi Pkp1c3QgY3VyaW91cy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv YmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJj b2xvcjpibGFjayI+QXMgYSBjb250cmlidXRvciwgSSBoYXZlIG5ldmVyIGJlZW4gYSBmYW4gb2Yg dGhpcyBSRkMuICZuYnNwO1NpZ25pZmljYW50IGNvbXBsZXhpdHkgZm9yIGEgd2VhayB1c2UgY2Fz ZS48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPjxicj4NCjxicj4NCjwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJjb2xvcjpibGFjayI+UmVnYXJkaW5nIHRoZSB1c2UgY2FzZSwgbXkgbGltaXRlZCBwZXJzcGVj dGl2ZSBpcyB0aGF0IHJhcmVseSBkb2VzIG1vcmUgdGhhbiBvbmUgY2xpZW50IGFjY2VzcyBhIHNl cnZlciBhdCBhIHRpbWUgKGVzcC4gd2hlbiBhbiBOTVMvb3JjaGVzdHJhdG9yIGlzIGluIHBsYXkp IGFuZCwgd2hlbiBpdCBkb2VzIG9jY3VyLCB0aGUgYWNjZXNzIGlzIHR5cGljYWxseSBmb3INCiBh IGJyaWVmIGFtb3VudCBvZiB0aW1lLCBzdWNoIHRoYXQgaGF2aW5nIGEgc2Vjb25kIGNsaWVudCB3 YWl0IGRvZXNu4oCZdCBzZWVtIGEgYmlnIGRlYWwuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5BcHBsaWNhdGlvbnMgdmFyeSwgb2Yg Y291cnNlLCB3aXRoIHNvbWUgKDxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+bXVsdGktdGVuYW50 IGFwcCwmbmJzcDs8L3NwYW4+c29jaWFscywgZXRjLikgYmVpbmcgYWxsIGFib3V0IHNpbXVsdGFu ZW91cyBhY2Nlc3MuICZuYnNwO1RvIHRoZSBleHRlbnQgdGhlc2UgYXBwcyBkZXNpcmUgWUFORy1k cml2ZW4gaW50ZXJmYWNlcywgSSBtdWNoIHByZWZlciBSRVNUQ09ORuKAmXMmbmJzcDtJZi1NYXRj aCBtZWNoYW5pc20NCiBhbmQgd291bGQgcmVjb21tZW5kIHBvcnRpbmcgaXQgdG8gTkVUQ09ORi48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9w OjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+QW5keTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPksuPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_DM6PR08MB508413CA41FACA497338B52B9B3B9DM6PR08MB5084namp_-- From nobody Mon Jun 7 06:14:41 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7EEE03A15A6 for ; Mon, 7 Jun 2021 06:14:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.596 X-Spam-Level: X-Spam-Status: No, score=-9.596 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=R+8E8Qa7; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=u2bPYXgo Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7qXBccTvZWPH for ; Mon, 7 Jun 2021 06:14:34 -0700 (PDT) Received: from alln-iport-8.cisco.com (alln-iport-8.cisco.com [173.37.142.95]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D9F6F3A15A3 for ; Mon, 7 Jun 2021 06:14:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2306; q=dns/txt; s=iport; t=1623071674; x=1624281274; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=QpvNybpOwP+lI82DoouVa3orEdyyXqwzLgMqHiuvufs=; b=R+8E8Qa7JQzd3p6a72n2DEm39naYgWItKmOHE9I0R0OC/wcFjPE28TM+ QzoFO+TOktgLVGR4M2fWLXG5sAscfNqH0Wjh3L7a2hBn7qFeSBMYUtQEw mz79S965g+i7CZhuQMCnrVX1Xo3/+E5Z+qEc/Q025RGDSyR4YTAz/Q2bz E=; X-IPAS-Result: =?us-ascii?q?A0BRAABMG75gl4sNJK1aHQEBAQEJARIBBQUBQIFFBgELA?= =?us-ascii?q?YFSUX5aNzELiAUDhTmIcwOaFoEugSUDVAsBAQENAQE3CAIEAQGBGIM4AoF/A?= =?us-ascii?q?iU2Bw4CBAEBAQEDAgMBAQEBBQEBBQEBAQIBBgQUAQEBAQEBAQFohWgNhkQBA?= =?us-ascii?q?QEEEi4BATcBDwIBCBEEAQEvMh0IAgQBDQUIGoJPAYJVAy8BAwuaWQGBOgKKH?= =?us-ascii?q?3iBNIEBggcBAQYEBIE4Ag5BgzcYgjEDBoE6AYJ6hnWDeiccgUlEgViCYD6CY?= =?us-ascii?q?gEBAgGBNBEYAoNLgi6CRG5RAiItBSduXrwaCoMcig+UABKlZJVSjBeSd4UiA?= =?us-ascii?q?gICAgQFAg4BAQaBWwQugUUPB3AVgyRQFwIOjh8Zg1eFFIVKczgCBgoBAQMJf?= =?us-ascii?q?IddgTYBgRABAQ?= IronPort-PHdr: A9a23:9NNklxZFVJQG/d29cJUwlnb/LTAzhN3EVzX9orIhjLFPe+Ko+JGxd EDc5PA4iljPUM2b7v9fkOPZvujmXnBI+peOtn0OMfkuHx8IgMkbhUosVciCD0CoKvnpbiV8F 8NHBxdp+nihOh1TH8DzL1TZvny162sUHRPyfQp4L+j4AMjclcOyguuz4JbUJQ5PgWnVXA== IronPort-HdrOrdr: A9a23:T4z3HqqreSBsFLTDarG2qggaV5v+L9V00zEX/kB9WHVpm5Oj9v xGzc506farslkssSkb6K+90KnpewK6yXcH2/huAV7EZnimhILIFvAt0WKG+V3d8kLFh5VgPM tbAs1D4ZjLfCRHZKXBkUmF+rQbsaO6GcmT7I+0pRoAPGIaCZ2IrT0JdzpzeXcGIjWucKBJbK Z0kfA33gZIF05nCviTNz0gZazuttfLnJXpbVotHBg88jSDijuu9frTDwWY9g12aUIN/Z4StU z+1yDp7KSqtP+2jjXG0XXI0phQkNz9jvNeGc23jNQPIDmEsHfrWG0hYczGgNkGmpDp1L8Yqq iLn/7mBbUr15rlRBDwnfIq4Xi57N9h0Q649bbSuwqTnSWwfkNLNyMGv/MCTvMcgHBQ4O2VF8 lwrj+kXtNsfGD9tTW46N7SWx5wkE2o5XIkjO4IlnRaFZATcblLsOUkjQ5o+bo7bWnHAbocYa NT5QDnlYBrmFihHjzkV6lUsZSRt1EIb1i7q2Q5y7ioOglt7TlEJhEjtbkid187heUAord/lp b5Dpg= X-IronPort-Anti-Spam-Filtered: true X-IronPort-AV: E=Sophos;i="5.83,255,1616457600"; d="scan'208";a="723342254" Received: from alln-core-6.cisco.com ([173.36.13.139]) by alln-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 07 Jun 2021 13:14:33 +0000 Received: from mail.cisco.com (xbe-rcd-005.cisco.com [173.37.102.20]) by alln-core-6.cisco.com (8.15.2/8.15.2) with ESMTPS id 157DEWgt017930 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 7 Jun 2021 13:14:32 GMT Received: from xhs-rtp-002.cisco.com (64.101.210.229) by xbe-rcd-005.cisco.com (173.37.102.20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.2.792.15; Mon, 7 Jun 2021 08:14:32 -0500 Received: from xfe-aln-001.cisco.com (173.37.135.121) by xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server (TLS) id 15.0.1497.18; Mon, 7 Jun 2021 09:14:31 -0400 Received: from NAM12-DM6-obe.outbound.protection.outlook.com (173.37.151.57) by xfe-aln-001.cisco.com (173.37.135.121) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.792.15 via Frontend Transport; Mon, 7 Jun 2021 08:14:31 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=kzvNxOn6k6gtvbo5STLMnxRZQWmNR0NLpRQ+jf/OnN7di553HiegyPooZTp7n142hrDK12zBaJvpBDS1gg1R9r9n2LtuGvAuTMY6P2rKAUIJY7kVoAZVOUsB47U+MiSMJ3p39yJyJ7TIDpYHJQkYJzavVTwPt1dIwHy3tO+7dpDhySz/W54ruZRUbhPpnXGSjwFkgoSfDlbKK09JE/03U+jgiYVgd4cDObhML3thtCrZ3Pmq3v0QgJ957q5cRu7SLd/ZmT3feA5r7e82fLEW9bH691EvknqOgKC9jOBCDK6N/VMZjkTenZUnNZL4tDRcDA0AT9XFioBUS8voZfu6UQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=gzsKsVqt+0GxbyhzM2ch5nXytPAxOvUYRFmlRob01us=; b=HFFXrmApghvF7O2VWePoYSI8InuPJYcxit7EtT4rapMSjj4PF1qctlqnwEg5gSNSZY24A2S2QQjQpUYShpN7Cwu62Vr/hzb7QnUauDOcwzNefqNPK8vHB/4PcgPfvQrloNL9A9WVxfgpICcrsEdsKJ4dUBJ7C7fv8jL+qpAlZdLWQ9myINP6l3vIQzJnSSzZqH+Fz8RqdXp4NkIMHoezqEvRFi+eqPDy7L0DILBVzM7qpxkLhNvprHjcvDaGx+PQEAWN7/lIAfVf1acNc8ZZH/PiZQYvBXa1WmC2x7bdUGoTW0dMT9bbN0NAHvX0XqRvNhfTP+oFxvA0Xn2q5kgSIw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=gzsKsVqt+0GxbyhzM2ch5nXytPAxOvUYRFmlRob01us=; b=u2bPYXgowgMCz1eIfA/Qash+G8GZ5rK599s8cX0KS3BM5lS0Rn39TUMP1zQADWCzJCM5oODuwzu7+i/gIm9ZDVBJraylRoBgPZ+B/4dfAY2Rov0inFGerzl+f06OWo6HNdpU4hcueAattVROb9jYZ/OJlPrTrfWFQGlJUJ9o4o8= Received: from MWHPR11MB2032.namprd11.prod.outlook.com (2603:10b6:300:2b::13) by MWHPR1101MB2237.namprd11.prod.outlook.com (2603:10b6:301:57::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4195.24; Mon, 7 Jun 2021 13:14:29 +0000 Received: from MWHPR11MB2032.namprd11.prod.outlook.com ([fe80::852d:44c4:b446:2dad]) by MWHPR11MB2032.namprd11.prod.outlook.com ([fe80::852d:44c4:b446:2dad%8]) with mapi id 15.20.4195.030; Mon, 7 Jun 2021 13:14:29 +0000 From: "Per Andersson (perander)" To: "Sterne, Jason (Nokia - CA/Ottawa)" , Kent Watsen , Andy Bierman CC: "netconf@ietf.org" Thread-Topic: [netconf] Should Partial Lock be deprecated? Thread-Index: AQHXVj5bOxDSlN8THUKWsMOJnaQA56r/HbGAgAUABYCABG8B6w== Date: Mon, 7 Jun 2021 13:14:29 +0000 Message-ID: References: <01000179c7a2ab19-82741952-87dd-4247-8f2f-01d3162863b6-000000@email.amazonses.com>, In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: nokia.com; dkim=none (message not signed) header.d=none;nokia.com; dmarc=none action=none header.from=cisco.com; x-originating-ip: [79.136.42.44] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 116156ca-8f55-4af2-298e-08d929b62ee7 x-ms-traffictypediagnostic: MWHPR1101MB2237: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:MWHPR11MB2032.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(366004)(346002)(376002)(39860400002)(396003)(136003)(91956017)(66446008)(64756008)(66476007)(66556008)(76116006)(8936002)(66946007)(83380400001)(86362001)(71200400001)(4326008)(33656002)(8676002)(26005)(186003)(122000001)(55016002)(53546011)(6506007)(2906002)(9686003)(966005)(38100700002)(52536014)(110136005)(316002)(296002)(478600001)(7696005)(5660300002)(55236004); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: =?Windows-1252?Q?wO1+kTSncVkQE47RU6/xWbwtj3aeUQvfOGvpPJoNxIIPG0+lnCgJu3ii?= =?Windows-1252?Q?XUaK97Rmhb/tq5hGgaPR86onu3cS/YG7NIWbeVkCwPaymxWqyPvOVJqn?= =?Windows-1252?Q?iSxwszz0hvsmxChUEnKZoPYkDCW/xXqqsvY5cb7WhTfUSiEX93MToVk1?= =?Windows-1252?Q?b0Ca9/ao2rcE/qz20ScTnWPjSRYT/lsQboS3owMMXb8VpaI0OpEfKi04?= =?Windows-1252?Q?Ph5uNBX7TRyNHXNTPy6pSwCzeaAUjwMh/FHDJr2tjMdFaY+b63SlBPkX?= =?Windows-1252?Q?IwPYlsGeh8fJdcToUZjI9NMPtuoxlp/k0oDqX1SGtM0PqVn2IVRRHe36?= =?Windows-1252?Q?xuZFyTC8ACu9R6A7Uig4jHfd4PklMWBUQlOL3ED1RXlPUfs7zqGL/Ful?= =?Windows-1252?Q?Z8vfWO5Hj/mLlAPhh5QGnq5WYlkO3j/w7wa1N86poppnoLwf7FaGJx6X?= =?Windows-1252?Q?quj6xpkQUaTXGH9YT1SqYjcYMK8FyDseHPQfpiPyyqNAR46Oclu40KmG?= =?Windows-1252?Q?zs+J0/ehztDH+iv3hgauxzdvIAALyZzY04nx0JiC2A8STKLKvqYwQP0F?= =?Windows-1252?Q?owPI+BjZIVOZmVKt5MBeb45LCOHAdjbMdqFD6J6WMSinenLeFV4mk/EI?= =?Windows-1252?Q?iruQJ/ldKdag7bAqLuoxYSDUwhwF23090dNuAw5jepzl4DDIL1d3YwA3?= =?Windows-1252?Q?BFe4qQSJGEYbGDw8zW0jnQfSxBpR9Gcdov2A2Lh6wtfZ5CmqRfDIMDLv?= =?Windows-1252?Q?7v/FVhshsRabo3O8Zq6rp77iEj/W9FQTwidKddlRCx4EWGiG2eb7m6/k?= =?Windows-1252?Q?3L967SF2zFLKPe67KfPs8dGtSsd6zy+Ld5jOBiLajCK8NwXdwXXd7Yrm?= =?Windows-1252?Q?D+BgjCc2e9aIBqCwrdhag1Ib3F3+tWKzLgY0RxGKaRoizkw/FH6A92iP?= =?Windows-1252?Q?Ju6z497FMdff1BPz0LavsiFn6hsiqhGVUkTiFLKNAROnrHwxLT5B5Ouk?= =?Windows-1252?Q?62KTTdaQE0Otb9Xd4uSwDCIT+pEBdhIHdrgGgKSPxtdr80c4D89JzCwY?= =?Windows-1252?Q?o6roTcX8WJTAIn4m0CsuytnVwWu6HrakfG9xegBvkDjq33EoAg6onVZI?= =?Windows-1252?Q?Ae6Ddwv04Oeq9Vww4C1i1H/ZqXacozsFSZgnj9dorpJMUqmA1eZ5HAnj?= =?Windows-1252?Q?+2yKaTGKPP64Bsl5TX0yuD9eqSGKJv+igq5WpKhVCYn0m/QxGoVb+NvB?= =?Windows-1252?Q?WRoFAzgJ04LTopxMhdTPiuLexJW9N7accVPzHBLG+J3y/uJPGAbqr4lt?= =?Windows-1252?Q?9Re8XEaqxcpeaaPOFt3qQF6XhXu5oirsH3JwP+HEtaTah914VHQc7uAt?= =?Windows-1252?Q?2Nk6IjaSEJZ41MzOynLAkTDLKWGqX6uZPXU=3D?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MWHPR11MB2032.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 116156ca-8f55-4af2-298e-08d929b62ee7 X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Jun 2021 13:14:29.5334 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 6qnWvpKLRn2jeIbO7qBjUUjKHO2cA8O6zsip3OpVRMJKZFf77Fqh7fDxMAtvOl97GvgP2aa8ou3FaQunChMBLQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR1101MB2237 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.20, xbe-rcd-005.cisco.com X-Outbound-Node: alln-core-6.cisco.com Archived-At: Subject: Re: [netconf] Should Partial Lock be deprecated? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Jun 2021 13:14:40 -0000 Hi! Both NSO (orchestrator) and ConfD implement partial-lock. I do not know from the top of my head if/how it is used though. Use cases for both NSO and ConfD involve simultaneous access from multiple users and/or systems. However, what would the alternative be if partial-lock is deprecated? Only using global lock, an RFC 5717 bis, or something else? Porting RESTCONF's If-Match to NETCONF, as Kent suggests, looks interesting. Have you seen Jan's draft for transaction-id [0], I believe th= is would be such a mechanism. [0] https://datatracker.ietf.org/doc/html/draft-lindblad-netconf-transactio= n-id-00 -- Per ________________________________________ From: netconf on behalf of Sterne, Jason (Nokia = - CA/Ottawa) Sent: Friday, June 4, 2021 19:14 To: Kent Watsen; Andy Bierman Cc: netconf@ietf.org Subject: Re: [netconf] Should Partial Lock be deprecated? Hi guys, I've always been a bit doubtful about this RFC as well (complexity and issu= es vs benefits and likely use cases). Jason From: netconf On Behalf Of Kent Watsen Sent: Tuesday, June 1, 2021 8:53 AM To: Andy Bierman Cc: netconf@ietf.org Subject: Re: [netconf] Should Partial Lock be deprecated? Hi Andy, I bet some do not remember we have this RFC https://datatracker.ietf.org/doc/html/rfc5717 (So old there is a normative XSD and non-normative YANG module). I have not seen this RFC used in several years. Is anyone using it? Should it be deprecated? Just curious. As a contributor, I have never been a fan of this RFC. Significant complex= ity for a weak use case. Regarding the use case, my limited perspective is that rarely does more tha= n one client access a server at a time (esp. when an NMS/orchestrator is in= play) and, when it does occur, the access is typically for a brief amount = of time, such that having a second client wait doesn=92t seem a big deal. Applications vary, of course, with some (multi-tenant app, socials, etc.) b= eing all about simultaneous access. To the extent these apps desire YANG-d= riven interfaces, I much prefer RESTCONF=92s If-Match mechanism and would r= ecommend porting it to NETCONF. Andy K. From nobody Tue Jun 8 00:21:17 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CB2673A25B1; Tue, 8 Jun 2021 00:21:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.596 X-Spam-Level: X-Spam-Status: No, score=-2.596 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BQROQ7ykbL3s; Tue, 8 Jun 2021 00:21:10 -0700 (PDT) Received: from smtpout01-ext1.partage.renater.fr (smtpout01-ext1.partage.renater.fr [194.254.240.32]) by ietfa.amsl.com (Postfix) with ESMTP id 6B9353A25B0; Tue, 8 Jun 2021 00:21:09 -0700 (PDT) Received: from zmtaauth01.partage.renater.fr (zmtaauth01.partage.renater.fr [194.254.240.25]) by smtpout10.partage.renater.fr (Postfix) with ESMTP id 284AD614D0; Tue, 8 Jun 2021 09:21:01 +0200 (CEST) Received: from zmtaauth01.partage.renater.fr (localhost [127.0.0.1]) by zmtaauth01.partage.renater.fr (Postfix) with ESMTPS id 17549140280; Tue, 8 Jun 2021 09:21:01 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by zmtaauth01.partage.renater.fr (Postfix) with ESMTP id 092E2140468; Tue, 8 Jun 2021 09:21:01 +0200 (CEST) X-Virus-Scanned: amavisd-new at zmtaauth01.partage.renater.fr Received: from zmtaauth01.partage.renater.fr ([127.0.0.1]) by localhost (zmtaauth01.partage.renater.fr [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id 4ZmB8IVXOgQM; Tue, 8 Jun 2021 09:21:00 +0200 (CEST) Received: from [192.168.0.15] (unknown [194.254.241.250]) by zmtaauth01.partage.renater.fr (Postfix) with ESMTPA id 9DA15140280; Tue, 8 Jun 2021 09:21:00 +0200 (CEST) From: Zmail Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_1C7B3D59-A24A-4D9E-953C-19830628D377" Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.7\)) Date: Tue, 8 Jun 2021 09:21:00 +0200 In-Reply-To: Cc: netconf@ietf.org, maqiufang1@huawei.com, Pierre Francois , weiwang94@foxmail.com To: bill.wu@huawei.com, netconf-chairs@ietf.org References: X-Mailer: Apple Mail (2.3608.120.23.2.7) X-Renater-Ptge-SpamState: clean X-Renater-Ptge-SpamScore: -100 X-Renater-Ptge-SpamCause: gggruggvucftvghtrhhoucdtuddrgeduledrfedtkedguddutdcutefuodetggdotefrodftvfcurfhrohhfihhlvgemucftgffptefvgfftnecuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmdenucfjughrpefhkfgtggfuffgjvfhfofesrgdtmherhhdtjeenucfhrhhomhepkghmrghilhcuoegrlhgvgidrhhhurghnghdqfhgvnhhgsehinhhsrgdqlhihohhnrdhfrheqnecuggftrfgrthhtvghrnhepkedvuddvjedtgeeigefgveeifeeffedvhfefhfegudeghfehffekvdfgffeggfffnecuffhomhgrihhnpehhthhtphhsthhovgigtghhrghnghgvrgguvhgvrhhtihhsvgguuggrthgrrdhinhenucfkphepudelgedrvdehgedrvdeguddrvdehtdenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduleegrddvheegrddvgedurddvhedtpdhhvghloheplgduledvrdduieekrddtrdduhegnpdhmrghilhhfrhhomhepkghmrghilhcuoegrlhgvgidrhhhurghnghdqfhgvnhhgsehinhhsrgdqlhihohhnrdhfrheqpdhrtghpthhtohepsghilhhlrdifuheshhhurgifvghirdgtohhmpdhrtghpthhtohepnhgvthgtohhnfhdqtghhrghirhhssehivghtfhdrohhrghdprhgtphhtthhopehnvghttghonhhfsehivghtfhdrohhrghdprhgtphhtthhopehmrghqihhufhgrnhhgudeshhhurgifvghirdgtohhmpdhrtghpthht ohepphhivghrrhgvrdhfrhgrnhgtohhishesihhnshgrqdhlhihonhdrfhhrpdhrtghpthhtohepfigvihifrghnghelgeesfhhogihmrghilhdrtghomh Archived-At: Subject: Re: [netconf] Capability-fetching mechanisms X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Jun 2021 07:21:16 -0000 --Apple-Mail=_1C7B3D59-A24A-4D9E-953C-19830628D377 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi everyone, I join this thread to discuss the understanding of the draft = data-export-capabilities and how it is confusing with the capabilities = export feature of https-notif draft. I think that the data-export-capabilities draft should change the terms = client/server to publisher/receiver. That way, I think it would be = clearer in which draft we discuss which case. As I understood reading this thread, data-export-capabilities discusses = how the receiver (client) could get the publisher's (server) = capabilities. And on the other side, the HTTPS GET capabilities from = https-notif draft defines how the receiver (client) could export its = capabilities to the publisher (server). It=E2=80=99s that right ? Please = correct me if there is any misunderstanding. On the other hand, we are discussing how the receiver could expose its = capabilities on each notification drafts (https-notif, udp-notif, etc). = Notifications drafts defines a protocol to exchange notifications over a = transport layer, so from my point of view, the capabilities export = feature should not be defined there because : 1. it would be transport dependent (I don't feel confortable putting a = HTTPS export capabilities on the udp-notif draft...) 2. for configured notifications from the publisher side, there is no = need to know the capabilities for the receiver, they already know them 3. I think we are mixing the configuration part and the notification = part As I understood in the precedent mails, Qin is looking for a common = protocol to exchange these capabilities over all notifications drafts. = Maybe it is better to define this capabilities export transport = dependent protocol on another draft ? Or on the data-export-capabilities = draft, but it is defined as transport agnostic=E2=80=A6 Any thoughts ? Alex Huang Feng INSA Lyon | Unyte team > Date: Wed, 2 Jun 2021 01:07:05 +0000 > From: Qin Wu > To: Mahesh Jethanandani > Cc: Kent Watsen , "netconf@ietf.org" > > Subject: [netconf] ??: Capability-fetching mechanisms > Message-ID: > Content-Type: text/plain; charset=3D"utf-8" >=20 > Hi, Mahesh: >=20 > ???: Mahesh Jethanandani [mailto:mjethanandani@gmail.com] > ????: 2021?6?2? 6:44 > ???: Qin Wu > ??: Kent Watsen ; netconf@ietf.org > ??: Re: [netconf] Capability-fetching mechanisms >=20 > [Trimming down the e-mail to open topics] >=20 > Hi Qin, >=20 > See inline with [mj1] >=20 >=20 > On May 18, 2021, at 4:40 AM, Qin Wu = > wrote: >=20 > Hi, Mahesh: >=20 >=20 > The question is whether the receiver needs to be a NETCONF/RESTCONF = server. As maqiufang wrote in his response, if the receiver supports the = data-export-capabilities draft, then it would need to be a = NETCONF/RESTCONF server, whereas with the https-notif draft that is not = the case. This is the case whether the receiver supports RFC 8639 or = not. > [Qin]:My understanding is data-export-capabilities doesn?t require = receiver to be tied with NETCONF/RESTCONF server. I assume the = management system (i.e., receiver) and network device (i.e., publisher) = can use HTTPS to exchange advertised data. >=20 > In addition, Maybe what is missing in the data-export-capabilities = draft is to define RPC to allow the publisher get capability from = receiver through HTTPS channel, similar to what is = get-bootstrapping-data RPC defined in RFC8572. >=20 > [mj1] Stipulating a HTTPs channel works for the HTTPS notif draft. But = what will other transport type drafts use? e.g. the UDP notif draft?? >=20 > [Qin]:I think UDP notif draft could also use HTTPs channel to carry = capability information from the server to the client in the form of YANG = instance file format. >=20 > Please note that RFC 8639 receivers do not have to be NETCONF/RESTCONF = servers for configured subscriptions. RFC 8639, Section 2.7 defines the = control messages such as using one-way YANG = ?notification? statements. >=20 > [Qin]: Understand this case, Do you think we should define a new = notification in the data-export-capabilities draft instead of = considering to define RPC? >=20 > [mj1] I do not understand this statement. Can you expand? >=20 > [Qin]: I am not sure the RPC is a good design choice, I think we could = have 3 options > ?a?Report capability information from the HTTPs server or the HTTPs = client at run-time or implementation- time, per the YANG Instance Data = File Format. > (b) Define one way YANG notification similar to = that is sent from the server to the client > (c) Report capability information only from NETCONF server using YANG = model define in data-export-capaiblities draft > I think (b) only allow the server advertise the server capability to = the client but does not allow the client issue notification and = advertise client capability to the server > (c) is something you envision how it is used, the limitation is to = require NETCONF server to be supported by the receiver or the client, = but this option is not what we proposed in the data-export-capabilities = draft. > The solution we proposed is (a) which allows report capability = information either from the Server or the client using YANG Instance = data file. Hope this clarifies. >=20 > Mahesh Jethanandani > mjethanandani@gmail.com >=20 --Apple-Mail=_1C7B3D59-A24A-4D9E-953C-19830628D377 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
Hi = everyone,

I join this thread to = discuss the understanding of the draft data-export-capabilities and how = it is confusing with the capabilities export feature of https-notif = draft.

I think that the data-export-capabilities draft should change the terms = client/server to publisher/receiver. That way, I think it would be = clearer in which draft we discuss which case.

As I understood reading this = thread, data-export-capabilities discusses how the receiver = (client) could get the publisher's (server) capabilities. And on the = other side, the HTTPS GET capabilities from https-notif draft defines = how the receiver (client) could export its capabilities to the publisher = (server). It=E2=80=99s that right ? Please correct me if there is any = misunderstanding.

On the = other hand, we are discussing how the receiver could expose its = capabilities on each notification drafts (https-notif, udp-notif, etc). = Notifications drafts defines a protocol to exchange notifications over a = transport layer, so from my point of view, the capabilities export = feature should not be defined there because :
1. it would be transport dependent (I don't = feel confortable putting a HTTPS export capabilities on the udp-notif = draft...)
2. for = configured notifications from the publisher side, there is no need to = know the capabilities for the receiver, they already know = them
3. I think we = are mixing the configuration part and the notification = part

As I = understood in the precedent mails, Qin is looking for a common protocol = to exchange these capabilities over all notifications drafts. Maybe = it is better to define this capabilities export transport dependent = protocol on another draft ? Or on the data-export-capabilities draft, but it is defined as = transport agnostic=E2=80=A6

Any= thoughts ?

Alex Huang = Feng
INSA Lyon | Unyte team

Date: Wed, 2 = Jun 2021 01:07:05 +0000
From: Qin Wu <bill.wu@huawei.com>
To: Mahesh = Jethanandani <mjethanandani@gmail.com>
Cc: Kent Watsen = <kent+ietf@watsen.net>, "netconf@ietf.org"
= <netconf@ietf.org>
Subject: [netconf] ??: =  Capability-fetching mechanisms
Message-ID: <d3e28c3359b34352b42c6f99ce881405@huawei.com>
Content-Type: text/plain; charset=3D"utf-8"

Hi, Mahesh:

???: Mahesh = Jethanandani [mailto:mjethanandani@gmail.com]
????: = 2021?6?2? 6:44
???: Qin Wu <bill.wu@huawei.com>
??: Kent Watsen = <kent+ietf@watsen.net>; netconf@ietf.org
??: Re: [netconf] Capability-fetching mechanisms

[Trimming down the e-mail to open topics]

Hi Qin,

See = inline with [mj1]


On May 18, = 2021, at 4:40 AM, Qin Wu <bill.wu@huawei.com<mailto:bill.wu@huawei.com>> wrote:
Hi, Mahesh:


The = question is whether the receiver needs to be a NETCONF/RESTCONF server. = As maqiufang wrote in his response, if the receiver supports the = data-export-capabilities draft, then it would need to be a = NETCONF/RESTCONF server, whereas with the https-notif draft that is not = the case. This is the case whether the receiver supports RFC 8639 or = not.
[Qin]:My understanding is data-export-capabilities = doesn?t require receiver to be tied with NETCONF/RESTCONF server. I = assume the management system (i.e., receiver) and network device (i.e., = publisher) can use HTTPS to exchange advertised data.

In addition, Maybe what is missing in the = data-export-capabilities draft is to define RPC to allow the publisher = get capability from receiver through HTTPS channel, similar to what is = get-bootstrapping-data RPC defined in RFC8572.

[mj1] Stipulating a HTTPs channel works for the HTTPS notif = draft. But what will other transport type drafts use? e.g. the UDP notif = draft??

[Qin]:I think UDP notif draft could = also use HTTPs channel to carry capability information from the server = to the client in the form of YANG instance file format.

Please note that RFC 8639 receivers do not have to be = NETCONF/RESTCONF servers for configured subscriptions. RFC 8639, Section = 2.7 defines the control messages such as <subscription-started> = using one-way YANG ?notification? statements.

[Qin]: Understand this case, Do you think we should define a = new notification in the data-export-capabilities draft instead of = considering to define RPC?

[mj1] I do not = understand this statement. Can you expand?

[Qin]: I am not sure the RPC is a good design choice, I think = we could have 3 options
?a?Report capability information = from the HTTPs server or the HTTPs client at run-time or implementation- = time, per the YANG Instance Data File Format.
(b) Define = one way YANG notification similar to <subscription-started> that = is sent from the server to the client
(c) Report = capability information only from NETCONF server using YANG model define = in data-export-capaiblities draft
I think (b) only allow = the server advertise the server capability to the client but does not = allow the client issue notification and advertise client capability to = the server
(c) is something you envision how it is used, = the limitation is to require NETCONF server to be supported by the = receiver or the client, but this option is not what we proposed in the = data-export-capabilities draft.
The solution we proposed = is (a) which allows report capability information either from the Server = or the client using YANG Instance data file. Hope this clarifies.

Mahesh Jethanandani
mjethanandani@gmail.com<mailto:mjethanandani@gmail.com>

= --Apple-Mail=_1C7B3D59-A24A-4D9E-953C-19830628D377-- From nobody Tue Jun 8 02:29:40 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E30A3A29BB; Tue, 8 Jun 2021 02:29:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1ITvYnHluvze; Tue, 8 Jun 2021 02:29:33 -0700 (PDT) Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 704103A29BA; Tue, 8 Jun 2021 02:29:33 -0700 (PDT) Received: from fraeml709-chm.china.huawei.com (unknown [172.18.147.201]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4Fzl7y08xYz6L72y; Tue, 8 Jun 2021 17:20:14 +0800 (CST) Received: from dggeml704-chm.china.huawei.com (10.3.17.142) by fraeml709-chm.china.huawei.com (10.206.15.37) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.1.2176.2; Tue, 8 Jun 2021 11:29:31 +0200 Received: from dggeml753-chm.china.huawei.com (10.1.199.152) by dggeml704-chm.china.huawei.com (10.3.17.142) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2176.2; Tue, 8 Jun 2021 17:29:29 +0800 Received: from dggeml753-chm.china.huawei.com ([10.1.199.152]) by dggeml753-chm.china.huawei.com ([10.1.199.152]) with mapi id 15.01.2176.012; Tue, 8 Jun 2021 17:29:29 +0800 From: Qin Wu To: "netconf@ietf.org" CC: "netconf-chairs@ietf.org" Thread-Topic: I-D Action: draft-wang-netconf-adaptive-subscription-05.txt Thread-Index: AddcR+BHFiTCR54uSAm1W0qh3JiGcw== Date: Tue, 8 Jun 2021 09:29:29 +0000 Message-ID: <087a18b57b2e4923ae141448ee6cf439@huawei.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.136.123.117] Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [netconf] I-D Action: draft-wang-netconf-adaptive-subscription-05.txt X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Jun 2021 09:29:38 -0000 SGksIEZvbGtzOg0KRm9sbG93IHVwIHRoZSBkaXNjdXNzaW9uIGluIGxhc3QgSUVURiBtZWV0aW5n DQpodHRwczovL21haWxhcmNoaXZlLmlldGYub3JnL2FyY2gvbXNnL25ldGNvbmYvTm52OTYxQzdI NGFjeVJpMi0tRlZ5N3lDdzhRLw0Kdi0wNSBpcyBwb3N0ZWQsIHRoZSBtYWluIGNoYW5nZXMgdG8g di0wMiBpbmNsdWRlOg0KICAgbyAgQ2xhcmlmeSB0aGUgZGlmZmVyZW5jZSBiZXR3ZWVuIGxvdyBw cmlvcml0eSB0ZWxlbWV0cnkgZGF0YQ0KICAgICAgZHJvcHBpbmcgYW5kIGNvbGxlY3Rpb24gcmF0 ZSBzd2l0Y2hpbmcgaW4gdGhlIGludHJvZHVjdGlvbg0KICAgICAgc2VjdGlvbjsNCg0KICAgbyAg VXBkYXRlIHRoZSBhYnN0cmFjdCBhbmQgaW50cm9kdWN0aW9uIHNlY3Rpb24gdG8gZm9jdXMgb24N CiAgICAgIGNvbGxlY3Rpb24gcmF0ZSBzd2l0Y2hpbmcgaW4gdGhlIHNlcnZlciB3aXRob3V0IGlu dGVyYWN0aW9uIHdpdGgNCiAgICAgIHRoZSByZW1vdGUgY2xpZW50Ow0KDQogICBvICBBZGQgbWlz c2luZyBzdWJ0cmVlcyBhbmQgZGF0YSBub2RlcyBpbiB0aGUgc2VjdXJpdHkgc2VjdGlvbjsNCg0K ICAgbyAgQ2hhbmdlICJhZGFwdGl2ZS11cGRhdGUiIG5vdGlmaWNhdGlvbiBpbnRvICJhZGFwdGl2 ZS1wZXJpb2QtDQogICAgICB1cGRhdGUiIG5vdGlmaWNhdGlvbjsNCg0KICAgbyAgUmVtb3ZlICJt b2RpZnktc3Vic2NyaXB0aW9uIiBSUEMgdXNhZ2UuDQoNCiAgIG8gIE1vZHVsZSB1cGRhdGUgdG8g Zml4IHRoZSBuaXRzLg0KDQogICBvICBVcGRhdGUgYWRhcHRpdmUgc3Vic2NyaXB0aW9uIEV4YW1w bGUuDQpXZSBiZWxpZXZlIGFsbCB0aGUgcmVtYWluaW5nIGlzc3VlcyBhcmUgYWRkcmVzc2VkIGlu IHRoZSBsYXRlc3QgdmVyc2lvbi4gQW5kIHdvdWxkIGxpa2UgdG8gcmVxdWVzdCBXRyBhZG9wdGlv biBvbiB0aGlzIHdvcmsuDQpBbHNvIGFueSBjb21tZW50cyBhbmQgaW5wdXQgYXJlIHdlbGNvbWUh DQoNCi1RaW4gKE9uIGJlaGFsZiBvZiBhdXRob3JzKQ0KLS0tLS3Tyrz+1K28/i0tLS0tDQq3orz+ yMs6IEktRC1Bbm5vdW5jZSBbbWFpbHRvOmktZC1hbm5vdW5jZS1ib3VuY2VzQGlldGYub3JnXSC0 +rHtIGludGVybmV0LWRyYWZ0c0BpZXRmLm9yZw0Kt6LLzcqxvOQ6IDIwMjHE6jbUwjjI1SAxNzoy MQ0KytW8/sjLOiBpLWQtYW5ub3VuY2VAaWV0Zi5vcmcNCtb3zOI6IEktRCBBY3Rpb246IGRyYWZ0 LXdhbmctbmV0Y29uZi1hZGFwdGl2ZS1zdWJzY3JpcHRpb24tMDUudHh0DQoNCg0KQSBOZXcgSW50 ZXJuZXQtRHJhZnQgaXMgYXZhaWxhYmxlIGZyb20gdGhlIG9uLWxpbmUgSW50ZXJuZXQtRHJhZnRz IGRpcmVjdG9yaWVzLg0KDQoNCiAgICAgICAgVGl0bGUgICAgICAgICAgIDogQWRhcHRpdmUgU3Vi c2NyaXB0aW9uIHRvIFlBTkcgTm90aWZpY2F0aW9uDQogICAgICAgIEF1dGhvcnMgICAgICAgICA6 IFFpbiBXdQ0KICAgICAgICAgICAgICAgICAgICAgICAgICBXZWkgU29uZw0KICAgICAgICAgICAg ICAgICAgICAgICAgICBQZW5nIExpdQ0KICAgICAgICAgICAgICAgICAgICAgICAgICBRaXVmYW5n IE1hDQogICAgICAgICAgICAgICAgICAgICAgICAgIFdlaSBXYW5nDQoJRmlsZW5hbWUgICAgICAg IDogZHJhZnQtd2FuZy1uZXRjb25mLWFkYXB0aXZlLXN1YnNjcmlwdGlvbi0wNS50eHQNCglQYWdl cyAgICAgICAgICAgOiAyNA0KCURhdGUgICAgICAgICAgICA6IDIwMjEtMDYtMDgNCg0KQWJzdHJh Y3Q6DQogICBUaGlzIGRvY3VtZW50IGRlZmluZXMgYSBZQU5HIGRhdGEgbW9kZWwgYW5kIGFzc29j aWF0ZWQgbWVjaGFuaXNtDQogICBlbmFibGluZyBzdWJzY3JpYmVyJ3MgYWRhcHRpdmUgc3Vic2Ny aXB0aW9ucyB0byBhIHB1Ymxpc2hlcidzIGV2ZW50DQogICBzdHJlYW1zIHdpdGggdmFyaW91cyBk aWZmZXJlbnQgcGVyaW9kIGludGVydmFscyB0byByZXBvcnQgdXBkYXRlcy4NCiAgIEFwcGx5aW5n IHRoZXNlIGVsZW1lbnRzIGFsbG93cyBzZXJ2ZXJzIGF1dG9tYXRpY2FsbHkgYWRqdXN0IHRoZQ0K ICAgdm9sdW1lIG9mIHRlbGVtZXRyeSB0cmFmZmljIGFuZCByYXRlIG9mIHRyYWZmaWMgc2VudCBm cm9tIHB1Ymxpc2hlcg0KICAgdG8gdGhlIHJlY2VpdmVycy4NCg0KDQpUaGUgSUVURiBkYXRhdHJh Y2tlciBzdGF0dXMgcGFnZSBmb3IgdGhpcyBkcmFmdCBpczoNCmh0dHBzOi8vZGF0YXRyYWNrZXIu aWV0Zi5vcmcvZG9jL2RyYWZ0LXdhbmctbmV0Y29uZi1hZGFwdGl2ZS1zdWJzY3JpcHRpb24vDQoN ClRoZXJlIGlzIGFsc28gYW4gaHRtbGl6ZWQgdmVyc2lvbiBhdmFpbGFibGUgYXQ6DQpodHRwczov L2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9odG1sL2RyYWZ0LXdhbmctbmV0Y29uZi1hZGFwdGl2 ZS1zdWJzY3JpcHRpb24tMDUNCg0KQSBkaWZmIGZyb20gdGhlIHByZXZpb3VzIHZlcnNpb24gaXMg YXZhaWxhYmxlIGF0Og0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LXdh bmctbmV0Y29uZi1hZGFwdGl2ZS1zdWJzY3JpcHRpb24tMDUNCg0KDQpJbnRlcm5ldC1EcmFmdHMg YXJlIGFsc28gYXZhaWxhYmxlIGJ5IGFub255bW91cyBGVFAgYXQ6DQpmdHA6Ly9mdHAuaWV0Zi5v cmcvaW50ZXJuZXQtZHJhZnRzLw0KDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fDQpJLUQtQW5ub3VuY2UgbWFpbGluZyBsaXN0DQpJLUQtQW5ub3VuY2VA aWV0Zi5vcmcNCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vaS1kLWFubm91 bmNlDQpJbnRlcm5ldC1EcmFmdCBkaXJlY3RvcmllczogaHR0cDovL3d3dy5pZXRmLm9yZy9zaGFk b3cuaHRtbCBvciBmdHA6Ly9mdHAuaWV0Zi5vcmcvaWV0Zi8xc2hhZG93LXNpdGVzLnR4dA0K From nobody Tue Jun 8 11:16:44 2021 Return-Path: X-Original-To: netconf@ietf.org Delivered-To: netconf@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id C0F3E3A38EB; Tue, 8 Jun 2021 11:16:38 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: Joe Clarke via Datatracker To: Cc: draft-ietf-netconf-sztp-csr.all@ietf.org, last-call@ietf.org, netconf@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.31.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <162317619873.9343.9749227005482545691@ietfa.amsl.com> Reply-To: Joe Clarke Date: Tue, 08 Jun 2021 11:16:38 -0700 Archived-At: Subject: [netconf] Yangdoctors last call review of draft-ietf-netconf-sztp-csr-02 X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Jun 2021 18:16:39 -0000 Reviewer: Joe Clarke Review result: Ready with Nits I have been asked to perform a last-call review of this draft on behalf of YANG Doctors. This draft specifies a YANG module for conveying a CSR in a Secure Zero Touch Provisioning Bootstrapping Request. It augments the "get-bootstrapping-data" RPC defined in RFC 8572. Overall, I found the draft (and module) ready with the following small issues/nits. Editorial Note: You mention XXXX and AAAA, and you also use BBBB in the module ietf-yang-structure-ext. I know this section will be removed, but you may want to mention this to make sure that substitution is done. === Section 2.1 The YANG tree here deviates from the output produced by pyang --tree-print-structures --tree-line-length=69 --tree-module-name-prefix. In particular, the "flags" column is missing from each element under the augment branch (e.g., the 'w' that appears in pyang's output's flags field). === Section 2.2 You have this text: Some implementation may choose to convey it inside a script (e.g., SZTP's "pre-configuration-script") I'd like to see a reference to RFC 8572 here on where this is defined. I realize I'm being pedantic here, but there are a number of SZTP documents, and I think having a reference helps. === Section 2.2 s/so that the the device/so that the device/ === Module overall: I noticed that the module itself differs in various formatting from pyang -f yang. There are some line and spacing differences, and I don't think it would hurt to canonicalize the module in the draft. === Module's main description: You mention SZTP's 'onboarding-information' response, but this isn't a formal YANG node. That node is conveyed-information. Is it worth clarifying that here in the module description like you did in draft text in section 2.2? I have the same comment in the description of "container csr". The quoted and hyphenated "onboarding-information" might make one think that there is a node that contains this. === Under leaf cmc's description: s/is the TaggedCertificationRequest and it a bodyPartId/is the TaggedCertificationRequest and it consists of a bodyPartId/ There are two instances of this, and I wasn't sure exactly what you wanted to say here. This was my attempt to make it readable. === While you indicate that the algorithm-selected node is mandatory, should this not be the case for the selected-algorithm container that contains it since as you state in the description for cert-req-info, it is an error if the SubjectPublicKeyInfo's algorithm does not match the selected-algorithm. Could an implementer not return this container at all and still be compliant to the module while causing unexpected behavior for the client? In leaf cert-req-info's description: The word “another†(with respect to the 400 Server Error) doesn’t follow here unless one refers to the csr-support presence container above. I think dropping it might make this text a bit less confusing (or copying similar text from the csr-support node’s description. === Section 3.1.2: s/In cases where it it not possible/In cases where it is not possible/ s/key rather then generate/key rather than generate/ From nobody Wed Jun 9 02:38:08 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 76CC23A18D2; Wed, 9 Jun 2021 02:38:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OB0LH6Gr7Yfz; Wed, 9 Jun 2021 02:38:00 -0700 (PDT) Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 191653A18D4; Wed, 9 Jun 2021 02:38:00 -0700 (PDT) Received: from fraeml713-chm.china.huawei.com (unknown [172.18.147.207]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4G0MH42YdCz6K5VN; Wed, 9 Jun 2021 17:28:32 +0800 (CST) Received: from dggeme718-chm.china.huawei.com (10.1.199.114) by fraeml713-chm.china.huawei.com (10.206.15.32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.1.2176.2; Wed, 9 Jun 2021 11:37:51 +0200 Received: from dggeml753-chm.china.huawei.com (10.1.199.152) by dggeme718-chm.china.huawei.com (10.1.199.114) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2176.2; Wed, 9 Jun 2021 17:37:49 +0800 Received: from dggeml753-chm.china.huawei.com ([10.1.199.152]) by dggeml753-chm.china.huawei.com ([10.1.199.152]) with mapi id 15.01.2176.012; Wed, 9 Jun 2021 17:37:49 +0800 From: Qin Wu To: Zmail , "netconf-chairs@ietf.org" CC: "netconf@ietf.org" , "maqiufang (A)" , Pierre Francois , "weiwang94@foxmail.com" Thread-Topic: [netconf] Capability-fetching mechanisms Thread-Index: AdddEZ/9MmAPJjV0Sjy0XXGIk3+1WQ== Date: Wed, 9 Jun 2021 09:37:49 +0000 Message-ID: <8c4abbe6e738407194d787612c8a2e9d@huawei.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.136.123.117] Content-Type: multipart/alternative; boundary="_000_8c4abbe6e738407194d787612c8a2e9dhuaweicom_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [netconf] Capability-fetching mechanisms X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jun 2021 09:38:06 -0000 --_000_8c4abbe6e738407194d787612c8a2e9dhuaweicom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhbmtzIEFsZXggZm9yIHRoZSBmZWVkYmFjay4gUGxlYXNlIHNlZSBteSByZXBseSBpbmxpbmUg YmVsb3cuDQrlj5Hku7bkuro6IFptYWlsIFttYWlsdG86YWxleC5odWFuZy1mZW5nQGluc2EtbHlv bi5mcl0NCuWPkemAgeaXtumXtDogMjAyMeW5tDbmnIg45pelIDE1OjIxDQrmlLbku7bkuro6IFFp biBXdSA8YmlsbC53dUBodWF3ZWkuY29tPjsgbmV0Y29uZi1jaGFpcnNAaWV0Zi5vcmcNCuaKhOmA gTogbmV0Y29uZkBpZXRmLm9yZzsgbWFxaXVmYW5nIChBKSA8bWFxaXVmYW5nMUBodWF3ZWkuY29t PjsgUGllcnJlIEZyYW5jb2lzIDxwaWVycmUuZnJhbmNvaXNAaW5zYS1seW9uLmZyPjsgd2Vpd2Fu Zzk0QGZveG1haWwuY29tDQrkuLvpopg6IFJlOiBbbmV0Y29uZl0gQ2FwYWJpbGl0eS1mZXRjaGlu ZyBtZWNoYW5pc21zDQoNCkhpIGV2ZXJ5b25lLA0KDQpJIGpvaW4gdGhpcyB0aHJlYWQgdG8gZGlz Y3VzcyB0aGUgdW5kZXJzdGFuZGluZyBvZiB0aGUgZHJhZnQgZGF0YS1leHBvcnQtY2FwYWJpbGl0 aWVzIGFuZCBob3cgaXQgaXMgY29uZnVzaW5nIHdpdGggdGhlIGNhcGFiaWxpdGllcyBleHBvcnQg ZmVhdHVyZSBvZiBodHRwcy1ub3RpZiBkcmFmdC4NCg0KSSB0aGluayB0aGF0IHRoZSBkYXRhLWV4 cG9ydC1jYXBhYmlsaXRpZXMgZHJhZnQgc2hvdWxkIGNoYW5nZSB0aGUgdGVybXMgY2xpZW50L3Nl cnZlciB0byBwdWJsaXNoZXIvcmVjZWl2ZXIuDQoNCltRaW5dOiBBZ3JlZSwgSSB0aGluayB0aGUg Y2xpZW50IGlzIGNvcnJlc3BvbmRpbmcgdG8gcmVjZWl2ZXIgd2hpbGUgdGhlIHNlcnZlciBpcyBj b3JyZXNwb25kaW5nIHRvIHRoZSBwdWJsaXNoZXIuDQoNClRoYXQgd2F5LCBJIHRoaW5rIGl0IHdv dWxkIGJlIGNsZWFyZXIgaW4gd2hpY2ggZHJhZnQgd2UgZGlzY3VzcyB3aGljaCBjYXNlLg0KDQoN CkFzIEkgdW5kZXJzdG9vZCByZWFkaW5nIHRoaXMgdGhyZWFkLCBkYXRhLWV4cG9ydC1jYXBhYmls aXRpZXMgZGlzY3Vzc2VzIGhvdyB0aGUgcmVjZWl2ZXIgKGNsaWVudCkgY291bGQgZ2V0IHRoZSBw dWJsaXNoZXIncyAoc2VydmVyKSBjYXBhYmlsaXRpZXMuIEFuZCBvbiB0aGUgb3RoZXIgc2lkZSwg dGhlIEhUVFBTIEdFVCBjYXBhYmlsaXRpZXMgZnJvbSBodHRwcy1ub3RpZiBkcmFmdCBkZWZpbmVz IGhvdyB0aGUgcmVjZWl2ZXIgKGNsaWVudCkgY291bGQgZXhwb3J0IGl0cyBjYXBhYmlsaXRpZXMg dG8gdGhlIHB1Ymxpc2hlciAoc2VydmVyKS4gSXTigJlzIHRoYXQgcmlnaHQgPyBQbGVhc2UgY29y cmVjdCBtZSBpZiB0aGVyZSBpcyBhbnkgbWlzdW5kZXJzdGFuZGluZy4NCg0KW1Fpbl06IFRoYXTi gJlzIGEgZ29vZCBkaXN0aW5jdGlvbi4gSW4gYWRkaXRpb24sIEkgYW0gdGhpbmtpbmcsIGRhdGEt ZXhwb3J0LWNhcGFiaWxpdGllcyBmb2N1c2VzIG9uIGdlbmVyaWMgZGF0YSBtb2RlbCBvciBkYXRh IGV4cG9ydCBmZWF0dXJlcyBpbiB5b3VyIHdvcmRzLCB3aGlsZSBodHRwcy1ub3RpZiBmb2N1c2Vz IG9uIHByb3RvY29sIHRoYXQgaXMgdXNlZCB0byBjYXJyeSB0aGVzZSBkYXRhIGV4cG9ydCBmZWF0 dXJlcy4NCg0KT24gdGhlIG90aGVyIGhhbmQsIHdlIGFyZSBkaXNjdXNzaW5nIGhvdyB0aGUgcmVj ZWl2ZXIgY291bGQgZXhwb3NlIGl0cyBjYXBhYmlsaXRpZXMgb24gZWFjaCBub3RpZmljYXRpb24g ZHJhZnRzIChodHRwcy1ub3RpZiwgdWRwLW5vdGlmLCBldGMpLiBOb3RpZmljYXRpb25zIGRyYWZ0 cyBkZWZpbmVzIGEgcHJvdG9jb2wgdG8gZXhjaGFuZ2Ugbm90aWZpY2F0aW9ucyBvdmVyIGEgdHJh bnNwb3J0IGxheWVyLCBzbyBmcm9tIG15IHBvaW50IG9mIHZpZXcsIHRoZSBjYXBhYmlsaXRpZXMg ZXhwb3J0IGZlYXR1cmUgc2hvdWxkIG5vdCBiZSBkZWZpbmVkIHRoZXJlIGJlY2F1c2UgOg0KDQox LiAgaXQgd291bGQgYmUgdHJhbnNwb3J0IGRlcGVuZGVudCAoSSBkb24ndCBmZWVsIGNvbmZvcnRh YmxlIHB1dHRpbmcgYSBIVFRQUyBleHBvcnQgY2FwYWJpbGl0aWVzIG9uIHRoZSB1ZHAtbm90aWYg ZHJhZnQuLi4pDQpbUWluXTogVGhhdOKAmXMgYSBnb29kIGFyZ3VtZW50IG9uIHdoeSB3ZSBzaG91 bGQgc2VwYXJhdGUgZGF0YSBtb2RlbCBvciBkYXRhIGV4cG9ydCBmZWF0dXJlcyBkZWZpbml0aW9u IGZyb20gcHJvdG9jb2wgZGVmaW50aW9ucy4NCjIuIGZvciBjb25maWd1cmVkIG5vdGlmaWNhdGlv bnMgZnJvbSB0aGUgcHVibGlzaGVyIHNpZGUsIHRoZXJlIGlzIG5vIG5lZWQgdG8ga25vdyB0aGUg Y2FwYWJpbGl0aWVzIGZvciB0aGUgcmVjZWl2ZXIsIHRoZXkgYWxyZWFkeSBrbm93IHRoZW0NCjMu IEkgdGhpbmsgd2UgYXJlIG1peGluZyB0aGUgY29uZmlndXJhdGlvbiBwYXJ0IGFuZCB0aGUgbm90 aWZpY2F0aW9uIHBhcnQNCltRaW5dOiBTb3J0IG9mIGFncmVlLCBidXQgaHR0cCBub3RpZiBhbHNv IGFkZCBhIHN0YXRlbWVudCB0byBzYXkNCuKAnA0KICAgRm9yIHB1Ymxpc2hlcnMgdXNpbmcgU3Vi c2NyaXB0aW9uIHRvIFlBTkcgTm90aWZpY2F0aW9ucyBbUkZDODYzOTxodHRwczovL2RhdGF0cmFj a2VyLmlldGYub3JnL2RvYy9odG1sL3JmYzg2Mzk+XSwNCiAgIGR5bmFtaWMgZGlzY292ZXJ5IG9m IGEgcmVjZWl2ZXIncyBzdXBwb3J0ZWQgZW5jb2RpbmcgaXMgbmVjZXNzYXJ5DQogICBvbmx5IHdo ZW4gdGhlICIvc3Vic2NyaXB0aW9ucy9zdWJzY3JpcHRpb24vZW5jb2RpbmciIGxlYWYgaXMgbm90 DQogICBjb25maWd1cmVkDQrigJ0NCg0KQXMgSSB1bmRlcnN0b29kIGluIHRoZSBwcmVjZWRlbnQg bWFpbHMsIFFpbiBpcyBsb29raW5nIGZvciBhIGNvbW1vbiBwcm90b2NvbCB0byBleGNoYW5nZSB0 aGVzZSBjYXBhYmlsaXRpZXMgb3ZlciBhbGwgbm90aWZpY2F0aW9ucyBkcmFmdHMuDQoNCltRaW5d OiBTZWUgYWJvdmUsIGFzIEkgY2xhcmlmaWVkLCBJIHRoaW5rIHdlIGNhbiBmb2N1cyBvbiBjb21t b24gZGF0YSBtb2RlbCBmb3IgZGF0YSBleHBvcnQgZmVhdHVyZXMgaW5zdGVhZCBvZiBjb21tb24g cHJvdG9jb2wsICB3ZSB3aWxsIGxlYXZlIHByb3RvY29sIGV4dGVuc2lvbiB0byBlYWNoIHRyYW5z cG9ydCBzcGVjaWZpYyBub3RpZiBkcmFmdCwgZG9lcyB0aGlzIG1ha2Ugc2Vuc2U/DQoNCk1heWJl IGl0IGlzIGJldHRlciB0byBkZWZpbmUgdGhpcyBjYXBhYmlsaXRpZXMgZXhwb3J0IHRyYW5zcG9y dCBkZXBlbmRlbnQgcHJvdG9jb2wgb24gYW5vdGhlciBkcmFmdCA/IE9yIG9uIHRoZSBkYXRhLWV4 cG9ydC1jYXBhYmlsaXRpZXMgZHJhZnQsIGJ1dCBpdCBpcyBkZWZpbmVkIGFzIHRyYW5zcG9ydCBh Z25vc3RpY+KApg0KDQpbUWluXTogQWdyZWUuIFNlZSBtb3JlIGNsYXJpZmljYXRpb24gYWJvdmUu DQpBbnkgdGhvdWdodHMgPw0KDQpBbGV4IEh1YW5nIEZlbmcNCklOU0EgTHlvbiB8IFVueXRlIHRl YW0NCg0KDQpEYXRlOiBXZWQsIDIgSnVuIDIwMjEgMDE6MDc6MDUgKzAwMDANCkZyb206IFFpbiBX dSA8YmlsbC53dUBodWF3ZWkuY29tPG1haWx0bzpiaWxsLnd1QGh1YXdlaS5jb20+Pg0KVG86IE1h aGVzaCBKZXRoYW5hbmRhbmkgPG1qZXRoYW5hbmRhbmlAZ21haWwuY29tPG1haWx0bzptamV0aGFu YW5kYW5pQGdtYWlsLmNvbT4+DQpDYzogS2VudCBXYXRzZW4gPGtlbnQraWV0ZkB3YXRzZW4ubmV0 PG1haWx0bzprZW50K2lldGZAd2F0c2VuLm5ldD4+LCAibmV0Y29uZkBpZXRmLm9yZzxtYWlsdG86 bmV0Y29uZkBpZXRmLm9yZz4iDQo8bmV0Y29uZkBpZXRmLm9yZzxtYWlsdG86bmV0Y29uZkBpZXRm Lm9yZz4+DQpTdWJqZWN0OiBbbmV0Y29uZl0gPz86ICBDYXBhYmlsaXR5LWZldGNoaW5nIG1lY2hh bmlzbXMNCk1lc3NhZ2UtSUQ6IDxkM2UyOGMzMzU5YjM0MzUyYjQyYzZmOTljZTg4MTQwNUBodWF3 ZWkuY29tPG1haWx0bzpkM2UyOGMzMzU5YjM0MzUyYjQyYzZmOTljZTg4MTQwNUBodWF3ZWkuY29t Pj4NCkNvbnRlbnQtVHlwZTogdGV4dC9wbGFpbjsgY2hhcnNldD0idXRmLTgiDQoNCkhpLCBNYWhl c2g6DQoNCj8/PzogTWFoZXNoIEpldGhhbmFuZGFuaSBbbWFpbHRvOm1qZXRoYW5hbmRhbmlAZ21h aWwuY29tXQ0KPz8/PzogMjAyMT82PzI/IDY6NDQNCj8/PzogUWluIFd1IDxiaWxsLnd1QGh1YXdl aS5jb208bWFpbHRvOmJpbGwud3VAaHVhd2VpLmNvbT4+DQo/PzogS2VudCBXYXRzZW4gPGtlbnQr aWV0ZkB3YXRzZW4ubmV0PG1haWx0bzprZW50K2lldGZAd2F0c2VuLm5ldD4+OyBuZXRjb25mQGll dGYub3JnPG1haWx0bzpuZXRjb25mQGlldGYub3JnPg0KPz86IFJlOiBbbmV0Y29uZl0gQ2FwYWJp bGl0eS1mZXRjaGluZyBtZWNoYW5pc21zDQoNCltUcmltbWluZyBkb3duIHRoZSBlLW1haWwgdG8g b3BlbiB0b3BpY3NdDQoNCkhpIFFpbiwNCg0KU2VlIGlubGluZSB3aXRoIFttajFdDQoNCg0KT24g TWF5IDE4LCAyMDIxLCBhdCA0OjQwIEFNLCBRaW4gV3UgPGJpbGwud3VAaHVhd2VpLmNvbTxtYWls dG86YmlsbC53dUBodWF3ZWkuY29tPjxtYWlsdG86YmlsbC53dUBodWF3ZWkuY29tPj4gd3JvdGU6 DQoNCkhpLCBNYWhlc2g6DQoNCg0KVGhlIHF1ZXN0aW9uIGlzIHdoZXRoZXIgdGhlIHJlY2VpdmVy IG5lZWRzIHRvIGJlIGEgTkVUQ09ORi9SRVNUQ09ORiBzZXJ2ZXIuIEFzIG1hcWl1ZmFuZyB3cm90 ZSBpbiBoaXMgcmVzcG9uc2UsIGlmIHRoZSByZWNlaXZlciBzdXBwb3J0cyB0aGUgZGF0YS1leHBv cnQtY2FwYWJpbGl0aWVzIGRyYWZ0LCB0aGVuIGl0IHdvdWxkIG5lZWQgdG8gYmUgYSBORVRDT05G L1JFU1RDT05GIHNlcnZlciwgd2hlcmVhcyB3aXRoIHRoZSBodHRwcy1ub3RpZiBkcmFmdCB0aGF0 IGlzIG5vdCB0aGUgY2FzZS4gVGhpcyBpcyB0aGUgY2FzZSB3aGV0aGVyIHRoZSByZWNlaXZlciBz dXBwb3J0cyBSRkMgODYzOSBvciBub3QuDQpbUWluXTpNeSB1bmRlcnN0YW5kaW5nIGlzIGRhdGEt ZXhwb3J0LWNhcGFiaWxpdGllcyBkb2Vzbj90IHJlcXVpcmUgcmVjZWl2ZXIgdG8gYmUgdGllZCB3 aXRoIE5FVENPTkYvUkVTVENPTkYgc2VydmVyLiBJIGFzc3VtZSB0aGUgbWFuYWdlbWVudCBzeXN0 ZW0gKGkuZS4sIHJlY2VpdmVyKSBhbmQgbmV0d29yayBkZXZpY2UgKGkuZS4sIHB1Ymxpc2hlcikg Y2FuIHVzZSBIVFRQUyB0byBleGNoYW5nZSBhZHZlcnRpc2VkIGRhdGEuDQoNCkluIGFkZGl0aW9u LCBNYXliZSB3aGF0IGlzIG1pc3NpbmcgaW4gdGhlIGRhdGEtZXhwb3J0LWNhcGFiaWxpdGllcyBk cmFmdCBpcyB0byBkZWZpbmUgUlBDIHRvIGFsbG93IHRoZSBwdWJsaXNoZXIgZ2V0IGNhcGFiaWxp dHkgZnJvbSByZWNlaXZlciB0aHJvdWdoIEhUVFBTIGNoYW5uZWwsIHNpbWlsYXIgdG8gd2hhdCBp cyBnZXQtYm9vdHN0cmFwcGluZy1kYXRhIFJQQyBkZWZpbmVkIGluIFJGQzg1NzIuDQoNClttajFd IFN0aXB1bGF0aW5nIGEgSFRUUHMgY2hhbm5lbCB3b3JrcyBmb3IgdGhlIEhUVFBTIG5vdGlmIGRy YWZ0LiBCdXQgd2hhdCB3aWxsIG90aGVyIHRyYW5zcG9ydCB0eXBlIGRyYWZ0cyB1c2U/IGUuZy4g dGhlIFVEUCBub3RpZiBkcmFmdD8/DQoNCltRaW5dOkkgdGhpbmsgVURQIG5vdGlmIGRyYWZ0IGNv dWxkIGFsc28gdXNlIEhUVFBzIGNoYW5uZWwgdG8gY2FycnkgY2FwYWJpbGl0eSBpbmZvcm1hdGlv biBmcm9tIHRoZSBzZXJ2ZXIgdG8gdGhlIGNsaWVudCBpbiB0aGUgZm9ybSBvZiBZQU5HIGluc3Rh bmNlIGZpbGUgZm9ybWF0Lg0KDQpQbGVhc2Ugbm90ZSB0aGF0IFJGQyA4NjM5IHJlY2VpdmVycyBk byBub3QgaGF2ZSB0byBiZSBORVRDT05GL1JFU1RDT05GIHNlcnZlcnMgZm9yIGNvbmZpZ3VyZWQg c3Vic2NyaXB0aW9ucy4gUkZDIDg2MzksIFNlY3Rpb24gMi43IGRlZmluZXMgdGhlIGNvbnRyb2wg bWVzc2FnZXMgc3VjaCBhcyA8c3Vic2NyaXB0aW9uLXN0YXJ0ZWQ+IHVzaW5nIG9uZS13YXkgWUFO RyA/bm90aWZpY2F0aW9uPyBzdGF0ZW1lbnRzLg0KDQpbUWluXTogVW5kZXJzdGFuZCB0aGlzIGNh c2UsIERvIHlvdSB0aGluayB3ZSBzaG91bGQgZGVmaW5lIGEgbmV3IG5vdGlmaWNhdGlvbiBpbiB0 aGUgZGF0YS1leHBvcnQtY2FwYWJpbGl0aWVzIGRyYWZ0IGluc3RlYWQgb2YgY29uc2lkZXJpbmcg dG8gZGVmaW5lIFJQQz8NCg0KW21qMV0gSSBkbyBub3QgdW5kZXJzdGFuZCB0aGlzIHN0YXRlbWVu dC4gQ2FuIHlvdSBleHBhbmQ/DQoNCltRaW5dOiBJIGFtIG5vdCBzdXJlIHRoZSBSUEMgaXMgYSBn b29kIGRlc2lnbiBjaG9pY2UsIEkgdGhpbmsgd2UgY291bGQgaGF2ZSAzIG9wdGlvbnMNCj9hP1Jl cG9ydCBjYXBhYmlsaXR5IGluZm9ybWF0aW9uIGZyb20gdGhlIEhUVFBzIHNlcnZlciBvciB0aGUg SFRUUHMgY2xpZW50IGF0IHJ1bi10aW1lIG9yIGltcGxlbWVudGF0aW9uLSB0aW1lLCBwZXIgdGhl IFlBTkcgSW5zdGFuY2UgRGF0YSBGaWxlIEZvcm1hdC4NCihiKSBEZWZpbmUgb25lIHdheSBZQU5H IG5vdGlmaWNhdGlvbiBzaW1pbGFyIHRvIDxzdWJzY3JpcHRpb24tc3RhcnRlZD4gdGhhdCBpcyBz ZW50IGZyb20gdGhlIHNlcnZlciB0byB0aGUgY2xpZW50DQooYykgUmVwb3J0IGNhcGFiaWxpdHkg aW5mb3JtYXRpb24gb25seSBmcm9tIE5FVENPTkYgc2VydmVyIHVzaW5nIFlBTkcgbW9kZWwgZGVm aW5lIGluIGRhdGEtZXhwb3J0LWNhcGFpYmxpdGllcyBkcmFmdA0KSSB0aGluayAoYikgb25seSBh bGxvdyB0aGUgc2VydmVyIGFkdmVydGlzZSB0aGUgc2VydmVyIGNhcGFiaWxpdHkgdG8gdGhlIGNs aWVudCBidXQgZG9lcyBub3QgYWxsb3cgdGhlIGNsaWVudCBpc3N1ZSBub3RpZmljYXRpb24gYW5k IGFkdmVydGlzZSBjbGllbnQgY2FwYWJpbGl0eSB0byB0aGUgc2VydmVyDQooYykgaXMgc29tZXRo aW5nIHlvdSBlbnZpc2lvbiBob3cgaXQgaXMgdXNlZCwgdGhlIGxpbWl0YXRpb24gaXMgdG8gcmVx dWlyZSBORVRDT05GIHNlcnZlciB0byBiZSBzdXBwb3J0ZWQgYnkgdGhlIHJlY2VpdmVyIG9yIHRo ZSBjbGllbnQsIGJ1dCB0aGlzIG9wdGlvbiBpcyBub3Qgd2hhdCB3ZSBwcm9wb3NlZCBpbiB0aGUg ZGF0YS1leHBvcnQtY2FwYWJpbGl0aWVzIGRyYWZ0Lg0KVGhlIHNvbHV0aW9uIHdlIHByb3Bvc2Vk IGlzIChhKSB3aGljaCBhbGxvd3MgcmVwb3J0IGNhcGFiaWxpdHkgaW5mb3JtYXRpb24gZWl0aGVy IGZyb20gdGhlIFNlcnZlciBvciB0aGUgY2xpZW50IHVzaW5nIFlBTkcgSW5zdGFuY2UgZGF0YSBm aWxlLiBIb3BlIHRoaXMgY2xhcmlmaWVzLg0KDQpNYWhlc2ggSmV0aGFuYW5kYW5pDQptamV0aGFu YW5kYW5pQGdtYWlsLmNvbTxtYWlsdG86bWpldGhhbmFuZGFuaUBnbWFpbC5jb20+PG1haWx0bzpt amV0aGFuYW5kYW5pQGdtYWlsLmNvbT4NCg== --_000_8c4abbe6e738407194d787612c8a2e9dhuaweicom_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 5a6L5L2TOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtm b250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMgMiA0 O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUg MiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OuW+rui9r+mbhem7kTsN CglwYW5vc2UtMToyIDExIDUgMyAyIDIgNCAyIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OiJcQOW+rui9r+mbhem7kSI7DQoJcGFub3NlLTE6MiAxMSA1IDMgMiAyIDQgMiAyIDQ7fQ0K QGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiXEDlrovkvZMiOw0KCXBhbm9zZS0xOjIgMSA2IDAg MyAxIDEgMSAxIDE7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5N c29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4w MDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseTrlrovkvZM7fQ0KYTpsaW5r LCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1 ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBl cmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0K CXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcHJlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5 OTsNCgltc28tc3R5bGUtbGluazoiSFRNTCDpooTorr7moLzlvI8gQ2hhciI7DQoJbWFyZ2luOjBj bTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZh bWlseTrlrovkvZM7fQ0KcC5Nc29MaXN0UGFyYWdyYXBoLCBsaS5Nc29MaXN0UGFyYWdyYXBoLCBk aXYuTXNvTGlzdFBhcmFncmFwaA0KCXttc28tc3R5bGUtcHJpb3JpdHk6MzQ7DQoJbWFyZ2luOjBj bTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJdGV4dC1pbmRlbnQ6MjEuMHB0Ow0KCWZvbnQt c2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk65a6L5L2TO30NCnNwYW4uYXBwbGUtdGFiLXNwYW4N Cgl7bXNvLXN0eWxlLW5hbWU6YXBwbGUtdGFiLXNwYW47fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7 bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNh bnMtc2VyaWY7DQoJY29sb3I6IzFGNDk3RDt9DQpzcGFuLkhUTUxDaGFyDQoJe21zby1zdHlsZS1u YW1lOiJIVE1MIOmihOiuvuagvOW8jyBDaGFyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJ bXNvLXN0eWxlLWxpbms6IkhUTUwg6aKE6K6+5qC85byPIjsNCglmb250LWZhbWlseTrlrovkvZM7 fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1z aXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo2MTIuMHB0IDc5Mi4wcHQ7 DQoJbWFyZ2luOjcyLjBwdCA5MC4wcHQgNzIuMHB0IDkwLjBwdDt9DQpkaXYuV29yZFNlY3Rpb24x DQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi8qIExpc3QgRGVmaW5pdGlvbnMgKi8NCkBsaXN0IGww DQoJe21zby1saXN0LWlkOjE1MTQ2MTAzNjk7DQoJbXNvLWxpc3QtdHlwZTpoeWJyaWQ7DQoJbXNv LWxpc3QtdGVtcGxhdGUtaWRzOjE1NDgxMjMwMTIgLTY4MTQyNDAzMCA2NzY5ODcxMyA2NzY5ODcx NSA2NzY5ODcwMyA2NzY5ODcxMyA2NzY5ODcxNSA2NzY5ODcwMyA2NzY5ODcxMyA2NzY5ODcxNTt9 DQpAbGlzdCBsMDpsZXZlbDENCgl7bXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVs LW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCW1hcmdpbi1sZWZ0OjE4LjBwdDsNCgl0ZXh0LWluZGVu dDotMTguMHB0Ow0KCWNvbG9yOmJsYWNrO30NCkBsaXN0IGwwOmxldmVsMg0KCXttc28tbGV2ZWwt bnVtYmVyLWZvcm1hdDphbHBoYS1sb3dlcjsNCgltc28tbGV2ZWwtdGV4dDoiJTJcKSI7DQoJbXNv LWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CW1hcmdpbi1sZWZ0OjQyLjBwdDsNCgl0ZXh0LWluZGVudDotMjEuMHB0O30NCkBsaXN0IGwwOmxl dmVsMw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpyb21hbi1sb3dlcjsNCgltc28tbGV2ZWwt dGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOnJpZ2h0Ow0KCW1hcmdp bi1sZWZ0OjYzLjBwdDsNCgl0ZXh0LWluZGVudDotMjEuMHB0O30NCkBsaXN0IGwwOmxldmVsNA0K CXttc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxl ZnQ7DQoJbWFyZ2luLWxlZnQ6ODQuMHB0Ow0KCXRleHQtaW5kZW50Oi0yMS4wcHQ7fQ0KQGxpc3Qg bDA6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLWxvd2VyOw0KCW1zby1s ZXZlbC10ZXh0OiIlNVwpIjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwt bnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJbWFyZ2luLWxlZnQ6MTA1LjBwdDsNCgl0ZXh0LWluZGVu dDotMjEuMHB0O30NCkBsaXN0IGwwOmxldmVsNg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpy b21hbi1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVy LXBvc2l0aW9uOnJpZ2h0Ow0KCW1hcmdpbi1sZWZ0OjEyNi4wcHQ7DQoJdGV4dC1pbmRlbnQ6LTIx LjBwdDt9DQpAbGlzdCBsMDpsZXZlbDcNCgl7bXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCW1hcmdpbi1sZWZ0OjE0Ny4wcHQ7DQoJdGV4 dC1pbmRlbnQ6LTIxLjBwdDt9DQpAbGlzdCBsMDpsZXZlbDgNCgl7bXNvLWxldmVsLW51bWJlci1m b3JtYXQ6YWxwaGEtbG93ZXI7DQoJbXNvLWxldmVsLXRleHQ6IiU4XCkiOw0KCW1zby1sZXZlbC10 YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgltYXJnaW4t bGVmdDoxNjguMHB0Ow0KCXRleHQtaW5kZW50Oi0yMS4wcHQ7fQ0KQGxpc3QgbDA6bGV2ZWw5DQoJ e21zby1sZXZlbC1udW1iZXItZm9ybWF0OnJvbWFuLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3Rv cDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246cmlnaHQ7DQoJbWFyZ2luLWxlZnQ6 MTg5LjBwdDsNCgl0ZXh0LWluZGVudDotMjEuMHB0O30NCm9sDQoJe21hcmdpbi1ib3R0b206MGNt O30NCnVsDQoJe21hcmdpbi1ib3R0b206MGNtO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNv IDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAv Pg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxh eW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwv bzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IlpI LUNOIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9u MSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2Nv bG9yOiMxRjQ5N0QiPlRoYW5rcyBBbGV4IGZvciB0aGUgZmVlZGJhY2suIFBsZWFzZSBzZWUgbXkg cmVwbHkgaW5saW5lIGJlbG93LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0 eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzoz LjBwdCAwY20gMGNtIDBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDvlvq7ova/pm4Xpu5EmcXVvdDssc2Fu cy1zZXJpZiI+5Y+R5Lu25Lq6PHNwYW4gbGFuZz0iRU4tVVMiPjo8L3NwYW4+PC9zcGFuPjwvYj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q75b6u6L2v6ZuF6buRJnF1b3Q7LHNhbnMtc2VyaWYiPiBabWFpbCBbbWFpbHRvOmFsZXguaHVh bmctZmVuZ0BpbnNhLWx5b24uZnJdDQo8YnI+DQo8L3NwYW4+PGI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q75b6u6L2v6ZuF6buRJnF1b3Q7LHNhbnMtc2Vy aWYiPuWPkemAgeaXtumXtDxzcGFuIGxhbmc9IkVOLVVTIj46PC9zcGFuPjwvc3Bhbj48L2I+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O+W+rui9r+mbhem7kSZxdW90OyxzYW5zLXNlcmlmIj4gMjAyMTwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDvlvq7ova/pm4Xpu5EmcXVvdDssc2Fu cy1zZXJpZiI+5bm0PHNwYW4gbGFuZz0iRU4tVVMiPjY8L3NwYW4+5pyIPHNwYW4gbGFuZz0iRU4t VVMiPjg8L3NwYW4+5pelPHNwYW4gbGFuZz0iRU4tVVMiPg0KIDE1OjIxPGJyPg0KPC9zcGFuPjxi PuaUtuS7tuS6ujxzcGFuIGxhbmc9IkVOLVVTIj46PC9zcGFuPjwvYj48c3BhbiBsYW5nPSJFTi1V UyI+IFFpbiBXdSAmbHQ7YmlsbC53dUBodWF3ZWkuY29tJmd0OzsgbmV0Y29uZi1jaGFpcnNAaWV0 Zi5vcmc8YnI+DQo8L3NwYW4+PGI+5oqE6YCBPHNwYW4gbGFuZz0iRU4tVVMiPjo8L3NwYW4+PC9i PjxzcGFuIGxhbmc9IkVOLVVTIj4gbmV0Y29uZkBpZXRmLm9yZzsgbWFxaXVmYW5nIChBKSAmbHQ7 bWFxaXVmYW5nMUBodWF3ZWkuY29tJmd0OzsgUGllcnJlIEZyYW5jb2lzICZsdDtwaWVycmUuZnJh bmNvaXNAaW5zYS1seW9uLmZyJmd0Ozsgd2Vpd2FuZzk0QGZveG1haWwuY29tPGJyPg0KPC9zcGFu PjxiPuS4u+mimDxzcGFuIGxhbmc9IkVOLVVTIj46PC9zcGFuPjwvYj48c3BhbiBsYW5nPSJFTi1V UyI+IFJlOiBbbmV0Y29uZl0gQ2FwYWJpbGl0eS1mZXRjaGluZyBtZWNoYW5pc21zPG86cD48L286 cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+SGkgZXZlcnlv bmUsPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj5JIGpv aW4gdGhpcyB0aHJlYWQgdG8gZGlzY3VzcyB0aGUgdW5kZXJzdGFuZGluZyBvZiB0aGUgZHJhZnQg ZGF0YS1leHBvcnQtY2FwYWJpbGl0aWVzIGFuZCBob3cgaXQgaXMgY29uZnVzaW5nIHdpdGggdGhl IGNhcGFiaWxpdGllcyBleHBvcnQgZmVhdHVyZSBvZiBodHRwcy1ub3RpZiBkcmFmdC48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPkkgdGhpbmsgdGhhdCB0 aGU8c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPiZuYnNwO2RhdGEtZXhwb3J0LWNhcGFiaWxpdGll cyBkcmFmdCBzaG91bGQgY2hhbmdlIHRoZSB0ZXJtcyBjbGllbnQvc2VydmVyIHRvIHB1Ymxpc2hl ci9yZWNlaXZlci4NCjwvc3Bhbj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD48L286 cD48L3NwYW4+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xv cjojMUY0OTdEIj5bUWluXTogQWdyZWUsIEkgdGhpbmsgdGhlIGNsaWVudCBpcyBjb3JyZXNwb25k aW5nIHRvIHJlY2VpdmVyIHdoaWxlIHRoZSBzZXJ2ZXIgaXMgY29ycmVzcG9uZGluZyB0byB0aGUg cHVibGlzaGVyLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJjb2xvcjpibGFjayI+VGhhdCB3YXksIEkgdGhpbmsgaXQgd291bGQgYmUgY2xlYXJlciBp biB3aGljaCBkcmFmdCB3ZSBkaXNjdXNzIHdoaWNoIGNhc2UuPC9zcGFuPjxzcGFuIGxhbmc9IkVO LVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOmJsYWNrIj48YnI+DQo8YnI+ DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Y29sb3I6YmxhY2siPkFzIEkgdW5kZXJzdG9vZCByZWFkaW5nIHRoaXMgdGhyZWFkLCZuYnNwO2Rh dGEtZXhwb3J0LWNhcGFiaWxpdGllcyBkaXNjdXNzZXMgaG93IHRoZSByZWNlaXZlciAoY2xpZW50 KSBjb3VsZCBnZXQgdGhlIHB1Ymxpc2hlcidzIChzZXJ2ZXIpIGNhcGFiaWxpdGllcy4gQW5kIG9u IHRoZSBvdGhlciBzaWRlLCB0aGUgSFRUUFMgR0VUIGNhcGFiaWxpdGllcw0KIGZyb20gaHR0cHMt bm90aWYgZHJhZnQgZGVmaW5lcyBob3cgdGhlIHJlY2VpdmVyIChjbGllbnQpIGNvdWxkIGV4cG9y dCBpdHMgY2FwYWJpbGl0aWVzIHRvIHRoZSBwdWJsaXNoZXIgKHNlcnZlcikuIEl04oCZcyB0aGF0 IHJpZ2h0ID8gUGxlYXNlIGNvcnJlY3QgbWUgaWYgdGhlcmUgaXMgYW55IG1pc3VuZGVyc3RhbmRp bmcuPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41 cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5 N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+W1Fpbl06IFRoYXTigJlz IGEgZ29vZCBkaXN0aW5jdGlvbi4gSW4gYWRkaXRpb24sIEkgYW0gdGhpbmtpbmcsIGRhdGEtZXhw b3J0LWNhcGFiaWxpdGllcyBmb2N1c2VzIG9uIGdlbmVyaWMgZGF0YSBtb2RlbCBvciBkYXRhIGV4 cG9ydCBmZWF0dXJlcyBpbiB5b3VyDQogd29yZHMsIHdoaWxlIGh0dHBzLW5vdGlmIGZvY3VzZXMg b24gcHJvdG9jb2wgdGhhdCBpcyB1c2VkIHRvIGNhcnJ5IHRoZXNlIGRhdGEgZXhwb3J0IGZlYXR1 cmVzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImNvbG9yOmJsYWNrIj5PbiB0aGUgb3RoZXIgaGFuZCwgd2UgYXJlIGRpc2N1c3NpbmcgaG93 IHRoZSByZWNlaXZlciBjb3VsZCBleHBvc2UgaXRzIGNhcGFiaWxpdGllcyBvbiBlYWNoIG5vdGlm aWNhdGlvbiBkcmFmdHMgKGh0dHBzLW5vdGlmLCB1ZHAtbm90aWYsIGV0YykuIE5vdGlmaWNhdGlv bnMgZHJhZnRzIGRlZmluZXMgYSBwcm90b2NvbCB0byBleGNoYW5nZSBub3RpZmljYXRpb25zDQog b3ZlciBhIHRyYW5zcG9ydCBsYXllciwgc28gZnJvbSBteSBwb2ludCBvZiB2aWV3LCB0aGUgY2Fw YWJpbGl0aWVzIGV4cG9ydCBmZWF0dXJlIHNob3VsZCBub3QgYmUgZGVmaW5lZCB0aGVyZSBiZWNh dXNlIDo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MTguMHB0O3RleHQtaW5kZW50Oi0xOC4wcHQ7bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPg0K PCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjpibGFj ayI+PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9yZSI+MS48c3BhbiBzdHlsZT0iZm9udDo3LjBw dCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiPiZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3Nw YW4+PCFbZW5kaWZdPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6YmxhY2siPml0IHdv dWxkIGJlIHRyYW5zcG9ydCBkZXBlbmRlbnQgKEkgZG9uJ3QgZmVlbCBjb25mb3J0YWJsZSBwdXR0 aW5nIGEgSFRUUFMgZXhwb3J0IGNhcGFiaWxpdGllcyBvbiB0aGUgdWRwLW5vdGlmIGRyYWZ0Li4u KTwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+W1Fpbl06IFRoYXTigJlzIGEgZ29vZCBhcmd1bWVudCBv biB3aHkgd2Ugc2hvdWxkIHNlcGFyYXRlIGRhdGEgbW9kZWwgb3IgZGF0YSBleHBvcnQgZmVhdHVy ZXMgZGVmaW5pdGlvbiBmcm9tIHByb3RvY29sIGRlZmludGlvbnMuPG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJjb2xvcjpibGFjayI+Mi4gZm9yIGNvbmZpZ3VyZWQgbm90aWZpY2F0aW9ucyBm cm9tIHRoZSBwdWJsaXNoZXIgc2lkZSwgdGhlcmUgaXMgbm8gbmVlZCB0byBrbm93IHRoZSBjYXBh YmlsaXRpZXMgZm9yIHRoZSByZWNlaXZlciwgdGhleSBhbHJlYWR5IGtub3cgdGhlbTwvc3Bhbj48 c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjpibGFj ayI+My4gSSB0aGluayB3ZSBhcmUgbWl4aW5nIHRoZSBjb25maWd1cmF0aW9uIHBhcnQgYW5kIHRo ZSBub3RpZmljYXRpb24gcGFydDwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5bUWluXTogU29ydCBvZiBhZ3JlZSwg YnV0IGh0dHAgbm90aWYgYWxzbyBhZGQgYSBzdGF0ZW1lbnQgdG8gc2F5PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJp Zjtjb2xvcjojMUY0OTdEIj7igJw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBsYW5nPSJFTiI+ Jm5ic3A7Jm5ic3A7IEZvciBwdWJsaXNoZXJzIHVzaW5nIFN1YnNjcmlwdGlvbiB0byBZQU5HIE5v dGlmaWNhdGlvbnMgWzxhIGhyZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2h0 bWwvcmZjODYzOSIgdGl0bGU9IiZxdW90O1N1YnNjcmlwdGlvbiB0byBZQU5HIE5vdGlmaWNhdGlv bnMmcXVvdDsiPlJGQzg2Mzk8L2E+XSw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBsYW5nPSJF TiI+Jm5ic3A7Jm5ic3A7IGR5bmFtaWMgZGlzY292ZXJ5IG9mIGEgcmVjZWl2ZXIncyBzdXBwb3J0 ZWQgZW5jb2RpbmcgaXMgbmVjZXNzYXJ5PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9InBhZ2UtYnJlYWstYmVmb3JlOmFsd2F5cyI+PHNwYW4gbGFuZz0i RU4iPiZuYnNwOyZuYnNwOyBvbmx5IHdoZW4gdGhlICZxdW90Oy9zdWJzY3JpcHRpb25zL3N1YnNj cmlwdGlvbi9lbmNvZGluZyZxdW90OyBsZWFmIGlzIG5vdDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOIj4mbmJzcDsmbmJzcDsgY29uZmln dXJlZDwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+4oCdPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjoj MUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOmJsYWNrIj5B cyBJIHVuZGVyc3Rvb2QgaW4gdGhlIHByZWNlZGVudCBtYWlscywgUWluIGlzIGxvb2tpbmcgZm9y IGEgY29tbW9uIHByb3RvY29sIHRvIGV4Y2hhbmdlIHRoZXNlIGNhcGFiaWxpdGllcyBvdmVyIGFs bCBub3RpZmljYXRpb25zIGRyYWZ0cy4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+W1Fpbl06IFNlZSBhYm92ZSwgYXMgSSBj bGFyaWZpZWQsIEkgdGhpbmsgd2UgY2FuIGZvY3VzIG9uIGNvbW1vbiBkYXRhIG1vZGVsIGZvciBk YXRhIGV4cG9ydCBmZWF0dXJlcyBpbnN0ZWFkIG9mIGNvbW1vbiBwcm90b2NvbCwgJm5ic3A7d2Ug d2lsbCBsZWF2ZSBwcm90b2NvbA0KIGV4dGVuc2lvbiB0byBlYWNoIHRyYW5zcG9ydCBzcGVjaWZp YyBub3RpZiBkcmFmdCwgZG9lcyB0aGlzIG1ha2Ugc2Vuc2U/PG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xv cjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOmJsYWNrIj5NYXliZSBpdCBpcyBi ZXR0ZXImbmJzcDt0byBkZWZpbmUgdGhpcyBjYXBhYmlsaXRpZXMgZXhwb3J0IHRyYW5zcG9ydCBk ZXBlbmRlbnQgcHJvdG9jb2wgb24gYW5vdGhlciBkcmFmdCA/IE9yIG9uIHRoZSZuYnNwO2RhdGEt ZXhwb3J0LWNhcGFiaWxpdGllcyBkcmFmdCwgYnV0IGl0IGlzIGRlZmluZWQgYXMgdHJhbnNwb3J0 IGFnbm9zdGlj4oCmPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEw LjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFG NDk3RCI+W1Fpbl06IEFncmVlLiBTZWUgbW9yZSBjbGFyaWZpY2F0aW9uIGFib3ZlLjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLVVTIj5BbnkgdGhvdWdodHMgPzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1VUyI+QWxleCBIdWFuZyBGZW5nPG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMi PklOU0EgTHlvbiB8IFVueXRlIHRlYW08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PGJyPg0KPGJyPg0K PG86cD48L286cD48L3NwYW4+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4w cHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PHNwYW4gbGFuZz0iRU4tVVMiPkRhdGU6 IFdlZCwgMiBKdW4gMjAyMSAwMTowNzowNSAmIzQzOzAwMDA8YnI+DQpGcm9tOiBRaW4gV3UgJmx0 OzxhIGhyZWY9Im1haWx0bzpiaWxsLnd1QGh1YXdlaS5jb20iPmJpbGwud3VAaHVhd2VpLmNvbTwv YT4mZ3Q7PGJyPg0KVG86IE1haGVzaCBKZXRoYW5hbmRhbmkgJmx0OzxhIGhyZWY9Im1haWx0bzpt amV0aGFuYW5kYW5pQGdtYWlsLmNvbSI+bWpldGhhbmFuZGFuaUBnbWFpbC5jb208L2E+Jmd0Ozxi cj4NCkNjOiBLZW50IFdhdHNlbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmtlbnQmIzQzO2lldGZAd2F0 c2VuLm5ldCI+a2VudCYjNDM7aWV0ZkB3YXRzZW4ubmV0PC9hPiZndDssICZxdW90OzxhIGhyZWY9 Im1haWx0bzpuZXRjb25mQGlldGYub3JnIj5uZXRjb25mQGlldGYub3JnPC9hPiZxdW90Ozxicj4N CjxzcGFuIGNsYXNzPSJhcHBsZS10YWItc3BhbiI+PC9zcGFuPiZsdDs8YSBocmVmPSJtYWlsdG86 bmV0Y29uZkBpZXRmLm9yZyI+bmV0Y29uZkBpZXRmLm9yZzwvYT4mZ3Q7PGJyPg0KU3ViamVjdDog W25ldGNvbmZdID8/OiAmbmJzcDtDYXBhYmlsaXR5LWZldGNoaW5nIG1lY2hhbmlzbXM8YnI+DQpN ZXNzYWdlLUlEOiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmQzZTI4YzMzNTliMzQzNTJiNDJjNmY5OWNl ODgxNDA1QGh1YXdlaS5jb20iPmQzZTI4YzMzNTliMzQzNTJiNDJjNmY5OWNlODgxNDA1QGh1YXdl aS5jb208L2E+Jmd0Ozxicj4NCkNvbnRlbnQtVHlwZTogdGV4dC9wbGFpbjsgY2hhcnNldD0mcXVv dDt1dGYtOCZxdW90Ozxicj4NCjxicj4NCkhpLCBNYWhlc2g6PGJyPg0KPGJyPg0KPz8/OiBNYWhl c2ggSmV0aGFuYW5kYW5pIFs8YSBocmVmPSJtYWlsdG86bWpldGhhbmFuZGFuaUBnbWFpbC5jb20i Pm1haWx0bzptamV0aGFuYW5kYW5pQGdtYWlsLmNvbTwvYT5dPGJyPg0KPz8/PzogMjAyMT82PzI/ IDY6NDQ8YnI+DQo/Pz86IFFpbiBXdSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmJpbGwud3VAaHVhd2Vp LmNvbSI+YmlsbC53dUBodWF3ZWkuY29tPC9hPiZndDs8YnI+DQo/PzogS2VudCBXYXRzZW4gJmx0 OzxhIGhyZWY9Im1haWx0bzprZW50JiM0MztpZXRmQHdhdHNlbi5uZXQiPmtlbnQmIzQzO2lldGZA d2F0c2VuLm5ldDwvYT4mZ3Q7Ow0KPGEgaHJlZj0ibWFpbHRvOm5ldGNvbmZAaWV0Zi5vcmciPm5l dGNvbmZAaWV0Zi5vcmc8L2E+PGJyPg0KPz86IFJlOiBbbmV0Y29uZl0gQ2FwYWJpbGl0eS1mZXRj aGluZyBtZWNoYW5pc21zPGJyPg0KPGJyPg0KW1RyaW1taW5nIGRvd24gdGhlIGUtbWFpbCB0byBv cGVuIHRvcGljc108YnI+DQo8YnI+DQpIaSBRaW4sPGJyPg0KPGJyPg0KU2VlIGlubGluZSB3aXRo IFttajFdPGJyPg0KPGJyPg0KPGJyPg0KT24gTWF5IDE4LCAyMDIxLCBhdCA0OjQwIEFNLCBRaW4g V3UgJmx0OzxhIGhyZWY9Im1haWx0bzpiaWxsLnd1QGh1YXdlaS5jb20iPmJpbGwud3VAaHVhd2Vp LmNvbTwvYT4mbHQ7PGEgaHJlZj0ibWFpbHRvOmJpbGwud3VAaHVhd2VpLmNvbSI+bWFpbHRvOmJp bGwud3VAaHVhd2VpLmNvbTwvYT4mZ3Q7Jmd0OyB3cm90ZTo8YnI+DQo8YnI+DQpIaSwgTWFoZXNo Ojxicj4NCjxicj4NCjxicj4NClRoZSBxdWVzdGlvbiBpcyB3aGV0aGVyIHRoZSByZWNlaXZlciBu ZWVkcyB0byBiZSBhIE5FVENPTkYvUkVTVENPTkYgc2VydmVyLiBBcyBtYXFpdWZhbmcgd3JvdGUg aW4gaGlzIHJlc3BvbnNlLCBpZiB0aGUgcmVjZWl2ZXIgc3VwcG9ydHMgdGhlIGRhdGEtZXhwb3J0 LWNhcGFiaWxpdGllcyBkcmFmdCwgdGhlbiBpdCB3b3VsZCBuZWVkIHRvIGJlIGEgTkVUQ09ORi9S RVNUQ09ORiBzZXJ2ZXIsIHdoZXJlYXMgd2l0aCB0aGUgaHR0cHMtbm90aWYgZHJhZnQNCiB0aGF0 IGlzIG5vdCB0aGUgY2FzZS4gVGhpcyBpcyB0aGUgY2FzZSB3aGV0aGVyIHRoZSByZWNlaXZlciBz dXBwb3J0cyBSRkMgODYzOSBvciBub3QuPGJyPg0KW1Fpbl06TXkgdW5kZXJzdGFuZGluZyBpcyBk YXRhLWV4cG9ydC1jYXBhYmlsaXRpZXMgZG9lc24/dCByZXF1aXJlIHJlY2VpdmVyIHRvIGJlIHRp ZWQgd2l0aCBORVRDT05GL1JFU1RDT05GIHNlcnZlci4gSSBhc3N1bWUgdGhlIG1hbmFnZW1lbnQg c3lzdGVtIChpLmUuLCByZWNlaXZlcikgYW5kIG5ldHdvcmsgZGV2aWNlIChpLmUuLCBwdWJsaXNo ZXIpIGNhbiB1c2UgSFRUUFMgdG8gZXhjaGFuZ2UgYWR2ZXJ0aXNlZCBkYXRhLjxicj4NCjxicj4N CkluIGFkZGl0aW9uLCBNYXliZSB3aGF0IGlzIG1pc3NpbmcgaW4gdGhlIGRhdGEtZXhwb3J0LWNh cGFiaWxpdGllcyBkcmFmdCBpcyB0byBkZWZpbmUgUlBDIHRvIGFsbG93IHRoZSBwdWJsaXNoZXIg Z2V0IGNhcGFiaWxpdHkgZnJvbSByZWNlaXZlciB0aHJvdWdoIEhUVFBTIGNoYW5uZWwsIHNpbWls YXIgdG8gd2hhdCBpcyBnZXQtYm9vdHN0cmFwcGluZy1kYXRhIFJQQyBkZWZpbmVkIGluIFJGQzg1 NzIuPGJyPg0KPGJyPg0KW21qMV0gU3RpcHVsYXRpbmcgYSBIVFRQcyBjaGFubmVsIHdvcmtzIGZv ciB0aGUgSFRUUFMgbm90aWYgZHJhZnQuIEJ1dCB3aGF0IHdpbGwgb3RoZXIgdHJhbnNwb3J0IHR5 cGUgZHJhZnRzIHVzZT8gZS5nLiB0aGUgVURQIG5vdGlmIGRyYWZ0Pz88YnI+DQo8YnI+DQpbUWlu XTpJIHRoaW5rIFVEUCBub3RpZiBkcmFmdCBjb3VsZCBhbHNvIHVzZSBIVFRQcyBjaGFubmVsIHRv IGNhcnJ5IGNhcGFiaWxpdHkgaW5mb3JtYXRpb24gZnJvbSB0aGUgc2VydmVyIHRvIHRoZSBjbGll bnQgaW4gdGhlIGZvcm0gb2YgWUFORyBpbnN0YW5jZSBmaWxlIGZvcm1hdC48YnI+DQo8YnI+DQpQ bGVhc2Ugbm90ZSB0aGF0IFJGQyA4NjM5IHJlY2VpdmVycyBkbyBub3QgaGF2ZSB0byBiZSBORVRD T05GL1JFU1RDT05GIHNlcnZlcnMgZm9yIGNvbmZpZ3VyZWQgc3Vic2NyaXB0aW9ucy4gUkZDIDg2 MzksIFNlY3Rpb24gMi43IGRlZmluZXMgdGhlIGNvbnRyb2wgbWVzc2FnZXMgc3VjaCBhcyAmbHQ7 c3Vic2NyaXB0aW9uLXN0YXJ0ZWQmZ3Q7IHVzaW5nIG9uZS13YXkgWUFORyA/bm90aWZpY2F0aW9u PyBzdGF0ZW1lbnRzLjxicj4NCjxicj4NCltRaW5dOiBVbmRlcnN0YW5kIHRoaXMgY2FzZSwgRG8g eW91IHRoaW5rIHdlIHNob3VsZCBkZWZpbmUgYSBuZXcgbm90aWZpY2F0aW9uIGluIHRoZSBkYXRh LWV4cG9ydC1jYXBhYmlsaXRpZXMgZHJhZnQgaW5zdGVhZCBvZiBjb25zaWRlcmluZyB0byBkZWZp bmUgUlBDPzxicj4NCjxicj4NClttajFdIEkgZG8gbm90IHVuZGVyc3RhbmQgdGhpcyBzdGF0ZW1l bnQuIENhbiB5b3UgZXhwYW5kPzxicj4NCjxicj4NCltRaW5dOiBJIGFtIG5vdCBzdXJlIHRoZSBS UEMgaXMgYSBnb29kIGRlc2lnbiBjaG9pY2UsIEkgdGhpbmsgd2UgY291bGQgaGF2ZSAzIG9wdGlv bnM8YnI+DQo/YT9SZXBvcnQgY2FwYWJpbGl0eSBpbmZvcm1hdGlvbiBmcm9tIHRoZSBIVFRQcyBz ZXJ2ZXIgb3IgdGhlIEhUVFBzIGNsaWVudCBhdCBydW4tdGltZSBvciBpbXBsZW1lbnRhdGlvbi0g dGltZSwgcGVyIHRoZSBZQU5HIEluc3RhbmNlIERhdGEgRmlsZSBGb3JtYXQuPGJyPg0KKGIpIERl ZmluZSBvbmUgd2F5IFlBTkcgbm90aWZpY2F0aW9uIHNpbWlsYXIgdG8gJmx0O3N1YnNjcmlwdGlv bi1zdGFydGVkJmd0OyB0aGF0IGlzIHNlbnQgZnJvbSB0aGUgc2VydmVyIHRvIHRoZSBjbGllbnQ8 YnI+DQooYykgUmVwb3J0IGNhcGFiaWxpdHkgaW5mb3JtYXRpb24gb25seSBmcm9tIE5FVENPTkYg c2VydmVyIHVzaW5nIFlBTkcgbW9kZWwgZGVmaW5lIGluIGRhdGEtZXhwb3J0LWNhcGFpYmxpdGll cyBkcmFmdDxicj4NCkkgdGhpbmsgKGIpIG9ubHkgYWxsb3cgdGhlIHNlcnZlciBhZHZlcnRpc2Ug dGhlIHNlcnZlciBjYXBhYmlsaXR5IHRvIHRoZSBjbGllbnQgYnV0IGRvZXMgbm90IGFsbG93IHRo ZSBjbGllbnQgaXNzdWUgbm90aWZpY2F0aW9uIGFuZCBhZHZlcnRpc2UgY2xpZW50IGNhcGFiaWxp dHkgdG8gdGhlIHNlcnZlcjxicj4NCihjKSBpcyBzb21ldGhpbmcgeW91IGVudmlzaW9uIGhvdyBp dCBpcyB1c2VkLCB0aGUgbGltaXRhdGlvbiBpcyB0byByZXF1aXJlIE5FVENPTkYgc2VydmVyIHRv IGJlIHN1cHBvcnRlZCBieSB0aGUgcmVjZWl2ZXIgb3IgdGhlIGNsaWVudCwgYnV0IHRoaXMgb3B0 aW9uIGlzIG5vdCB3aGF0IHdlIHByb3Bvc2VkIGluIHRoZSBkYXRhLWV4cG9ydC1jYXBhYmlsaXRp ZXMgZHJhZnQuPGJyPg0KVGhlIHNvbHV0aW9uIHdlIHByb3Bvc2VkIGlzIChhKSB3aGljaCBhbGxv d3MgcmVwb3J0IGNhcGFiaWxpdHkgaW5mb3JtYXRpb24gZWl0aGVyIGZyb20gdGhlIFNlcnZlciBv ciB0aGUgY2xpZW50IHVzaW5nIFlBTkcgSW5zdGFuY2UgZGF0YSBmaWxlLiBIb3BlIHRoaXMgY2xh cmlmaWVzLjxicj4NCjxicj4NCk1haGVzaCBKZXRoYW5hbmRhbmk8YnI+DQo8YSBocmVmPSJtYWls dG86bWpldGhhbmFuZGFuaUBnbWFpbC5jb20iPm1qZXRoYW5hbmRhbmlAZ21haWwuY29tPC9hPiZs dDs8YSBocmVmPSJtYWlsdG86bWpldGhhbmFuZGFuaUBnbWFpbC5jb20iPm1haWx0bzptamV0aGFu YW5kYW5pQGdtYWlsLmNvbTwvYT4mZ3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwv aHRtbD4NCg== --_000_8c4abbe6e738407194d787612c8a2e9dhuaweicom_-- From nobody Wed Jun 9 06:07:40 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9829D3A1588 for ; Wed, 9 Jun 2021 06:07:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rdFFfDXDMYuk for ; Wed, 9 Jun 2021 06:07:34 -0700 (PDT) Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1EF233A1584 for ; Wed, 9 Jun 2021 06:07:34 -0700 (PDT) Received: from fraeml735-chm.china.huawei.com (unknown [172.18.147.226]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4G0Rwy3Cf7z6K5dv for ; Wed, 9 Jun 2021 20:58:10 +0800 (CST) Received: from dggeml753-chm.china.huawei.com (10.1.199.152) by fraeml735-chm.china.huawei.com (10.206.15.216) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.1.2176.2; Wed, 9 Jun 2021 15:07:30 +0200 Received: from dggeml753-chm.china.huawei.com (10.1.199.152) by dggeml753-chm.china.huawei.com (10.1.199.152) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2176.2; Wed, 9 Jun 2021 21:07:28 +0800 Received: from dggeml753-chm.china.huawei.com ([10.1.199.152]) by dggeml753-chm.china.huawei.com ([10.1.199.152]) with mapi id 15.01.2176.012; Wed, 9 Jun 2021 21:07:28 +0800 From: Qin Wu To: Kent Watsen , "netconf@ietf.org" Thread-Topic: [netconf] Create IANA-defined modules? Thread-Index: AdddL2Guyi3eG+KzRlGXH8XK0iac4Q== Date: Wed, 9 Jun 2021 13:07:28 +0000 Message-ID: <2269db3441874166a6525425cf488348@huawei.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.136.123.117] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [netconf] Create IANA-defined modules? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jun 2021 13:07:39 -0000 LS0tLS3pgq7ku7bljp/ku7YtLS0tLQ0K5Y+R5Lu25Lq6OiBuZXRjb25mIFttYWlsdG86bmV0Y29u Zi1ib3VuY2VzQGlldGYub3JnXSDku6PooaggS2VudCBXYXRzZW4NCuWPkemAgeaXtumXtDogMjAy MeW5tDXmnIgyN+aXpSAzOjA2DQrmlLbku7bkuro6IG5ldGNvbmZAaWV0Zi5vcmcNCuS4u+mimDog W25ldGNvbmZdIENyZWF0ZSBJQU5BLWRlZmluZWQgbW9kdWxlcz8NCg0KW0NDLWluZyBHYXJ5LCB3 aG8gY29udHJpYnV0ZWQgdGhlIOKAnGlldGYtW3Rscy9zc2hdLWNvbW1vbiIgbW9kdWxlcyBvcmln aW5hbGx5XQ0KDQoNCk5FVENPTkYgV0csDQoNClRoZSDigJx0bHMtY2xpZW50LXNlcnZlcuKAnSBk cmFmdCBqdXN0IHJlY2VpdmVkIHRoZSBmb2xsb3dpbmcgR2l0SHViIOKAnGlzc3Vl4oCdOg0KDQo9 PT09PXN0YXJ0PT09PT0NClRoaXMgaXMgcmF0aGVyIGEgcXVlc3Rpb24gdGhhbiBhbiBpc3N1ZSwg bWF5YmUuDQoNCkdpdmVuIHRoYXQgSUFOQSBtYWludGFpbnMgdGhlIFRMUyBwYXJhbWV0ZXJzIGF0 ICAgaHR0cHM6Ly93d3cuaWFuYS5vcmcvYXNzaWdubWVudHMvdGxzLXBhcmFtZXRlcnMvdGxzLXBh cmFtZXRlcnMueGh0bWwsIHdvdWxkIGl0IG5vdCBiZSBiZXR0ZXIgZm9yIHRoYXQgY29udGVudCB0 byBjb21lIGZyb20gc29tZXRoaW5nIGxpa2UgaWFuYS10bHNbLXBhcmFtZXRlcnNdLnlhbmcgcmF0 aGVyIHRoYW4gYW4gSUVURiBtYWludGFpbmVkIFlBTkcgbW9kdWxlPw0KPT09PT1zdG9wPT09PT0N Cg0KVGhpcyBpcyBhIGdvb2QgcG9pbnQuICBQZXJoYXBzIHdlIHNob3VsZCBtb3ZlIGFsbCB0aGUg aWRlbnRpdGllcyBmb3IgdGhlIGFsZ29yaXRobXMgZGVmaW5lZCBpbiB0aGUg4oCcaWV0Zi10bHMt Y29tbW9u4oCdIG1vZHVsZSB0byBhbiBJQU5BLW1haW50YWluZWQg4oCcaWFuYS10bHMtcGFyYW1l dGVyc+KAnSBtb2R1bGUuICBUaG91Z2h0cz8NCg0KW1Fpbl06IEkgYWdyZWUgdGhpcyBzZWVtcyBz dHJhaWdodGZvcndhcmQgdG8gbWUuIFRoZSBtb2R1bGUgbmFtZSBjb3VsZCBiZSAiaWFuYS10bHMt dHlwZXMiIGxpa2UuDQoNCkJ5IGV4dGVuc2lvbiwgdGhlIHNhbWUgc3RhdGVtZW50IGFwcGxpZXMg dG8gdGhlIOKAnHNzaC1jbGllbnQtc2VydmVy4oCdIGRyYWZ0IGFuZCB0aGUgSUFOQSBtYWludGFp bmVkIFNTSCBwYXJhbWV0ZXJzIHBhZ2U6IGh0dHBzOi8vd3d3LmlhbmEub3JnL2Fzc2lnbm1lbnRz L3NzaC1wYXJhbWV0ZXJzL3NzaC1wYXJhbWV0ZXJzLnhodG1sLg0KDQpPbmUgcG90ZW50aWFsIGlz c3VlIHdpdGggZG9pbmcgdGhpcyBpcyB0aGF0IHRoZSBleGlzdGluZyBpZGVudGl0aWVzIGhhdmUg 4oCcaWYtZmVhdHVyZeKAnSBzdGF0ZW1lbnRzIHRoYXQgY29uc3RyYWluIHRoZW0gdG8gc3BlY2lm aWMgVExTLXZlcnNpb25zIGFuZCBhbGdvcml0aG0tZmFtaWxpZXMsIGFuZCBhcmUgc29tZXRpbWVz IG1hcmtlZCBhcyDigJxkZXByZWNhdGVkIi4gIEJ5IGV4YW1wbGU6DQoNCiAgICBpZGVudGl0eSBl Y2RoZS1lY2RzYS13aXRoLWFlcy0xMjgtY2JjLXNoYTI1NiB7DQogICAgICAgaWYtZmVhdHVyZSAi dGxzLTFfMiI7DQogICAgICAgaWYtZmVhdHVyZSAidGxzLWVjYyBhbmQgdGxzLXNoYTIiOw0KICAg ICAgIGJhc2UgY2lwaGVyLXN1aXRlLWJhc2U7DQogICAgICAgc3RhdHVzICJkZXByZWNhdGVkIjsN CiAgICAgICBkZXNjcmlwdGlvbg0KICAgICAgICAgICAiQ2lwaGVyIHN1aXRlIFRMU19FQ0RIRV9F Q0RTQV9XSVRIX0FFU18xMjhfQ0JDX1NIQTI1Ni4iOw0KICAgICAgIHJlZmVyZW5jZQ0KICAgICAg ICAgICJSRkMgNTI4OTogVExTIEVsbGlwdGljIEN1cnZlIENpcGhlciBTdWl0ZXMgd2l0aA0KICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBTSEEtMjU2LzM4NCBhbmQgQUVTIEdhbG9pcyBDb3Vu dGVyIE1vZGUgKEdDTSkiOw0KICAgIH0NCg0KQnV0IHRoYXQgaW5mb3JtYXRpb24gaXMgTk9UIGNh cHR1cmVkIGluIHRoZSBJQU5BLW1haW50YWluZWQgcGFnZS4gICBXaGF0IHRvIGRvPw0KDQpbUWlu XTogV2h5IG5vdCBiaW5kIHRscyB2ZXJzaW9uIHdpdGggY2lwaGVyLXN1aXRlIGluIHRoZSBlY2Ro ZS1lY2RzYS13aXRoLWFlcy0xMjgtY2JjLXNoYTI1NiBpZGVudGl0eSBkZWZpbml0aW9uLiBBbHNv IEkgZmVlbCBpZGVudGl0eSBuYW1lIGlzIHRvbyBsb25nLg0KDQpPbmUgb3B0aW9uIHdvdWxkIGJl IHRvIGRyb3AgYWxsIHRoZSBmZWF0dXJlIHN0YXRlbWVudHMuICBBbGwgdGhleSBkbyBpcyBsaW1p dCB0aGUgdG90YWxpdHkgb2YgYWxnb3JpdGhtcyBwcmVzZW50ZWQgdG8gYW4gYWRtaW5pc3RyYXRv ciwgd2hlbiBjb25maWd1cmluZyB3aGljaCBhbGdvcml0aG1zIHRoZSBjbGllbnQvc2VydmVyIHNo b3VsZCBzdXBwb3J0LiAgV29yc3QgY2FzZSwgYWxsIGFsZ29yaXRobXMgKG9mIGEgZ2l2ZW4gdHlw ZSkgYXJlIHByZXNlbnRlZCwgcmVnYXJkbGVzcyBpZiBzdXBwb3J0ZWQgYnkgdGhlLCBlLmcuLCBU TFMgcHJvdG9jb2wgdmVyc2lvbi4gIFdoZW4gY29uZmlndXJpbmcgY2xpZW50cy9zZXJ2ZXJzIHVz aW5nLCBlLmcuLCB0ZXh0LWJhc2VkIGNvbmZpZ3VyYXRpb24gZmlsZXMsIHN1Y2ggZmlsdGVycyBh cmUgbmV2ZXIgYXZhaWxhYmxlLiAgRG9lcyBhbnlvbmUga25vdyB3aGF0IENpc2NvL0p1bmlwZXIv ZXRjLiBkZXZpY2VzIGRvIGluIHRoZWlyIGNvbW1hbmQtbGluZSBhbmQvb3Igd2ViIGludGVyZmFj ZXM/DQoNCltRaW5dOiBTZWUgYWJvdmUsIGRvIHdlIG5lZWQgdG8gaW50cm9kdWNlIGlmLWZlYXR1 cmUgInRscy0xXzIiIGFuZCB3aHkgbm90IHRpZSB0aGUgdGxzIHZlcnNpb24gaW4gdGhlIGNpcGhl ci1zdWl0ZSBuYW1lIHN1Y2ggYXMgInRsczEyLWVjZGhlLWVjZHNhLXdpdGgtYWVzLTEyOC1jYmMt c2hhMjU2Ii4gDQoNCkFub3RoZXIgb3B0aW9uLCB3aGljaCBJIGxpa2UgYmVjYXVzZSBpdOKAmXMg bGVzcyB3b3JrIGZvciBtZSAodW5sZXNzIHNvbWVvbmUgY2FuIHZvbHVudGVlciBhIEdpdEh1YiBw dWxsIHJlcXVlc3QpLCBpcyB0byByZW1vdmUgdGhlIGlldGYtW3Rscy9zc2hdLWNvbW1vbiBtb2R1 bGVzIGFsdG9nZXRoZXIuICBUaGV54oCZcmUgY3VycmVudGx5IG9wdGlvbmFsLXRvLWNvbmZpZ3Vy ZSBhbmQsIHdoZW4gbm90IGNvbmZpZ3VyZWQsIGl04oCZcyBhbiBpbXBsZW1lbnRhdGlvbi1zcGVj aWZpYyBkZWNpc2lvbiB3aGF0LCBlLmcuLCBhbGdvcml0aG1zIHRvIGxpc3QgYXMgYmVpbmcgc3Vw cG9ydGVkIGR1cmluZyB0aGUgcHJvdG9jb2wgaGFuZHNoYWtlLiAgUGVyc29uYWxseSwgSeKAmXZl IG5ldmVyIHVzZWQgdGhlbSAob3IgaW1wbGVtZW50ZWQgc3VwcG9ydCBmb3IgdGhlbSksIGhhcHBp bHkgZGVmZXJyaW5nIHRvIGludGVybmFsIGNvZGUgYW5kIHVuZGVybHlpbmcgbGlicmFyaWVzLiAg SW4gbGlldSBvZiB1cyBub3QgZGVmaW5pbmcgdGhlc2UgbW9kdWxlcyBub3csIGFwcGxpY2F0aW9u cyBjb3VsZCBhdWdtZW50LWluIHRoZWlyIG93biBjb25maWd1cmF0aW9uIG5vZGVzIGFuZCwgb2Yg Y291cnNlLCBhIGZ1dHVyZSBXRyBlZmZvcnQgY291bGQgYWRkIHRoZW0uICBUaG91Z2h0cyBvbiB0 aGlzIGFwcHJvYWNoPw0KDQpLLg0KDQoNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX18NCm5ldGNvbmYgbWFpbGluZyBsaXN0DQpuZXRjb25mQGlldGYub3Jn DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL25ldGNvbmYNCg== From nobody Wed Jun 9 09:32:55 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 062903A1DF0 for ; Wed, 9 Jun 2021 09:32:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=btconnect.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gc2Yi74252JM for ; Wed, 9 Jun 2021 09:32:48 -0700 (PDT) Received: from EUR05-AM6-obe.outbound.protection.outlook.com (mail-am6eur05on2138.outbound.protection.outlook.com [40.107.22.138]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A7F163A1D11 for ; Wed, 9 Jun 2021 09:32:47 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=jqLUWiJX2bTvhvjbDvAOjYC5gnfaYWhSmVPK3cFD1BzYX7IpDnCYaJ21+UvYyBs03b99btoKf/QbAIpl7gyX1Jlcgvy96eOf6WPP9s9gv0nliZSYMxegxiOA4xiIL4lNeLIJGm3ITvU4UGJNb15nEu68VDW7K0GdcyUeCPjOs0XL+dPLpNHxjws4XvjJrxXHIiA4SH9vL5g3iT8ZvYBN6rXQ0lmfnMZmH62PnvVg8fLWy4DWesZGPcxsFsqhpRmlio4V9iamhwKa5Wn6IR6JGo6sgv7kxnsjt0Ixy/V/lG+Cgq3djdjlG1T7S6hbqRzTPDSHTX/gZZiZMKEQIuwoSw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rraCSLqDVfXxumokNpBZFOjOXOIw+e6+gB5uWlaOQlc=; b=gWK3XIcE6e3KGUF3m2KRwHdsEEMtVqCSoT7aVTpVzYb3ajTLT6ZmlcB2q/3L3zAg2ZI1qxcKDWdTloOfZJ4dS+a7pJU+qF+M68+ynAdwFEJ6xu1Ar1HfJPF3+UxzA/+3z7NIOcwOMAQI3hGVyiLvOU5mS5XtbhlGYQbzYT0Drc0OoXExUsKRhaCHcrM9ZB9XI+Jf3Zs4/6C6a1OU/5ycS8U9HvqHn+AVoM3jXbRQ03Qkxfy38iFy+AW51o+Qi+nRQtfZshBIo/kfkuJilofTZVZXuHP+Yx+buarChhZDzKMDC45rtwyWEtORbAW9yhz9j7baWi3CR1taQplpFpX1IA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=btconnect.com; dmarc=pass action=none header.from=btconnect.com; dkim=pass header.d=btconnect.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btconnect.onmicrosoft.com; s=selector2-btconnect-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rraCSLqDVfXxumokNpBZFOjOXOIw+e6+gB5uWlaOQlc=; b=jVnw/tVxrGUdp6MdGwPX44de31yPd9byomf6XyWqwcnUBatln0pnTjxeDEmg3fXGhCZ13r0nMRx0/fELCeW0Uwwzv2lbjSZ91oH8FaRByhdUFrC9gnsp2T7l0zu0sAsdexc3PGFu9uiHwNfK+9mgUfNAgG9A6CsvP6KRc6JPeQs= Received: from AM7PR07MB6248.eurprd07.prod.outlook.com (2603:10a6:20b:134::11) by AS8PR07MB7862.eurprd07.prod.outlook.com (2603:10a6:20b:394::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4219.9; Wed, 9 Jun 2021 16:32:45 +0000 Received: from AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::a05a:a474:bf78:f0a9]) by AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::a05a:a474:bf78:f0a9%8]) with mapi id 15.20.4219.017; Wed, 9 Jun 2021 16:32:45 +0000 From: tom petch To: Qin Wu , Kent Watsen , "netconf@ietf.org" Thread-Topic: [netconf] Create IANA-defined modules? Thread-Index: AdddL2Guyi3eG+KzRlGXH8XK0iac4QAF+Z/J Date: Wed, 9 Jun 2021 16:32:44 +0000 Message-ID: References: <2269db3441874166a6525425cf488348@huawei.com> In-Reply-To: <2269db3441874166a6525425cf488348@huawei.com> Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: huawei.com; dkim=none (message not signed) header.d=none;huawei.com; dmarc=none action=none header.from=btconnect.com; x-originating-ip: [86.143.250.49] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 97e316cf-9b87-442b-9d1e-08d92b6435ea x-ms-traffictypediagnostic: AS8PR07MB7862: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 93Qj6DePvl1lhLXF4T+tCnUAQ531GNIbl8PrBTTTVUg/kh0mTsl4jnL+qTjFquk3sATmThiwHj24xp0g+ct1pPuKABbTwbAvIn69Oe0iPrLVWey62xNtb8ACJWa6jp1CEisSo4byqzrmvV4lq1Fl2F1TbDYuvmcs8sl2RpdJFi+3dD3oQpbLxG9RRrON+Mvf4XHIdGQDPCNWf8vQzmXLWBF9Zx7IE8DXJxw3C1TCXXmnpA3mq5metnbSs7pHxbGV55ZLRdQp8rwVlF7T4M+AH9Mxj5gVWN9V03bhzD0UwZTQJ9BfMFzZkuPkMpdYnMOfxiEaXNGwt/jZcQTunXoncrrmqTKsYvyzgOhSfStjRHTnkU9iNkUxDuGx9fPZGJdL7jsL6BqxxE9i8HRhoQYnC2ynxlBG1ACx7UFEU06MDBn8ZvEb95npQLqsXbrmwCNr6C3jvU/JHJyu1SYDroVYA46E+4/ve6NCZgYJs/XBDMGGEbkTgzltnZzkO9UsSXjmSQ4w8OtXIyxrb2Yqs5QgqiInWxxDBtbYEIPAnVdSuJOmepHMxRxWR9xsCSmejGChKPyezQ4kcd5MHBj6qFvWhDctIecjBXkfjOf3wg6kmDjNHvFnnTbBAxkVAgdBOAvdY4eZbTIHSbqDLlxrl9Tx7UJenUJHld7/AvtQFE38Z1hDOTgbJ0ZtG7MmtQXhgViwA/w7i+h4Xs54tMvqi8hPN5ZhiAwD/M0g1dXLzTBQJDte7G6UISUtJC00VJi5Qjh5JgwHd/tsBc6pPHUYZMJotA== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM7PR07MB6248.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(366004)(376002)(136003)(396003)(39860400002)(346002)(38100700002)(316002)(55016002)(478600001)(9686003)(33656002)(966005)(86362001)(2906002)(8676002)(8936002)(76116006)(83380400001)(6506007)(91956017)(5660300002)(52536014)(66446008)(53546011)(66476007)(66556008)(64756008)(7696005)(71200400001)(110136005)(66946007)(26005)(122000001)(186003)(586874002); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: =?gb2312?B?WTByWkZZWlYyb1MwQVBNK1NTcFdNMkdhWUszMGY5OTRqb1U1dnFrYzZ6WHBG?= =?gb2312?B?dUs3MHZxWFNmYzFEU0xoSE1hYzQ4NTdScTZrVThXYzRxNHVWbnVsSTQrYVhZ?= =?gb2312?B?dGZuU0M0c2g1eCtQcGtyeHlBbTFTTS9wRjVyNDI4Q3JINkkvNDREWlIvUUFU?= =?gb2312?B?V0dxQVVpRDZGSCtyZjBQUTMvRnhZWitUbCtoeWJ0dUs4MEJqMDlWSzNsaDRi?= =?gb2312?B?RzViRmFmUkdYQ3R5dFM5d2NmbHV4elVzMGlubHlRT1JRVWpQbkdVOGpiMVhm?= =?gb2312?B?ZGRobEJ4dTc0T1Nqeno0QUdueHBITjhucTViMWxLVmxKdE5mREJ6WE5sNTlB?= =?gb2312?B?UkFSNTlPbjlOemNuKzJBTlpJU3pjcEJIWTBvc1RHT1MxVXY5cmM4bFl1cjBw?= =?gb2312?B?enBYSHhqL3YyZDhHK1Z2UCs2ODA2N29KeHBENlpyV1lSWnJWdXZ4d3hkZ2hs?= =?gb2312?B?N1JFcHZxMExZc1dtNlJsMmRmQkRzMm1lQ1Bya1pQZ3pwd1hTWFgxNDJ0U2xy?= =?gb2312?B?LzR0UlFTTUF4czFRS1lFUXBqNE1DUGdOaU5GcHl1L2FkSmZyako5VnZzV0hv?= =?gb2312?B?Y0xVYXFZNHFJN2xua0d4L29kN2J0WlNma2xrQWlwWVZsOGN3aXpYRmtqZEpC?= =?gb2312?B?aEx0cGRiT1Z1d0dkZ1VEUjEwQ3h0dGRSZEYzU1MrbUJ2ZmdxRFp5YXJPY0VL?= =?gb2312?B?NVFvZDFDaFAvQnhQZmtTejIrVS9Qdm0vWEtnWlVFZEljZDUxNW5sK0VLWGZC?= =?gb2312?B?Q0VLT3AzOFpOUlZOdFAvUU9EeDBIL05rdFhLUEdUZ2VpdnMveGpUL21TdmNC?= =?gb2312?B?TGxzeUVKR0pmZ29UQTQ5YjdrU1JRQWVpb0hQN1VrWUdRb1VqN2hmWXdRS0ky?= =?gb2312?B?dGhsU0xUQ2dwMUwwNk9mSVFyckZoY0p2bGFJSmpJZWdhZWxFaWpuMnc3WU1h?= =?gb2312?B?Ymt6c0hyK3RhTlJQeDczaHZBbEF4RzdFV1Q4YlJwMEExTWJqMG1sZDdUTjFh?= =?gb2312?B?c1g2dUZRMW9ndUMvdUZOeDU1eWhJTU00L2pXTVVXTU5kZ21TNGhRR1VTOU1M?= =?gb2312?B?Q1BXS0JHR0RUaWR2WnFtU0xiNTNNbXh0eFptTWYxcjlWSGVLRTEwTVhKL1Nk?= =?gb2312?B?bVlPY1BvT2ZxL2t3UW42aVFPeXlsbXB4bEV2Ym9XVG9La2ZvS2t1YUY0Ykx0?= =?gb2312?B?Z1B5QUk5eTVRZUNsckN2MjdxSXMvTkMvWlN5YXoxVmtBbmdKbG8xUkFHbXdY?= =?gb2312?B?bmtOQzQ2K2I3RWRKWlJ2YitFTU5YVlQrRGhTWWpDeWVMaEpxWm9DSVdXTWlt?= =?gb2312?B?VWRRUWpNellPUkZZV2dvSkhXSFo1WWdIZndsazhpemluODBDOGVXYzNFYUpl?= =?gb2312?B?UXVMK09tazlibHQ4bFVrc1ltdmJxNzJBKzgyeEpKcUpsNVFCNHh2U2lsYURJ?= =?gb2312?B?QzJ5MXFoeHFBR2p0aEFJSXlvYkZkTHpoNUVsYkc1R2lmdEp2Zy9lMzhYWVRK?= =?gb2312?B?VGcrMnJZcFdHTkZVUk1FZUxYNGU2cS8yZnR4eFJGR3BZSGk1MVAyNi8wUTRa?= =?gb2312?B?NWRVckpVNTY5WnBVS2lkSE93bzBrc25aQ2tqYWhQVVdEYUsvQ1hwQXhsU3Ry?= =?gb2312?B?aURNd3JFa3FvaTF6dFFMV2lnSlJzRzBRZmNxSTN2MVVVaHRGODVPZEFsYity?= =?gb2312?B?Szd0ZFVmclFLcUc3c1dxZjliSk1ib0swcTBKZ294UlVzazkyUU5UK0NxWExR?= =?gb2312?Q?FHyPzaUUQdFuer8Ses=3D?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: btconnect.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AM7PR07MB6248.eurprd07.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 97e316cf-9b87-442b-9d1e-08d92b6435ea X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Jun 2021 16:32:44.9275 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: cf8853ed-96e5-465b-9185-806bfe185e30 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: ZJ+8MI8DTRZcz/F8RMllNqRgOhbjl/FTr8D4+uZp66yOawHGTefML5Y4i44aOEczayh1qjKI2H8VdhKP6RJOEg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8PR07MB7862 Archived-At: Subject: Re: [netconf] Create IANA-defined modules? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jun 2021 16:32:53 -0000 CgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCkZyb206IG5ldGNvbmYg PG5ldGNvbmYtYm91bmNlc0BpZXRmLm9yZz4gb24gYmVoYWxmIG9mIFFpbiBXdSA8YmlsbC53dUBo dWF3ZWkuY29tPgpTZW50OiAwOSBKdW5lIDIwMjEgMTQ6MDcKVG86IEtlbnQgV2F0c2VuOyBuZXRj b25mQGlldGYub3JnClN1YmplY3Q6IFJlOiBbbmV0Y29uZl0gQ3JlYXRlIElBTkEtZGVmaW5lZCBt b2R1bGVzPwoKLS0tLS3Tyrz+1K28/i0tLS0tCreivP7IyzogbmV0Y29uZiBbbWFpbHRvOm5ldGNv bmYtYm91bmNlc0BpZXRmLm9yZ10gtPqx7SBLZW50IFdhdHNlbgq3osvNyrG85DogMjAyMcTqNdTC MjfI1SAzOjA2CsrVvP7IyzogbmV0Y29uZkBpZXRmLm9yZwrW98ziOiBbbmV0Y29uZl0gQ3JlYXRl IElBTkEtZGVmaW5lZCBtb2R1bGVzPwoKW0NDLWluZyBHYXJ5LCB3aG8gY29udHJpYnV0ZWQgdGhl IKGwaWV0Zi1bdGxzL3NzaF0tY29tbW9uIiBtb2R1bGVzIG9yaWdpbmFsbHldCgoKTkVUQ09ORiBX RywKClRoZSChsHRscy1jbGllbnQtc2VydmVyobEgZHJhZnQganVzdCByZWNlaXZlZCB0aGUgZm9s bG93aW5nIEdpdEh1YiChsGlzc3VlobE6Cgo9PT09PXN0YXJ0PT09PT0KVGhpcyBpcyByYXRoZXIg YSBxdWVzdGlvbiB0aGFuIGFuIGlzc3VlLCBtYXliZS4KCkdpdmVuIHRoYXQgSUFOQSBtYWludGFp bnMgdGhlIFRMUyBwYXJhbWV0ZXJzIGF0ICAgaHR0cHM6Ly93d3cuaWFuYS5vcmcvYXNzaWdubWVu dHMvdGxzLXBhcmFtZXRlcnMvdGxzLXBhcmFtZXRlcnMueGh0bWwsIHdvdWxkIGl0IG5vdCBiZSBi ZXR0ZXIgZm9yIHRoYXQgY29udGVudCB0byBjb21lIGZyb20gc29tZXRoaW5nIGxpa2UgaWFuYS10 bHNbLXBhcmFtZXRlcnNdLnlhbmcgcmF0aGVyIHRoYW4gYW4gSUVURiBtYWludGFpbmVkIFlBTkcg bW9kdWxlPwo9PT09PXN0b3A9PT09PQoKVGhpcyBpcyBhIGdvb2QgcG9pbnQuICBQZXJoYXBzIHdl IHNob3VsZCBtb3ZlIGFsbCB0aGUgaWRlbnRpdGllcyBmb3IgdGhlIGFsZ29yaXRobXMgZGVmaW5l ZCBpbiB0aGUgobBpZXRmLXRscy1jb21tb26hsSBtb2R1bGUgdG8gYW4gSUFOQS1tYWludGFpbmVk IKGwaWFuYS10bHMtcGFyYW1ldGVyc6GxIG1vZHVsZS4gIFRob3VnaHRzPwoKW1Fpbl06IEkgYWdy ZWUgdGhpcyBzZWVtcyBzdHJhaWdodGZvcndhcmQgdG8gbWUuIFRoZSBtb2R1bGUgbmFtZSBjb3Vs ZCBiZSAiaWFuYS10bHMtdHlwZXMiIGxpa2UuCgpCeSBleHRlbnNpb24sIHRoZSBzYW1lIHN0YXRl bWVudCBhcHBsaWVzIHRvIHRoZSChsHNzaC1jbGllbnQtc2VydmVyobEgZHJhZnQgYW5kIHRoZSBJ QU5BIG1haW50YWluZWQgU1NIIHBhcmFtZXRlcnMgcGFnZTogaHR0cHM6Ly93d3cuaWFuYS5vcmcv YXNzaWdubWVudHMvc3NoLXBhcmFtZXRlcnMvc3NoLXBhcmFtZXRlcnMueGh0bWwuCgpPbmUgcG90 ZW50aWFsIGlzc3VlIHdpdGggZG9pbmcgdGhpcyBpcyB0aGF0IHRoZSBleGlzdGluZyBpZGVudGl0 aWVzIGhhdmUgobBpZi1mZWF0dXJlobEgc3RhdGVtZW50cyB0aGF0IGNvbnN0cmFpbiB0aGVtIHRv IHNwZWNpZmljIFRMUy12ZXJzaW9ucyBhbmQgYWxnb3JpdGhtLWZhbWlsaWVzLCBhbmQgYXJlIHNv bWV0aW1lcyBtYXJrZWQgYXMgobBkZXByZWNhdGVkIi4gIEJ5IGV4YW1wbGU6CgogICAgaWRlbnRp dHkgZWNkaGUtZWNkc2Etd2l0aC1hZXMtMTI4LWNiYy1zaGEyNTYgewogICAgICAgaWYtZmVhdHVy ZSAidGxzLTFfMiI7CiAgICAgICBpZi1mZWF0dXJlICJ0bHMtZWNjIGFuZCB0bHMtc2hhMiI7CiAg ICAgICBiYXNlIGNpcGhlci1zdWl0ZS1iYXNlOwogICAgICAgc3RhdHVzICJkZXByZWNhdGVkIjsK ICAgICAgIGRlc2NyaXB0aW9uCiAgICAgICAgICAgIkNpcGhlciBzdWl0ZSBUTFNfRUNESEVfRUNE U0FfV0lUSF9BRVNfMTI4X0NCQ19TSEEyNTYuIjsKICAgICAgIHJlZmVyZW5jZQogICAgICAgICAg IlJGQyA1Mjg5OiBUTFMgRWxsaXB0aWMgQ3VydmUgQ2lwaGVyIFN1aXRlcyB3aXRoCiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgU0hBLTI1Ni8zODQgYW5kIEFFUyBHYWxvaXMgQ291bnRlciBN b2RlIChHQ00pIjsKICAgIH0KCkJ1dCB0aGF0IGluZm9ybWF0aW9uIGlzIE5PVCBjYXB0dXJlZCBp biB0aGUgSUFOQS1tYWludGFpbmVkIHBhZ2UuICAgV2hhdCB0byBkbz8KCltRaW5dOiBXaHkgbm90 IGJpbmQgdGxzIHZlcnNpb24gd2l0aCBjaXBoZXItc3VpdGUgaW4gdGhlIGVjZGhlLWVjZHNhLXdp dGgtYWVzLTEyOC1jYmMtc2hhMjU2IGlkZW50aXR5IGRlZmluaXRpb24uIEFsc28gSSBmZWVsIGlk ZW50aXR5IG5hbWUgaXMgdG9vIGxvbmcuCgpPbmUgb3B0aW9uIHdvdWxkIGJlIHRvIGRyb3AgYWxs IHRoZSBmZWF0dXJlIHN0YXRlbWVudHMuICBBbGwgdGhleSBkbyBpcyBsaW1pdCB0aGUgdG90YWxp dHkgb2YgYWxnb3JpdGhtcyBwcmVzZW50ZWQgdG8gYW4gYWRtaW5pc3RyYXRvciwgd2hlbiBjb25m aWd1cmluZyB3aGljaCBhbGdvcml0aG1zIHRoZSBjbGllbnQvc2VydmVyIHNob3VsZCBzdXBwb3J0 LiAgV29yc3QgY2FzZSwgYWxsIGFsZ29yaXRobXMgKG9mIGEgZ2l2ZW4gdHlwZSkgYXJlIHByZXNl bnRlZCwgcmVnYXJkbGVzcyBpZiBzdXBwb3J0ZWQgYnkgdGhlLCBlLmcuLCBUTFMgcHJvdG9jb2wg dmVyc2lvbi4gIFdoZW4gY29uZmlndXJpbmcgY2xpZW50cy9zZXJ2ZXJzIHVzaW5nLCBlLmcuLCB0 ZXh0LWJhc2VkIGNvbmZpZ3VyYXRpb24gZmlsZXMsIHN1Y2ggZmlsdGVycyBhcmUgbmV2ZXIgYXZh aWxhYmxlLiAgRG9lcyBhbnlvbmUga25vdyB3aGF0IENpc2NvL0p1bmlwZXIvZXRjLiBkZXZpY2Vz IGRvIGluIHRoZWlyIGNvbW1hbmQtbGluZSBhbmQvb3Igd2ViIGludGVyZmFjZXM/CgpbUWluXTog U2VlIGFib3ZlLCBkbyB3ZSBuZWVkIHRvIGludHJvZHVjZSBpZi1mZWF0dXJlICJ0bHMtMV8yIiBh bmQgd2h5IG5vdCB0aWUgdGhlIHRscyB2ZXJzaW9uIGluIHRoZSBjaXBoZXItc3VpdGUgbmFtZSBz dWNoIGFzICJ0bHMxMi1lY2RoZS1lY2RzYS13aXRoLWFlcy0xMjgtY2JjLXNoYTI1NiIuCgpBbm90 aGVyIG9wdGlvbiwgd2hpY2ggSSBsaWtlIGJlY2F1c2UgaXShr3MgbGVzcyB3b3JrIGZvciBtZSAo dW5sZXNzIHNvbWVvbmUgY2FuIHZvbHVudGVlciBhIEdpdEh1YiBwdWxsIHJlcXVlc3QpLCBpcyB0 byByZW1vdmUgdGhlIGlldGYtW3Rscy9zc2hdLWNvbW1vbiBtb2R1bGVzIGFsdG9nZXRoZXIuICBU aGV5oa9yZSBjdXJyZW50bHkgb3B0aW9uYWwtdG8tY29uZmlndXJlIGFuZCwgd2hlbiBub3QgY29u ZmlndXJlZCwgaXShr3MgYW4gaW1wbGVtZW50YXRpb24tc3BlY2lmaWMgZGVjaXNpb24gd2hhdCwg ZS5nLiwgYWxnb3JpdGhtcyB0byBsaXN0IGFzIGJlaW5nIHN1cHBvcnRlZCBkdXJpbmcgdGhlIHBy b3RvY29sIGhhbmRzaGFrZS4gIFBlcnNvbmFsbHksIEmhr3ZlIG5ldmVyIHVzZWQgdGhlbSAob3Ig aW1wbGVtZW50ZWQgc3VwcG9ydCBmb3IgdGhlbSksIGhhcHBpbHkgZGVmZXJyaW5nIHRvIGludGVy bmFsIGNvZGUgYW5kIHVuZGVybHlpbmcgbGlicmFyaWVzLiAgSW4gbGlldSBvZiB1cyBub3QgZGVm aW5pbmcgdGhlc2UgbW9kdWxlcyBub3csIGFwcGxpY2F0aW9ucyBjb3VsZCBhdWdtZW50LWluIHRo ZWlyIG93biBjb25maWd1cmF0aW9uIG5vZGVzIGFuZCwgb2YgY291cnNlLCBhIGZ1dHVyZSBXRyBl ZmZvcnQgY291bGQgYWRkIHRoZW0uICBUaG91Z2h0cyBvbiB0aGlzIGFwcHJvYWNoPwoKSy4KCgoK X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KbmV0Y29uZiBt YWlsaW5nIGxpc3QKbmV0Y29uZkBpZXRmLm9yZwpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFu L2xpc3RpbmZvL25ldGNvbmYKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX18KbmV0Y29uZiBtYWlsaW5nIGxpc3QKbmV0Y29uZkBpZXRmLm9yZwpodHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL25ldGNvbmYK From nobody Wed Jun 9 09:38:06 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 844133A1E0B for ; Wed, 9 Jun 2021 09:38:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=btconnect.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cVI0aJokrXGh for ; Wed, 9 Jun 2021 09:37:58 -0700 (PDT) Received: from EUR05-AM6-obe.outbound.protection.outlook.com (mail-am6eur05on2126.outbound.protection.outlook.com [40.107.22.126]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4B4E43A1E0A for ; Wed, 9 Jun 2021 09:37:58 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=A8sId0jTQbetbQPlgxyRNUVl7JJkLW1crBvalKTs1eulI8YGFXv/QRcwkozM+eO+HvZrQ0UyOX4K+FsixY7jrmRniZyJJfpsl2HW0gjuN5BT+rT5iVXRoVte9YFUTekoFLdXIOaDIgjyAKULSvyi0j5ZgygBUXM1CDM+uJldYBvh2ecGjaOKko9O5jY5xmpH1fQM+u/jDdNKJqv0ag1q3dJHLVYcc0maSC3U0zmXibN/XbstXQMqWknj2sTs/xClB1ZZTnadyAb1A3tez181N8rEWLcUTwwMyw2FRjrz21QIGQsEs0W1K15ebfUE134gFBcc+NRJQ8RY4okIPGscZw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=tqvTDA6r8BA0ypN/BXL9/WO9MVezb2mzz19/kfGVJq8=; b=SJ/XYVMFVuht3KzUJqpPAMP3S+HU67iPJ7aFILq6ORsNVkInnkoWazqq52mKoB1hnY3hzdXmBRPHAT8iGVnupYRA1sf+oIoqvVBLszvOci5s/f1Lyp0wL8EbVUjnk3ad8VrbWu1Eo58R0PjgJJ6d8lbOA9ho57s+TbLOexUJP31L2XN15ntHda9NORSqTD88q+aPf2VHkHEnpXs4SeOdjxKD7kPUK9e9wyJXP7RsqiXa4eklYrN8nBaVe45yShTubyL7X6uyl0NWhNJEEozejVbJewYXd1GEhfbx96G4Tb6RikebdNrL2FrMZmEBtj8OIwIG79LB0NvG8/gCUHKGmA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=btconnect.com; dmarc=pass action=none header.from=btconnect.com; dkim=pass header.d=btconnect.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btconnect.onmicrosoft.com; s=selector2-btconnect-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=tqvTDA6r8BA0ypN/BXL9/WO9MVezb2mzz19/kfGVJq8=; b=o2+amql1Jgx6lVdOnncKR9CdIPpeaW50/tOrx4yCt9F8PFiKEhLeMx3cQ/PfqvuTRkpiWLEDRM9lxzGkQFq9l62V6cGZsIZyyAISAkrmxVq1xiPcDGcNo5di5X9JRJdSbtVVTIy1FDZ7z6R1wFzVip1f3FVZ3nVfQUKe2ZmgGTM= Received: from AM7PR07MB6248.eurprd07.prod.outlook.com (2603:10a6:20b:134::11) by AS8PR07MB7382.eurprd07.prod.outlook.com (2603:10a6:20b:2af::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4219.15; Wed, 9 Jun 2021 16:37:56 +0000 Received: from AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::a05a:a474:bf78:f0a9]) by AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::a05a:a474:bf78:f0a9%8]) with mapi id 15.20.4219.017; Wed, 9 Jun 2021 16:37:56 +0000 From: tom petch To: Qin Wu , Kent Watsen , "netconf@ietf.org" Thread-Topic: [netconf] Create IANA-defined modules? Thread-Index: AdddL2Guyi3eG+KzRlGXH8XK0iac4QAF+Z/JAAF/D/I= Date: Wed, 9 Jun 2021 16:37:55 +0000 Message-ID: References: <2269db3441874166a6525425cf488348@huawei.com>, In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: huawei.com; dkim=none (message not signed) header.d=none;huawei.com; dmarc=none action=none header.from=btconnect.com; x-originating-ip: [86.143.250.49] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: aa1c120f-5645-47da-4d65-08d92b64ef4b x-ms-traffictypediagnostic: AS8PR07MB7382: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM7PR07MB6248.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(376002)(346002)(136003)(366004)(396003)(39860400002)(5660300002)(71200400001)(9686003)(110136005)(53546011)(7696005)(55016002)(76116006)(91956017)(478600001)(316002)(6506007)(64756008)(66946007)(86362001)(26005)(186003)(66446008)(8676002)(66556008)(8936002)(2906002)(33656002)(38100700002)(122000001)(52536014)(66476007)(4744005)(2940100002); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: =?gb2312?B?b0NvYWx2L0Q0a3JZMkdPR1ZyREg4M2hLQ1ZNUGdhQVpHTHdUWEZGR0ppbVNn?= =?gb2312?B?ODRNQ2lRNkNBaEZvU2RGOEZuaUxSZGRxSmFHcGdFN1dzY0N1T3NId05qYzM2?= =?gb2312?B?UGdqQnZXb2FHQkpVSXE4akh2SE92d2JBNmFhNnhIaW1rV2VUeldyV3Awb25n?= =?gb2312?B?UmpEeUgzRjRaZ2VaZDhnc3A2eTFvaGRrNERmWDcza2tPYkJvQkxIR1dac2Yz?= =?gb2312?B?NVR1R1R1TERkVXdmU0FabG9STExhUEdTV1FHY2hKS3FLWFl6c3RPRGYzWGRR?= =?gb2312?B?b3A2N0ZCS2ZHaVJaUWtHb1ZnRVgyQkF1M3N1RHVScGVPUERTOXUwVjhKc08r?= =?gb2312?B?TDEvNU55eU16OXhJaFM5SmdtQllJZ0FERzNHUk1ncWtwZ0xHL2RnS1p5VWM0?= =?gb2312?B?VjdjeWdyTTZaR0tOM3FERFRBQU9OLzVTSnhweU5rS0lSTit4NVE0MmtEZ0pO?= =?gb2312?B?cFRySTRyTWRBOFlVZCt5SEY3cE54c2U1cjgzaTQ4M3RtbGtZNHM4Tmo2Q1JQ?= =?gb2312?B?RHFwMGNhaXFBOU5KZFRrSi90RVhkMTFUK1Q2RGM0ek1xQVJiQnJkWE9acHda?= =?gb2312?B?bEMyNExOeEhycnhidU05UzhDcHhPRkFXSFVnZ1hCZnNWWnhwMzNaNjBHUElV?= =?gb2312?B?T2l5Zm9od1ArRDYwMXdYNDFRMkRGcnJqOWl5dXplOWM4b3VDYVEwZE0yb2hy?= =?gb2312?B?RXJQcENiZEsyS1VhdmJhdUZORzd4Qm13d1NwSENYM1BKcWpmM2ZaWjZUR3F0?= =?gb2312?B?OERFRnBnNzZuckg0S2RIR2JJVHhEVEREU3V1Z2EvaW1vbUdvMnFRVkhEOCtr?= =?gb2312?B?dmhBbjhrVEZZRDg0Q1lDd3lSM2FTWWVIdjdmamt1bXdtZUdYUW40MWY0K1FS?= =?gb2312?B?UlFTSGk1K2lJVjhFcUJtZVlwdEc4Z0xIR20vYUpJRzd2NDYxbzEzbmljVE83?= =?gb2312?B?Ry9FYzNIeEtoM1ZHN3hQK214Mmd2OUtURUt2cHFYQ1I0bHFPcjh2YUQ1SlQr?= =?gb2312?B?WkRYcG01MlF4OXkrYkRmdU1nb3kwY2trdTRMQ2lVVjQ5YzhNNXlhdDIrM2RU?= =?gb2312?B?TE9LMTBXak9qU3d6QUtHNTBLbnNIR1VMYWoxRkMzclFvUVdpbjdkUFk0RVJp?= =?gb2312?B?QmVpUXhCVlBIQnZXcG5yaHBUaUhWWnFxL1J1aW1xZGFNNW1TTklhQzIrTVZD?= =?gb2312?B?em9ua1J1bWNlYlFxNytObmxNbUlkS05JQlN5NG1zVG0ycG9OZXM0OHhqU09J?= =?gb2312?B?bW1JQmdGRi94OEM2cWZPTDJVWG40WFpmSXRqVlBCd2lscURVWkE0VmhEMzds?= =?gb2312?B?THlpbXZQTk55TGhjeURXQ01yaWtXN1VsS2E3VXg1QWNacGI1K1VOOTN5R1pa?= =?gb2312?B?bXdTaldZTktjdU9TT3FGWFVLL0k1SUNMbkRFVzRSMXlyY0NUQ2NUTWlnNDBN?= =?gb2312?B?ZDlqNHlkWFN6N3hWaEcrcjN5UTI3OWxxMnRIRDJoZlpYRmZGTTFOUE5xQXpq?= =?gb2312?B?WVB6bTlEdk5DSjJVbWpGU3F4TUkyVkdlTE1PZHVKYmNRVzNFNHRIRjBGRHFn?= =?gb2312?B?aXVyaXNiME5IUmdtTDFyQ2kyM1ZyU01KdXJkcmxhUTBHbHhrM0tDTWJQMFh5?= =?gb2312?B?YlhSUFRJc3RFVktId3dVYVNFSmg2aUFQc0U1amhoS1JjdElxMTJuUmRoYStJ?= =?gb2312?B?dlZ6TjA2OWErbnhLM1VxZHZXRUJvblB2YlMrZkNrRGs4NE5WSm96b2xYd3FX?= =?gb2312?Q?+Ib//2vsKiwabZ4Qgc=3D?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: btconnect.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AM7PR07MB6248.eurprd07.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: aa1c120f-5645-47da-4d65-08d92b64ef4b X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Jun 2021 16:37:56.0023 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: cf8853ed-96e5-465b-9185-806bfe185e30 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: KSo/SAzG7XS6K7bWtT238dJbz5Hs1ngtYS9mxp+MCOSZvVdBx9ED4Ut48uLIdtZgDp1sUIDVhFplx748ByA5Rg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8PR07MB7382 Archived-At: Subject: Re: [netconf] Create IANA-defined modules? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jun 2021 16:38:04 -0000 QXBvbG9naWVzIGZvciB0aGUgbm9pc2UuCgptbW0gdGhlIHdvbmRlcnMgb2Ygd2VibWFpbCwgIEkg aW5zZXJ0ZWQgY29tbWVudHMgYW5kIHRoZW4gd2FzIHRvbGQgdGhhdCBteSBlLW1haWwgY291bGQg bm90IGJlIHNlbnQuICAgSSBzYXZlZCBpdCAtIHdlbGwsIG5vLCBpdCBjb3VsZCBub3QgYmUgc2F2 ZWQuICBSZXR1cm5lZCBsYXRlciwgdGhlcmUgd2FzIGEgZHJhZnQgaW4gdGhlIGZvbGRlciBzbyBJ IHNlbnQgaXQuICBCYWQgaWRlYSwgbXkgY29tbWVudHMgaGF2ZSAgYmVlbiBleGNpc2VkLgoKQWgg d2VsbCwgdHJ5IGFnYWluIGxhdGVyLgoKVG9tIFBldGNoIAoKX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXwpGcm9tOiBuZXRjb25mIDxuZXRjb25mLWJvdW5jZXNAaWV0Zi5v cmc+IG9uIGJlaGFsZiBvZiB0b20gcGV0Y2ggPGlldGZjQGJ0Y29ubmVjdC5jb20+ClNlbnQ6IDA5 IEp1bmUgMjAyMSAxNzozMgpUbzogUWluIFd1OyBLZW50IFdhdHNlbjsgbmV0Y29uZkBpZXRmLm9y ZwpTdWJqZWN0OiBSZTogW25ldGNvbmZdIENyZWF0ZSBJQU5BLWRlZmluZWQgbW9kdWxlcz8KCgoK X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpGcm9tOiBuZXRjb25mIDxu ZXRjb25mLWJvdW5jZXNAaWV0Zi5vcmc+IG9uIGJlaGFsZiBvZiBRaW4gV3UgPGJpbGwud3VAaHVh d2VpLmNvbT4KU2VudDogMDkgSnVuZSAyMDIxIDE0OjA3ClRvOiBLZW50IFdhdHNlbjsgbmV0Y29u ZkBpZXRmLm9yZwpTdWJqZWN0OiBSZTogW25ldGNvbmZdIENyZWF0ZSBJQU5BLWRlZmluZWQgbW9k dWxlcz8KCi0tLS0t08q8/tStvP4tLS0tLQq3orz+yMs6IG5ldGNvbmYgW21haWx0bzpuZXRjb25m LWJvdW5jZXNAaWV0Zi5vcmddILT6se0gS2VudCBXYXRzZW4Kt6LLzcqxvOQ6IDIwMjHE6jXUwjI3 yNUgMzowNgrK1bz+yMs6IG5ldGNvbmZAaWV0Zi5vcmcK1vfM4jogW25ldGNvbmZdIENyZWF0ZSBJ QU5BLWRlZmluZWQgbW9kdWxlcz8KCltDQy1pbmcgR2FyeSwgd2hvIGNvbnRyaWJ1dGVkIHRoZSCh sGlldGYtW3Rscy9zc2hdLWNvbW1vbiIgbW9kdWxlcyBvcmlnaW5hbGx5XQoK From nobody Wed Jun 9 18:47:44 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA6FB3A2E9F for ; Wed, 9 Jun 2021 18:47:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H1AiiuncThVP for ; Wed, 9 Jun 2021 18:47:37 -0700 (PDT) Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AD9DF3A2E99 for ; Wed, 9 Jun 2021 18:47:37 -0700 (PDT) Received: from fraeml707-chm.china.huawei.com (unknown [172.18.147.226]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4G0ms038SWz6N5Tc for ; Thu, 10 Jun 2021 09:40:52 +0800 (CST) Received: from dggeml753-chm.china.huawei.com (10.1.199.152) by fraeml707-chm.china.huawei.com (10.206.15.35) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.1.2176.2; Thu, 10 Jun 2021 03:47:34 +0200 Received: from dggeml753-chm.china.huawei.com (10.1.199.152) by dggeml753-chm.china.huawei.com (10.1.199.152) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2176.2; Thu, 10 Jun 2021 09:47:32 +0800 Received: from dggeml753-chm.china.huawei.com ([10.1.199.152]) by dggeml753-chm.china.huawei.com ([10.1.199.152]) with mapi id 15.01.2176.012; Thu, 10 Jun 2021 09:47:32 +0800 From: Qin Wu To: tom petch , Kent Watsen , "netconf@ietf.org" Thread-Topic: [netconf] Create IANA-defined modules? Thread-Index: AdddmYjayi3eG+KzRlGXH8XK0iac4Q== Date: Thu, 10 Jun 2021 01:47:32 +0000 Message-ID: <8f1f4e524de14185b7ea2cee2930cb0f@huawei.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.136.123.117] Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [netconf] Create IANA-defined modules? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Jun 2021 01:47:43 -0000 Pj4tLS0tLdPKvP7Urbz+LS0tLS0NCj4+t6K8/sjLOiB0b20gcGV0Y2ggW21haWx0bzppZXRmY0Bi dGNvbm5lY3QuY29tXSANCj4+t6LLzcqxvOQ6IDIwMjHE6jbUwjEwyNUgMDozOA0KPj7K1bz+yMs6 IFFpbiBXdSA8YmlsbC53dUBodWF3ZWkuY29tPjsgS2VudCBXYXRzZW4gPGtlbnQraWV0ZkB3YXRz ZW4ubmV0PjsgbmV0Y29uZkBpZXRmLm9yZw0KPj7W98ziOiBSZTogW25ldGNvbmZdIENyZWF0ZSBJ QU5BLWRlZmluZWQgbW9kdWxlcz8NCg0KPj5BcG9sb2dpZXMgZm9yIHRoZSBub2lzZS4NCg0KID4+ bW1tIHRoZSB3b25kZXJzIG9mIHdlYm1haWwsICBJIGluc2VydGVkIGNvbW1lbnRzIGFuZCB0aGVu IHdhcyB0b2xkIHRoYXQgbXkgZS1tYWlsIGNvdWxkIG5vdCBiZSBzZW50LiAgIEkgc2F2ZWQgaXQg LSB3ZWxsLCBubywgaXQgY291bGQgbm90IGJlIHNhdmVkLiAgUmV0dXJuZWQgbGF0ZXIsIHRoZXJl IHdhcyBhIGRyYWZ0IGluIHRoZSBmb2xkZXIgc28gSSBzZW50IGl0LiAgQmFkIGlkZWEsIG15IGNv bW1lbnRzIGhhdmUgIGJlZW4gZXhjaXNlZC4NCg0KPj5BaCB3ZWxsLCB0cnkgYWdhaW4gbGF0ZXIu DQoNCltRaW4gV3VdDQogOi0pDQpJIHRoaW5rIEkgc2hvdWxkIGluZGVudCBvcmlnaW5hbCBtZXNz YWdlIHRleHQgb3IgbWFyayB0aGUgY29tbWVudCBpbiBkaWZmZXJlbnQgY29sb3IuIEJ5IGRlZmF1 bHQsIG15IG91dGxvb2sgY2xpZW50IGRpc2FibGUgdGhpcyBmZWF0dXJlLg0KDQo+PlRvbSBQZXRj aCANCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBGcm9tOiBu ZXRjb25mIDxuZXRjb25mLWJvdW5jZXNAaWV0Zi5vcmc+IG9uIGJlaGFsZiBvZiB0b20gcGV0Y2gg PGlldGZjQGJ0Y29ubmVjdC5jb20+DQo+IFNlbnQ6IDA5IEp1bmUgMjAyMSAxNzozMg0KPiBUbzog UWluIFd1OyBLZW50IFdhdHNlbjsgbmV0Y29uZkBpZXRmLm9yZw0KPiBTdWJqZWN0OiBSZTogW25l dGNvbmZdIENyZWF0ZSBJQU5BLWRlZmluZWQgbW9kdWxlcz8NCg0KDQoNCl9fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gRnJvbTogbmV0Y29uZiA8bmV0Y29uZi1ib3Vu Y2VzQGlldGYub3JnPiBvbiBiZWhhbGYgb2YgUWluIFd1IDxiaWxsLnd1QGh1YXdlaS5jb20+DQo+ IFNlbnQ6IDA5IEp1bmUgMjAyMSAxNDowNw0KPiBUbzogS2VudCBXYXRzZW47IG5ldGNvbmZAaWV0 Zi5vcmcNCj4gU3ViamVjdDogUmU6IFtuZXRjb25mXSBDcmVhdGUgSUFOQS1kZWZpbmVkIG1vZHVs ZXM/DQoNCi0tLS0t08q8/tStvP4tLS0tLQ0KPiC3orz+yMs6IG5ldGNvbmYgW21haWx0bzpuZXRj b25mLWJvdW5jZXNAaWV0Zi5vcmddILT6se0gS2VudCBXYXRzZW4NCj4gt6LLzcqxvOQ6IDIwMjHE 6jXUwjI3yNUgMzowNg0KPiDK1bz+yMs6IG5ldGNvbmZAaWV0Zi5vcmcNCj4g1vfM4jogW25ldGNv bmZdIENyZWF0ZSBJQU5BLWRlZmluZWQgbW9kdWxlcz8NCg0KPiAgW0NDLWluZyBHYXJ5LCB3aG8g Y29udHJpYnV0ZWQgdGhlIKGwaWV0Zi1bdGxzL3NzaF0tY29tbW9uIiBtb2R1bGVzIG9yaWdpbmFs bHldDQoNCg== From nobody Wed Jun 9 20:57:19 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 468E13A3255; Wed, 9 Jun 2021 20:57:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GJcmyJIYBjuL; Wed, 9 Jun 2021 20:57:10 -0700 (PDT) Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0EF0F3A3254; Wed, 9 Jun 2021 20:57:10 -0700 (PDT) Received: from fraeml704-chm.china.huawei.com (unknown [172.18.147.200]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4G0qbR66NRz6K69B; Thu, 10 Jun 2021 11:44:19 +0800 (CST) Received: from dggeml702-chm.china.huawei.com (10.3.17.135) by fraeml704-chm.china.huawei.com (10.206.15.53) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2176.2; Thu, 10 Jun 2021 05:57:07 +0200 Received: from dggeme770-chm.china.huawei.com (10.3.19.116) by dggeml702-chm.china.huawei.com (10.3.17.135) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2176.2; Thu, 10 Jun 2021 11:57:05 +0800 Received: from dggeme770-chm.china.huawei.com ([10.8.68.58]) by dggeme770-chm.china.huawei.com ([10.8.68.58]) with mapi id 15.01.2176.012; Thu, 10 Jun 2021 11:57:05 +0800 From: "maqiufang (A)" To: Qin Wu , Zmail , "netconf-chairs@ietf.org" CC: "netconf@ietf.org" , Pierre Francois , "weiwang94@foxmail.com" Thread-Topic: [netconf] Capability-fetching mechanisms Thread-Index: AdddEZ/9CKgMhQir0kaFHGEy5ICHTwAmgMwA Date: Thu, 10 Jun 2021 03:57:05 +0000 Message-ID: <0ca926471ac04ca3a44c0351d5bb0fe3@huawei.com> References: <8c4abbe6e738407194d787612c8a2e9d@huawei.com> In-Reply-To: <8c4abbe6e738407194d787612c8a2e9d@huawei.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.136.123.93] Content-Type: multipart/alternative; boundary="_000_0ca926471ac04ca3a44c0351d5bb0fe3huaweicom_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [netconf] Capability-fetching mechanisms X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Jun 2021 03:57:15 -0000 --_000_0ca926471ac04ca3a44c0351d5bb0fe3huaweicom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksIGFsbDoNCg0KRnJvbTogUWluIFd1DQpTZW50OiBXZWRuZXNkYXksIEp1bmUgOSwgMjAyMSA1 OjM4IFBNDQpUbzogWm1haWwgPGFsZXguaHVhbmctZmVuZ0BpbnNhLWx5b24uZnI+OyBuZXRjb25m LWNoYWlyc0BpZXRmLm9yZw0KQ2M6IG5ldGNvbmZAaWV0Zi5vcmc7IG1hcWl1ZmFuZyAoQSkgPG1h cWl1ZmFuZzFAaHVhd2VpLmNvbT47IFBpZXJyZSBGcmFuY29pcyA8cGllcnJlLmZyYW5jb2lzQGlu c2EtbHlvbi5mcj47IHdlaXdhbmc5NEBmb3htYWlsLmNvbQ0KU3ViamVjdDogUkU6IFtuZXRjb25m XSBDYXBhYmlsaXR5LWZldGNoaW5nIG1lY2hhbmlzbXMNCg0KVGhhbmtzIEFsZXggZm9yIHRoZSBm ZWVkYmFjay4gUGxlYXNlIHNlZSBteSByZXBseSBpbmxpbmUgYmVsb3cuDQrlj5Hku7bkuro6IFpt YWlsIFttYWlsdG86YWxleC5odWFuZy1mZW5nQGluc2EtbHlvbi5mcl0NCuWPkemAgeaXtumXtDog MjAyMeW5tDbmnIg45pelIDE1OjIxDQrmlLbku7bkuro6IFFpbiBXdSA8YmlsbC53dUBodWF3ZWku Y29tPG1haWx0bzpiaWxsLnd1QGh1YXdlaS5jb20+PjsgbmV0Y29uZi1jaGFpcnNAaWV0Zi5vcmc8 bWFpbHRvOm5ldGNvbmYtY2hhaXJzQGlldGYub3JnPg0K5oqE6YCBOiBuZXRjb25mQGlldGYub3Jn PG1haWx0bzpuZXRjb25mQGlldGYub3JnPjsgbWFxaXVmYW5nIChBKSA8bWFxaXVmYW5nMUBodWF3 ZWkuY29tPG1haWx0bzptYXFpdWZhbmcxQGh1YXdlaS5jb20+PjsgUGllcnJlIEZyYW5jb2lzIDxw aWVycmUuZnJhbmNvaXNAaW5zYS1seW9uLmZyPG1haWx0bzpwaWVycmUuZnJhbmNvaXNAaW5zYS1s eW9uLmZyPj47IHdlaXdhbmc5NEBmb3htYWlsLmNvbTxtYWlsdG86d2Vpd2FuZzk0QGZveG1haWwu Y29tPg0K5Li76aKYOiBSZTogW25ldGNvbmZdIENhcGFiaWxpdHktZmV0Y2hpbmcgbWVjaGFuaXNt cw0KDQpIaSBldmVyeW9uZSwNCg0KSSBqb2luIHRoaXMgdGhyZWFkIHRvIGRpc2N1c3MgdGhlIHVu ZGVyc3RhbmRpbmcgb2YgdGhlIGRyYWZ0IGRhdGEtZXhwb3J0LWNhcGFiaWxpdGllcyBhbmQgaG93 IGl0IGlzIGNvbmZ1c2luZyB3aXRoIHRoZSBjYXBhYmlsaXRpZXMgZXhwb3J0IGZlYXR1cmUgb2Yg aHR0cHMtbm90aWYgZHJhZnQuDQoNCkkgdGhpbmsgdGhhdCB0aGUgZGF0YS1leHBvcnQtY2FwYWJp bGl0aWVzIGRyYWZ0IHNob3VsZCBjaGFuZ2UgdGhlIHRlcm1zIGNsaWVudC9zZXJ2ZXIgdG8gcHVi bGlzaGVyL3JlY2VpdmVyLg0KDQpbUWluXTogQWdyZWUsIEkgdGhpbmsgdGhlIGNsaWVudCBpcyBj b3JyZXNwb25kaW5nIHRvIHJlY2VpdmVyIHdoaWxlIHRoZSBzZXJ2ZXIgaXMgY29ycmVzcG9uZGlu ZyB0byB0aGUgcHVibGlzaGVyLg0KDQpUaGF0IHdheSwgSSB0aGluayBpdCB3b3VsZCBiZSBjbGVh cmVyIGluIHdoaWNoIGRyYWZ0IHdlIGRpc2N1c3Mgd2hpY2ggY2FzZS4NCg0KQXMgSSB1bmRlcnN0 b29kIHJlYWRpbmcgdGhpcyB0aHJlYWQsIGRhdGEtZXhwb3J0LWNhcGFiaWxpdGllcyBkaXNjdXNz ZXMgaG93IHRoZSByZWNlaXZlciAoY2xpZW50KSBjb3VsZCBnZXQgdGhlIHB1Ymxpc2hlcidzIChz ZXJ2ZXIpIGNhcGFiaWxpdGllcy4gQW5kIG9uIHRoZSBvdGhlciBzaWRlLCB0aGUgSFRUUFMgR0VU IGNhcGFiaWxpdGllcyBmcm9tIGh0dHBzLW5vdGlmIGRyYWZ0IGRlZmluZXMgaG93IHRoZSByZWNl aXZlciAoY2xpZW50KSBjb3VsZCBleHBvcnQgaXRzIGNhcGFiaWxpdGllcyB0byB0aGUgcHVibGlz aGVyIChzZXJ2ZXIpLiBJdOKAmXMgdGhhdCByaWdodCA/IFBsZWFzZSBjb3JyZWN0IG1lIGlmIHRo ZXJlIGlzIGFueSBtaXN1bmRlcnN0YW5kaW5nLg0KDQpbUWluXTogVGhhdOKAmXMgYSBnb29kIGRp c3RpbmN0aW9uLiBJbiBhZGRpdGlvbiwgSSBhbSB0aGlua2luZywgZGF0YS1leHBvcnQtY2FwYWJp bGl0aWVzIGZvY3VzZXMgb24gZ2VuZXJpYyBkYXRhIG1vZGVsIG9yIGRhdGEgZXhwb3J0IGZlYXR1 cmVzIGluIHlvdXIgd29yZHMsIHdoaWxlIGh0dHBzLW5vdGlmIGZvY3VzZXMgb24gcHJvdG9jb2wg dGhhdCBpcyB1c2VkIHRvIGNhcnJ5IHRoZXNlIGRhdGEgZXhwb3J0IGZlYXR1cmVzLg0KDQpPbiB0 aGUgb3RoZXIgaGFuZCwgd2UgYXJlIGRpc2N1c3NpbmcgaG93IHRoZSByZWNlaXZlciBjb3VsZCBl eHBvc2UgaXRzIGNhcGFiaWxpdGllcyBvbiBlYWNoIG5vdGlmaWNhdGlvbiBkcmFmdHMgKGh0dHBz LW5vdGlmLCB1ZHAtbm90aWYsIGV0YykuIE5vdGlmaWNhdGlvbnMgZHJhZnRzIGRlZmluZXMgYSBw cm90b2NvbCB0byBleGNoYW5nZSBub3RpZmljYXRpb25zIG92ZXIgYSB0cmFuc3BvcnQgbGF5ZXIs IHNvIGZyb20gbXkgcG9pbnQgb2YgdmlldywgdGhlIGNhcGFiaWxpdGllcyBleHBvcnQgZmVhdHVy ZSBzaG91bGQgbm90IGJlIGRlZmluZWQgdGhlcmUgYmVjYXVzZSA6DQoNCjEuICBpdCB3b3VsZCBi ZSB0cmFuc3BvcnQgZGVwZW5kZW50IChJIGRvbid0IGZlZWwgY29uZm9ydGFibGUgcHV0dGluZyBh IEhUVFBTIGV4cG9ydCBjYXBhYmlsaXRpZXMgb24gdGhlIHVkcC1ub3RpZiBkcmFmdC4uLikNCltR aW5dOiBUaGF04oCZcyBhIGdvb2QgYXJndW1lbnQgb24gd2h5IHdlIHNob3VsZCBzZXBhcmF0ZSBk YXRhIG1vZGVsIG9yIGRhdGEgZXhwb3J0IGZlYXR1cmVzIGRlZmluaXRpb24gZnJvbSBwcm90b2Nv bCBkZWZpbnRpb25zLg0KMi4gZm9yIGNvbmZpZ3VyZWQgbm90aWZpY2F0aW9ucyBmcm9tIHRoZSBw dWJsaXNoZXIgc2lkZSwgdGhlcmUgaXMgbm8gbmVlZCB0byBrbm93IHRoZSBjYXBhYmlsaXRpZXMg Zm9yIHRoZSByZWNlaXZlciwgdGhleSBhbHJlYWR5IGtub3cgdGhlbQ0KMy4gSSB0aGluayB3ZSBh cmUgbWl4aW5nIHRoZSBjb25maWd1cmF0aW9uIHBhcnQgYW5kIHRoZSBub3RpZmljYXRpb24gcGFy dA0KW1Fpbl06IFNvcnQgb2YgYWdyZWUsIGJ1dCBodHRwIG5vdGlmIGFsc28gYWRkIGEgc3RhdGVt ZW50IHRvIHNheQ0K4oCcDQogICBGb3IgcHVibGlzaGVycyB1c2luZyBTdWJzY3JpcHRpb24gdG8g WUFORyBOb3RpZmljYXRpb25zIFtSRkM4NjM5PGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcv ZG9jL2h0bWwvcmZjODYzOT5dLA0KICAgZHluYW1pYyBkaXNjb3Zlcnkgb2YgYSByZWNlaXZlcidz IHN1cHBvcnRlZCBlbmNvZGluZyBpcyBuZWNlc3NhcnkNCiAgIG9ubHkgd2hlbiB0aGUgIi9zdWJz Y3JpcHRpb25zL3N1YnNjcmlwdGlvbi9lbmNvZGluZyIgbGVhZiBpcyBub3QNCiAgIGNvbmZpZ3Vy ZWQNCuKAnQ0KDQpBcyBJIHVuZGVyc3Rvb2QgaW4gdGhlIHByZWNlZGVudCBtYWlscywgUWluIGlz IGxvb2tpbmcgZm9yIGEgY29tbW9uIHByb3RvY29sIHRvIGV4Y2hhbmdlIHRoZXNlIGNhcGFiaWxp dGllcyBvdmVyIGFsbCBub3RpZmljYXRpb25zIGRyYWZ0cy4NCg0KW1Fpbl06IFNlZSBhYm92ZSwg YXMgSSBjbGFyaWZpZWQsIEkgdGhpbmsgd2UgY2FuIGZvY3VzIG9uIGNvbW1vbiBkYXRhIG1vZGVs IGZvciBkYXRhIGV4cG9ydCBmZWF0dXJlcyBpbnN0ZWFkIG9mIGNvbW1vbiBwcm90b2NvbCwgIHdl IHdpbGwgbGVhdmUgcHJvdG9jb2wgZXh0ZW5zaW9uIHRvIGVhY2ggdHJhbnNwb3J0IHNwZWNpZmlj IG5vdGlmIGRyYWZ0LCBkb2VzIHRoaXMgbWFrZSBzZW5zZT8NCg0KW1FpdWZhbmcgTWFdIFRoZXJl IGlzIG9uZSBtb3JlIHBvaW50IHRoYXQgSSB3b3VsZCBsaWtlIHRvIGFkZCBoZXJlLCBwbGVhc2Ug bm90ZSB0aGF0IHRoZSBjYXBhYmlsaXR5IGV4cG9zdXJlIG1lY2hhbmlzbSBkZWZpbmVkIGluIGRh dGEtZXhwb3J0LWNhcGFiaWxpdHkgZHJhZnQgaXMgbGV2ZXJhZ2VkIGJ5IFlBTkcgaW5zdGFuY2Ug ZmlsZS4NCiBUaGF0J3MgdG8gc2F5LCB0aGUgY2FwYWJpbGl0aWVzIGFyZSBkb2N1bWVudGVkIGlu IGEgc3RhbmRhcmQtZm9ybWF0IGZpbGUgd2hpY2ggY291bGQgYmUgYWNjZXNzZWQgYnkgYW55IGZp bGUgYWNjZXNzIG1ldGhvZCBhbmQgcHJvdG9jb2wuDQoNCk1heWJlIGl0IGlzIGJldHRlciB0byBk ZWZpbmUgdGhpcyBjYXBhYmlsaXRpZXMgZXhwb3J0IHRyYW5zcG9ydCBkZXBlbmRlbnQgcHJvdG9j b2wgb24gYW5vdGhlciBkcmFmdCA/IE9yIG9uIHRoZSBkYXRhLWV4cG9ydC1jYXBhYmlsaXRpZXMg ZHJhZnQsIGJ1dCBpdCBpcyBkZWZpbmVkIGFzIHRyYW5zcG9ydCBhZ25vc3RpY+KApg0KDQpbUWlu XTogQWdyZWUuIFNlZSBtb3JlIGNsYXJpZmljYXRpb24gYWJvdmUuDQpBbnkgdGhvdWdodHMgPw0K DQpBbGV4IEh1YW5nIEZlbmcNCklOU0EgTHlvbiB8IFVueXRlIHRlYW0NCg0KRGF0ZTogV2VkLCAy IEp1biAyMDIxIDAxOjA3OjA1ICswMDAwDQpGcm9tOiBRaW4gV3UgPGJpbGwud3VAaHVhd2VpLmNv bTxtYWlsdG86YmlsbC53dUBodWF3ZWkuY29tPj4NClRvOiBNYWhlc2ggSmV0aGFuYW5kYW5pIDxt amV0aGFuYW5kYW5pQGdtYWlsLmNvbTxtYWlsdG86bWpldGhhbmFuZGFuaUBnbWFpbC5jb20+Pg0K Q2M6IEtlbnQgV2F0c2VuIDxrZW50K2lldGZAd2F0c2VuLm5ldDxtYWlsdG86a2VudCtpZXRmQHdh dHNlbi5uZXQ+PiwgIm5ldGNvbmZAaWV0Zi5vcmc8bWFpbHRvOm5ldGNvbmZAaWV0Zi5vcmc+Ig0K PG5ldGNvbmZAaWV0Zi5vcmc8bWFpbHRvOm5ldGNvbmZAaWV0Zi5vcmc+Pg0KU3ViamVjdDogW25l dGNvbmZdID8/OiAgQ2FwYWJpbGl0eS1mZXRjaGluZyBtZWNoYW5pc21zDQpNZXNzYWdlLUlEOiA8 ZDNlMjhjMzM1OWIzNDM1MmI0MmM2Zjk5Y2U4ODE0MDVAaHVhd2VpLmNvbTxtYWlsdG86ZDNlMjhj MzM1OWIzNDM1MmI0MmM2Zjk5Y2U4ODE0MDVAaHVhd2VpLmNvbT4+DQpDb250ZW50LVR5cGU6IHRl eHQvcGxhaW47IGNoYXJzZXQ9InV0Zi04Ig0KDQpIaSwgTWFoZXNoOg0KDQo/Pz86IE1haGVzaCBK ZXRoYW5hbmRhbmkgW21haWx0bzptamV0aGFuYW5kYW5pQGdtYWlsLmNvbV0NCj8/Pz86IDIwMjE/ Nj8yPyA2OjQ0DQo/Pz86IFFpbiBXdSA8YmlsbC53dUBodWF3ZWkuY29tPG1haWx0bzpiaWxsLnd1 QGh1YXdlaS5jb20+Pg0KPz86IEtlbnQgV2F0c2VuIDxrZW50K2lldGZAd2F0c2VuLm5ldDxtYWls dG86a2VudCtpZXRmQHdhdHNlbi5uZXQ+PjsgbmV0Y29uZkBpZXRmLm9yZzxtYWlsdG86bmV0Y29u ZkBpZXRmLm9yZz4NCj8/OiBSZTogW25ldGNvbmZdIENhcGFiaWxpdHktZmV0Y2hpbmcgbWVjaGFu aXNtcw0KDQpbVHJpbW1pbmcgZG93biB0aGUgZS1tYWlsIHRvIG9wZW4gdG9waWNzXQ0KDQpIaSBR aW4sDQoNClNlZSBpbmxpbmUgd2l0aCBbbWoxXQ0KDQoNCk9uIE1heSAxOCwgMjAyMSwgYXQgNDo0 MCBBTSwgUWluIFd1IDxiaWxsLnd1QGh1YXdlaS5jb208bWFpbHRvOmJpbGwud3VAaHVhd2VpLmNv bT48bWFpbHRvOmJpbGwud3VAaHVhd2VpLmNvbT4+IHdyb3RlOg0KDQpIaSwgTWFoZXNoOg0KDQoN ClRoZSBxdWVzdGlvbiBpcyB3aGV0aGVyIHRoZSByZWNlaXZlciBuZWVkcyB0byBiZSBhIE5FVENP TkYvUkVTVENPTkYgc2VydmVyLiBBcyBtYXFpdWZhbmcgd3JvdGUgaW4gaGlzIHJlc3BvbnNlLCBp ZiB0aGUgcmVjZWl2ZXIgc3VwcG9ydHMgdGhlIGRhdGEtZXhwb3J0LWNhcGFiaWxpdGllcyBkcmFm dCwgdGhlbiBpdCB3b3VsZCBuZWVkIHRvIGJlIGEgTkVUQ09ORi9SRVNUQ09ORiBzZXJ2ZXIsIHdo ZXJlYXMgd2l0aCB0aGUgaHR0cHMtbm90aWYgZHJhZnQgdGhhdCBpcyBub3QgdGhlIGNhc2UuIFRo aXMgaXMgdGhlIGNhc2Ugd2hldGhlciB0aGUgcmVjZWl2ZXIgc3VwcG9ydHMgUkZDIDg2Mzkgb3Ig bm90Lg0KW1Fpbl06TXkgdW5kZXJzdGFuZGluZyBpcyBkYXRhLWV4cG9ydC1jYXBhYmlsaXRpZXMg ZG9lc24/dCByZXF1aXJlIHJlY2VpdmVyIHRvIGJlIHRpZWQgd2l0aCBORVRDT05GL1JFU1RDT05G IHNlcnZlci4gSSBhc3N1bWUgdGhlIG1hbmFnZW1lbnQgc3lzdGVtIChpLmUuLCByZWNlaXZlcikg YW5kIG5ldHdvcmsgZGV2aWNlIChpLmUuLCBwdWJsaXNoZXIpIGNhbiB1c2UgSFRUUFMgdG8gZXhj aGFuZ2UgYWR2ZXJ0aXNlZCBkYXRhLg0KDQpJbiBhZGRpdGlvbiwgTWF5YmUgd2hhdCBpcyBtaXNz aW5nIGluIHRoZSBkYXRhLWV4cG9ydC1jYXBhYmlsaXRpZXMgZHJhZnQgaXMgdG8gZGVmaW5lIFJQ QyB0byBhbGxvdyB0aGUgcHVibGlzaGVyIGdldCBjYXBhYmlsaXR5IGZyb20gcmVjZWl2ZXIgdGhy b3VnaCBIVFRQUyBjaGFubmVsLCBzaW1pbGFyIHRvIHdoYXQgaXMgZ2V0LWJvb3RzdHJhcHBpbmct ZGF0YSBSUEMgZGVmaW5lZCBpbiBSRkM4NTcyLg0KDQpbbWoxXSBTdGlwdWxhdGluZyBhIEhUVFBz IGNoYW5uZWwgd29ya3MgZm9yIHRoZSBIVFRQUyBub3RpZiBkcmFmdC4gQnV0IHdoYXQgd2lsbCBv dGhlciB0cmFuc3BvcnQgdHlwZSBkcmFmdHMgdXNlPyBlLmcuIHRoZSBVRFAgbm90aWYgZHJhZnQ/ Pw0KDQpbUWluXTpJIHRoaW5rIFVEUCBub3RpZiBkcmFmdCBjb3VsZCBhbHNvIHVzZSBIVFRQcyBj aGFubmVsIHRvIGNhcnJ5IGNhcGFiaWxpdHkgaW5mb3JtYXRpb24gZnJvbSB0aGUgc2VydmVyIHRv IHRoZSBjbGllbnQgaW4gdGhlIGZvcm0gb2YgWUFORyBpbnN0YW5jZSBmaWxlIGZvcm1hdC4NCg0K UGxlYXNlIG5vdGUgdGhhdCBSRkMgODYzOSByZWNlaXZlcnMgZG8gbm90IGhhdmUgdG8gYmUgTkVU Q09ORi9SRVNUQ09ORiBzZXJ2ZXJzIGZvciBjb25maWd1cmVkIHN1YnNjcmlwdGlvbnMuIFJGQyA4 NjM5LCBTZWN0aW9uIDIuNyBkZWZpbmVzIHRoZSBjb250cm9sIG1lc3NhZ2VzIHN1Y2ggYXMgPHN1 YnNjcmlwdGlvbi1zdGFydGVkPiB1c2luZyBvbmUtd2F5IFlBTkcgP25vdGlmaWNhdGlvbj8gc3Rh dGVtZW50cy4NCg0KW1Fpbl06IFVuZGVyc3RhbmQgdGhpcyBjYXNlLCBEbyB5b3UgdGhpbmsgd2Ug c2hvdWxkIGRlZmluZSBhIG5ldyBub3RpZmljYXRpb24gaW4gdGhlIGRhdGEtZXhwb3J0LWNhcGFi aWxpdGllcyBkcmFmdCBpbnN0ZWFkIG9mIGNvbnNpZGVyaW5nIHRvIGRlZmluZSBSUEM/DQoNCltt ajFdIEkgZG8gbm90IHVuZGVyc3RhbmQgdGhpcyBzdGF0ZW1lbnQuIENhbiB5b3UgZXhwYW5kPw0K DQpbUWluXTogSSBhbSBub3Qgc3VyZSB0aGUgUlBDIGlzIGEgZ29vZCBkZXNpZ24gY2hvaWNlLCBJ IHRoaW5rIHdlIGNvdWxkIGhhdmUgMyBvcHRpb25zDQo/YT9SZXBvcnQgY2FwYWJpbGl0eSBpbmZv cm1hdGlvbiBmcm9tIHRoZSBIVFRQcyBzZXJ2ZXIgb3IgdGhlIEhUVFBzIGNsaWVudCBhdCBydW4t dGltZSBvciBpbXBsZW1lbnRhdGlvbi0gdGltZSwgcGVyIHRoZSBZQU5HIEluc3RhbmNlIERhdGEg RmlsZSBGb3JtYXQuDQooYikgRGVmaW5lIG9uZSB3YXkgWUFORyBub3RpZmljYXRpb24gc2ltaWxh ciB0byA8c3Vic2NyaXB0aW9uLXN0YXJ0ZWQ+IHRoYXQgaXMgc2VudCBmcm9tIHRoZSBzZXJ2ZXIg dG8gdGhlIGNsaWVudA0KKGMpIFJlcG9ydCBjYXBhYmlsaXR5IGluZm9ybWF0aW9uIG9ubHkgZnJv bSBORVRDT05GIHNlcnZlciB1c2luZyBZQU5HIG1vZGVsIGRlZmluZSBpbiBkYXRhLWV4cG9ydC1j YXBhaWJsaXRpZXMgZHJhZnQNCkkgdGhpbmsgKGIpIG9ubHkgYWxsb3cgdGhlIHNlcnZlciBhZHZl cnRpc2UgdGhlIHNlcnZlciBjYXBhYmlsaXR5IHRvIHRoZSBjbGllbnQgYnV0IGRvZXMgbm90IGFs bG93IHRoZSBjbGllbnQgaXNzdWUgbm90aWZpY2F0aW9uIGFuZCBhZHZlcnRpc2UgY2xpZW50IGNh cGFiaWxpdHkgdG8gdGhlIHNlcnZlcg0KKGMpIGlzIHNvbWV0aGluZyB5b3UgZW52aXNpb24gaG93 IGl0IGlzIHVzZWQsIHRoZSBsaW1pdGF0aW9uIGlzIHRvIHJlcXVpcmUgTkVUQ09ORiBzZXJ2ZXIg dG8gYmUgc3VwcG9ydGVkIGJ5IHRoZSByZWNlaXZlciBvciB0aGUgY2xpZW50LCBidXQgdGhpcyBv cHRpb24gaXMgbm90IHdoYXQgd2UgcHJvcG9zZWQgaW4gdGhlIGRhdGEtZXhwb3J0LWNhcGFiaWxp dGllcyBkcmFmdC4NClRoZSBzb2x1dGlvbiB3ZSBwcm9wb3NlZCBpcyAoYSkgd2hpY2ggYWxsb3dz IHJlcG9ydCBjYXBhYmlsaXR5IGluZm9ybWF0aW9uIGVpdGhlciBmcm9tIHRoZSBTZXJ2ZXIgb3Ig dGhlIGNsaWVudCB1c2luZyBZQU5HIEluc3RhbmNlIGRhdGEgZmlsZS4gSG9wZSB0aGlzIGNsYXJp Zmllcy4NCg0KTWFoZXNoIEpldGhhbmFuZGFuaQ0KbWpldGhhbmFuZGFuaUBnbWFpbC5jb208bWFp bHRvOm1qZXRoYW5hbmRhbmlAZ21haWwuY29tPjxtYWlsdG86bWpldGhhbmFuZGFuaUBnbWFpbC5j b20+DQo= --_000_0ca926471ac04ca3a44c0351d5bb0fe3huaweicom_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 5a6L5L2TOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtm b250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMgMiA0 O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUg MiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJcQOWui+S9kyI7DQoJ cGFub3NlLTE6MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5 OuW+rui9r+mbhem7kTsNCglwYW5vc2UtMToyIDExIDUgMyAyIDIgNCAyIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OiJcQOW+rui9r+mbhem7kSI7DQoJcGFub3NlLTE6MiAxMSA1IDMg MiAyIDQgMiAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5N c29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4w MDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseTrlrovkvZM7fQ0KYTpsaW5r LCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1 ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBl cmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0K CXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcHJlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5 OTsNCgltc28tc3R5bGUtbGluazoiSFRNTCDpooTorr7moLzlvI8gQ2hhciI7DQoJbWFyZ2luOjBj bTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZh bWlseTrlrovkvZM7fQ0KcC5Nc29MaXN0UGFyYWdyYXBoLCBsaS5Nc29MaXN0UGFyYWdyYXBoLCBk aXYuTXNvTGlzdFBhcmFncmFwaA0KCXttc28tc3R5bGUtcHJpb3JpdHk6MzQ7DQoJbWFyZ2luOjBj bTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJdGV4dC1pbmRlbnQ6MjEuMHB0Ow0KCWZvbnQt c2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk65a6L5L2TO30NCnNwYW4uSFRNTENoYXINCgl7bXNv LXN0eWxlLW5hbWU6IkhUTUwg6aKE6K6+5qC85byPIENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0 eTo5OTsNCgltc28tc3R5bGUtbGluazoiSFRNTCDpooTorr7moLzlvI8iOw0KCWZvbnQtZmFtaWx5 OuWui+S9kzt9DQpzcGFuLmFwcGxlLXRhYi1zcGFuDQoJe21zby1zdHlsZS1uYW1lOmFwcGxlLXRh Yi1zcGFuO30NCnNwYW4uRW1haWxTdHlsZTIxDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0K CWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0Kc3Bh bi5FbWFpbFN0eWxlMjINCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1m YW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzFGNDk3RDt9DQouTXNvQ2hwRGVm YXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30N CkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYxMi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzIu MHB0IDkwLjBwdCA3Mi4wcHQgOTAuMHB0O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3Jk U2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0aW9ucyAqLw0KQGxpc3QgbDANCgl7bXNvLWxpc3Qt aWQ6MTUxNDYxMDM2OTsNCgltc28tbGlzdC10eXBlOmh5YnJpZDsNCgltc28tbGlzdC10ZW1wbGF0 ZS1pZHM6MTU0ODEyMzAxMiAtNjgxNDI0MDMwIDY3Njk4NzEzIDY3Njk4NzE1IDY3Njk4NzAzIDY3 Njk4NzEzIDY3Njk4NzE1IDY3Njk4NzAzIDY3Njk4NzEzIDY3Njk4NzE1O30NCkBsaXN0IGwwOmxl dmVsMQ0KCXttc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0 aW9uOmxlZnQ7DQoJbWFyZ2luLWxlZnQ6MTguMHB0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJ Y29sb3I6YmxhY2s7fQ0KQGxpc3QgbDA6bGV2ZWwyDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0 OmFscGhhLWxvd2VyOw0KCW1zby1sZXZlbC10ZXh0OiIlMlwpIjsNCgltc28tbGV2ZWwtdGFiLXN0 b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJbWFyZ2luLWxlZnQ6 NDIuMHB0Ow0KCXRleHQtaW5kZW50Oi0yMS4wcHQ7fQ0KQGxpc3QgbDA6bGV2ZWwzDQoJe21zby1s ZXZlbC1udW1iZXItZm9ybWF0OnJvbWFuLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25l Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246cmlnaHQ7DQoJbWFyZ2luLWxlZnQ6NjMuMHB0 Ow0KCXRleHQtaW5kZW50Oi0yMS4wcHQ7fQ0KQGxpc3QgbDA6bGV2ZWw0DQoJe21zby1sZXZlbC10 YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgltYXJnaW4t bGVmdDo4NC4wcHQ7DQoJdGV4dC1pbmRlbnQ6LTIxLjBwdDt9DQpAbGlzdCBsMDpsZXZlbDUNCgl7 bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtbG93ZXI7DQoJbXNvLWxldmVsLXRleHQ6IiU1 XCkiOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgltYXJnaW4tbGVmdDoxMDUuMHB0Ow0KCXRleHQtaW5kZW50Oi0yMS4wcHQ7fQ0K QGxpc3QgbDA6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OnJvbWFuLWxvd2VyOw0K CW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246cmln aHQ7DQoJbWFyZ2luLWxlZnQ6MTI2LjBwdDsNCgl0ZXh0LWluZGVudDotMjEuMHB0O30NCkBsaXN0 IGwwOmxldmVsNw0KCXttc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVy LXBvc2l0aW9uOmxlZnQ7DQoJbWFyZ2luLWxlZnQ6MTQ3LjBwdDsNCgl0ZXh0LWluZGVudDotMjEu MHB0O30NCkBsaXN0IGwwOmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS1s b3dlcjsNCgltc28tbGV2ZWwtdGV4dDoiJThcKSI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7 DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCW1hcmdpbi1sZWZ0OjE2OC4wcHQ7 DQoJdGV4dC1pbmRlbnQ6LTIxLjBwdDt9DQpAbGlzdCBsMDpsZXZlbDkNCgl7bXNvLWxldmVsLW51 bWJlci1mb3JtYXQ6cm9tYW4tbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpyaWdodDsNCgltYXJnaW4tbGVmdDoxODkuMHB0Ow0KCXRl eHQtaW5kZW50Oi0yMS4wcHQ7fQ0Kb2wNCgl7bWFyZ2luLWJvdHRvbTowY207fQ0KdWwNCgl7bWFy Z2luLWJvdHRvbTowY207fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxv OnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtl bmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJl ZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0 PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJs dWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5IaSwgYWxsOjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtj b2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBz dHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6 My4wcHQgMGNtIDBjbSAwY20iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjM2LjBwdCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmIj4gUWluIFd1DQo8YnI+DQo8Yj5TZW50OjwvYj4gV2VkbmVzZGF5LCBKdW5lIDksIDIw MjEgNTozOCBQTTxicj4NCjxiPlRvOjwvYj4gWm1haWwgJmx0O2FsZXguaHVhbmctZmVuZ0BpbnNh LWx5b24uZnImZ3Q7OyBuZXRjb25mLWNoYWlyc0BpZXRmLm9yZzxicj4NCjxiPkNjOjwvYj4gbmV0 Y29uZkBpZXRmLm9yZzsgbWFxaXVmYW5nIChBKSAmbHQ7bWFxaXVmYW5nMUBodWF3ZWkuY29tJmd0 OzsgUGllcnJlIEZyYW5jb2lzICZsdDtwaWVycmUuZnJhbmNvaXNAaW5zYS1seW9uLmZyJmd0Ozsg d2Vpd2FuZzk0QGZveG1haWwuY29tPGJyPg0KPGI+U3ViamVjdDo8L2I+IFJFOiBbbmV0Y29uZl0g Q2FwYWJpbGl0eS1mZXRjaGluZyBtZWNoYW5pc21zPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4w cHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPlRoYW5rcyBB bGV4IGZvciB0aGUgZmVlZGJhY2suIFBsZWFzZSBzZWUgbXkgcmVwbHkgaW5saW5lIGJlbG93Ljxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3Jk ZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48Yj48c3BhbiBs YW5nPSJaSC1DTiIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q75b6u 6L2v6ZuF6buRJnF1b3Q7LHNhbnMtc2VyaWYiPuWPkeS7tuS6ujwvc3Bhbj48L2I+PGI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q75b6u6L2v6ZuF6buRJnF1 b3Q7LHNhbnMtc2VyaWYiPjo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O+W+rui9r+mbhem7kSZxdW90OyxzYW5zLXNlcmlmIj4NCiBabWFp bCBbPGEgaHJlZj0ibWFpbHRvOmFsZXguaHVhbmctZmVuZ0BpbnNhLWx5b24uZnIiPm1haWx0bzph bGV4Lmh1YW5nLWZlbmdAaW5zYS1seW9uLmZyPC9hPl0NCjxicj4NCjxiPjxzcGFuIGxhbmc9IlpI LUNOIj7lj5HpgIHml7bpl7Q8L3NwYW4+OjwvYj4gMjAyMTxzcGFuIGxhbmc9IlpILUNOIj7lubQ8 L3NwYW4+NjxzcGFuIGxhbmc9IlpILUNOIj7mnIg8L3NwYW4+ODxzcGFuIGxhbmc9IlpILUNOIj7m l6U8L3NwYW4+IDE1OjIxPGJyPg0KPGI+PHNwYW4gbGFuZz0iWkgtQ04iPuaUtuS7tuS6ujwvc3Bh bj46PC9iPiBRaW4gV3UgJmx0OzxhIGhyZWY9Im1haWx0bzpiaWxsLnd1QGh1YXdlaS5jb20iPmJp bGwud3VAaHVhd2VpLmNvbTwvYT4mZ3Q7Ow0KPGEgaHJlZj0ibWFpbHRvOm5ldGNvbmYtY2hhaXJz QGlldGYub3JnIj5uZXRjb25mLWNoYWlyc0BpZXRmLm9yZzwvYT48YnI+DQo8Yj48c3BhbiBsYW5n PSJaSC1DTiI+5oqE6YCBPC9zcGFuPjo8L2I+IDxhIGhyZWY9Im1haWx0bzpuZXRjb25mQGlldGYu b3JnIj5uZXRjb25mQGlldGYub3JnPC9hPjsgbWFxaXVmYW5nIChBKSAmbHQ7PGEgaHJlZj0ibWFp bHRvOm1hcWl1ZmFuZzFAaHVhd2VpLmNvbSI+bWFxaXVmYW5nMUBodWF3ZWkuY29tPC9hPiZndDs7 IFBpZXJyZSBGcmFuY29pcyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnBpZXJyZS5mcmFuY29pc0BpbnNh LWx5b24uZnIiPnBpZXJyZS5mcmFuY29pc0BpbnNhLWx5b24uZnI8L2E+Jmd0OzsNCjxhIGhyZWY9 Im1haWx0bzp3ZWl3YW5nOTRAZm94bWFpbC5jb20iPndlaXdhbmc5NEBmb3htYWlsLmNvbTwvYT48 YnI+DQo8Yj48c3BhbiBsYW5nPSJaSC1DTiI+5Li76aKYPC9zcGFuPjo8L2I+IFJlOiBbbmV0Y29u Zl0gQ2FwYWJpbGl0eS1mZXRjaGluZyBtZWNoYW5pc21zPG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoz Ni4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5IaSBldmVyeW9uZSw8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+SSBqb2luIHRoaXMgdGhy ZWFkIHRvIGRpc2N1c3MgdGhlIHVuZGVyc3RhbmRpbmcgb2YgdGhlIGRyYWZ0IGRhdGEtZXhwb3J0 LWNhcGFiaWxpdGllcyBhbmQgaG93IGl0IGlzIGNvbmZ1c2luZyB3aXRoIHRoZSBjYXBhYmlsaXRp ZXMgZXhwb3J0IGZlYXR1cmUgb2YgaHR0cHMtbm90aWYgZHJhZnQuPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYu MHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPkkgdGhpbmsgdGhhdCB0aGU8c3BhbiBz dHlsZT0iY29sb3I6YmxhY2siPiZuYnNwO2RhdGEtZXhwb3J0LWNhcGFiaWxpdGllcyBkcmFmdCBz aG91bGQgY2hhbmdlIHRoZSB0ZXJtcyBjbGllbnQvc2VydmVyIHRvIHB1Ymxpc2hlci9yZWNlaXZl ci4NCjwvc3Bhbj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu cy1zZXJpZjtjb2xvcjojMUY0OTdEIj5bUWluXTogQWdyZWUsIEkgdGhpbmsgdGhlIGNsaWVudCBp cyBjb3JyZXNwb25kaW5nIHRvIHJlY2VpdmVyIHdoaWxlIHRoZSBzZXJ2ZXIgaXMgY29ycmVzcG9u ZGluZyB0byB0aGUgcHVibGlzaGVyLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xv cjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2si PlRoYXQgd2F5LCBJIHRoaW5rIGl0IHdvdWxkIGJlIGNsZWFyZXIgaW4gd2hpY2ggZHJhZnQgd2Ug ZGlzY3VzcyB3aGljaCBjYXNlLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MGNtO21hcmdp bi1yaWdodDowY207bWFyZ2luLWJvdHRvbToxMi4wcHQ7bWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5BcyBJ IHVuZGVyc3Rvb2QgcmVhZGluZyB0aGlzIHRocmVhZCwmbmJzcDtkYXRhLWV4cG9ydC1jYXBhYmls aXRpZXMgZGlzY3Vzc2VzIGhvdyB0aGUgcmVjZWl2ZXIgKGNsaWVudCkgY291bGQgZ2V0IHRoZSBw dWJsaXNoZXIncyAoc2VydmVyKSBjYXBhYmlsaXRpZXMuIEFuZCBvbiB0aGUgb3RoZXIgc2lkZSwg dGhlIEhUVFBTIEdFVA0KIGNhcGFiaWxpdGllcyBmcm9tIGh0dHBzLW5vdGlmIGRyYWZ0IGRlZmlu ZXMgaG93IHRoZSByZWNlaXZlciAoY2xpZW50KSBjb3VsZCBleHBvcnQgaXRzIGNhcGFiaWxpdGll cyB0byB0aGUgcHVibGlzaGVyIChzZXJ2ZXIpLiBJdDxzcGFuIGxhbmc9IlpILUNOIj7igJk8L3Nw YW4+cyB0aGF0IHJpZ2h0ID8gUGxlYXNlIGNvcnJlY3QgbWUgaWYgdGhlcmUgaXMgYW55IG1pc3Vu ZGVyc3RhbmRpbmcuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0Qi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5bUWlu XTogVGhhdOKAmXMgYSBnb29kIGRpc3RpbmN0aW9uLiBJbiBhZGRpdGlvbiwgSSBhbSB0aGlua2lu ZywgZGF0YS1leHBvcnQtY2FwYWJpbGl0aWVzIGZvY3VzZXMgb24gZ2VuZXJpYyBkYXRhIG1vZGVs IG9yIGRhdGEgZXhwb3J0DQogZmVhdHVyZXMgaW4geW91ciB3b3Jkcywgd2hpbGUgaHR0cHMtbm90 aWYgZm9jdXNlcyBvbiBwcm90b2NvbCB0aGF0IGlzIHVzZWQgdG8gY2FycnkgdGhlc2UgZGF0YSBl eHBvcnQgZmVhdHVyZXMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPk9uIHRoZSBvdGhlciBo YW5kLCB3ZSBhcmUgZGlzY3Vzc2luZyBob3cgdGhlIHJlY2VpdmVyIGNvdWxkIGV4cG9zZSBpdHMg Y2FwYWJpbGl0aWVzIG9uIGVhY2ggbm90aWZpY2F0aW9uIGRyYWZ0cyAoaHR0cHMtbm90aWYsIHVk cC1ub3RpZiwgZXRjKS4gTm90aWZpY2F0aW9ucyBkcmFmdHMgZGVmaW5lcyBhIHByb3RvY29sDQog dG8gZXhjaGFuZ2Ugbm90aWZpY2F0aW9ucyBvdmVyIGEgdHJhbnNwb3J0IGxheWVyLCBzbyBmcm9t IG15IHBvaW50IG9mIHZpZXcsIHRoZSBjYXBhYmlsaXRpZXMgZXhwb3J0IGZlYXR1cmUgc2hvdWxk IG5vdCBiZSBkZWZpbmVkIHRoZXJlIGJlY2F1c2UgOjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6NTQuMHB0O3RleHQtaW5kZW50Oi0xOC4wcHQ7bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzIiPg0K PCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj48c3BhbiBzdHls ZT0ibXNvLWxpc3Q6SWdub3JlIj4xLjxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVz IE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+ PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5pdCB3b3VsZCBiZSB0cmFuc3BvcnQgZGVwZW5kZW50 IChJIGRvbid0IGZlZWwgY29uZm9ydGFibGUgcHV0dGluZyBhIEhUVFBTIGV4cG9ydCBjYXBhYmls aXRpZXMgb24gdGhlIHVkcC1ub3RpZiBkcmFmdC4uLik8L3NwYW4+PHNwYW4gc3R5bGU9ImNvbG9y OiMxRjQ5N0QiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5b UWluXTogVGhhdOKAmXMgYSBnb29kIGFyZ3VtZW50IG9uIHdoeSB3ZSBzaG91bGQgc2VwYXJhdGUg ZGF0YSBtb2RlbCBvciBkYXRhIGV4cG9ydCBmZWF0dXJlcyBkZWZpbml0aW9uIGZyb20gcHJvdG9j b2wgZGVmaW50aW9ucy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0i Y29sb3I6YmxhY2siPjIuIGZvciBjb25maWd1cmVkIG5vdGlmaWNhdGlvbnMgZnJvbSB0aGUgcHVi bGlzaGVyIHNpZGUsIHRoZXJlIGlzIG5vIG5lZWQgdG8ga25vdyB0aGUgY2FwYWJpbGl0aWVzIGZv ciB0aGUgcmVjZWl2ZXIsIHRoZXkgYWxyZWFkeSBrbm93IHRoZW08L3NwYW4+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPjMuIEkgdGhpbmsgd2UgYXJlIG1p eGluZyB0aGUgY29uZmlndXJhdGlvbiBwYXJ0IGFuZCB0aGUgbm90aWZpY2F0aW9uIHBhcnQ8L3Nw YW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+ W1Fpbl06IFNvcnQgb2YgYWdyZWUsIGJ1dCBodHRwIG5vdGlmIGFsc28gYWRkIGEgc3RhdGVtZW50 IHRvIHNheTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj7igJw8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6MzYuMHB0O3BhZ2UtYnJlYWstYmVmb3JlOmFsd2F5cyI+PHNwYW4gbGFuZz0iRU4iPiZu YnNwOyZuYnNwOyBGb3IgcHVibGlzaGVycyB1c2luZyBTdWJzY3JpcHRpb24gdG8gWUFORyBOb3Rp ZmljYXRpb25zIFs8YSBocmVmPSJodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9odG1s L3JmYzg2MzkiIHRpdGxlPSImcXVvdDtTdWJzY3JpcHRpb24gdG8gWUFORyBOb3RpZmljYXRpb25z JnF1b3Q7Ij5SRkM4NjM5PC9hPl0sPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdDtwYWdlLWJyZWFrLWJlZm9yZTphbHdh eXMiPjxzcGFuIGxhbmc9IkVOIj4mbmJzcDsmbmJzcDsgZHluYW1pYyBkaXNjb3Zlcnkgb2YgYSBy ZWNlaXZlcidzIHN1cHBvcnRlZCBlbmNvZGluZyBpcyBuZWNlc3Nhcnk8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0O3Bh Z2UtYnJlYWstYmVmb3JlOmFsd2F5cyI+PHNwYW4gbGFuZz0iRU4iPiZuYnNwOyZuYnNwOyBvbmx5 IHdoZW4gdGhlICZxdW90Oy9zdWJzY3JpcHRpb25zL3N1YnNjcmlwdGlvbi9lbmNvZGluZyZxdW90 OyBsZWFmIGlzIG5vdDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIGxhbmc9IkVOIj4mbmJzcDsmbmJzcDsg Y29uZmlndXJlZDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2 LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPuKAnTxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 MzYuMHB0Ij48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPkFzIEkgdW5kZXJzdG9vZCBpbiB0aGUg cHJlY2VkZW50IG1haWxzLCBRaW4gaXMgbG9va2luZyBmb3IgYSBjb21tb24gcHJvdG9jb2wgdG8g ZXhjaGFuZ2UgdGhlc2UgY2FwYWJpbGl0aWVzIG92ZXIgYWxsIG5vdGlmaWNhdGlvbnMgZHJhZnRz LiZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5bUWluXTogU2VlIGFib3ZlLCBhcyBJIGNsYXJpZmll ZCwgSSB0aGluayB3ZSBjYW4gZm9jdXMgb24gY29tbW9uIGRhdGEgbW9kZWwgZm9yIGRhdGEgZXhw b3J0IGZlYXR1cmVzIGluc3RlYWQgb2YgY29tbW9uIHByb3RvY29sLCAmbmJzcDt3ZQ0KIHdpbGwg bGVhdmUgcHJvdG9jb2wgZXh0ZW5zaW9uIHRvIGVhY2ggdHJhbnNwb3J0IHNwZWNpZmljIG5vdGlm IGRyYWZ0LCBkb2VzIHRoaXMgbWFrZSBzZW5zZT88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48Yj48aT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9pPjwvYj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 Yj48aT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+W1FpdWZhbmcgTWFdIFRoZXJlIGlz IG9uZSBtb3JlIHBvaW50IHRoYXQgSSB3b3VsZCBsaWtlIHRvIGFkZCBoZXJlLCBwbGVhc2Ugbm90 ZSB0aGF0IHRoZSBjYXBhYmlsaXR5IGV4cG9zdXJlIG1lY2hhbmlzbSBkZWZpbmVkIGluIGRhdGEt ZXhwb3J0LWNhcGFiaWxpdHkNCiBkcmFmdCBpcyBsZXZlcmFnZWQgYnkgWUFORyBpbnN0YW5jZSBm aWxlLiA8bzpwPjwvbzpwPjwvc3Bhbj48L2k+PC9iPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxiPjxpPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mbmJzcDtUaGF0J3MgdG8gc2F5 LCB0aGUgY2FwYWJpbGl0aWVzIGFyZSBkb2N1bWVudGVkIGluIGEgc3RhbmRhcmQtZm9ybWF0IGZp bGUgd2hpY2ggY291bGQgYmUgYWNjZXNzZWQgYnkgYW55IGZpbGUgYWNjZXNzIG1ldGhvZCBhbmQg cHJvdG9jb2wuPG86cD48L286cD48L3NwYW4+PC9pPjwvYj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFG NDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5NYXli ZSBpdCBpcyBiZXR0ZXImbmJzcDt0byBkZWZpbmUgdGhpcyBjYXBhYmlsaXRpZXMgZXhwb3J0IHRy YW5zcG9ydCBkZXBlbmRlbnQgcHJvdG9jb2wgb24gYW5vdGhlciBkcmFmdCA/IE9yIG9uIHRoZSZu YnNwO2RhdGEtZXhwb3J0LWNhcGFiaWxpdGllcyBkcmFmdCwgYnV0IGl0IGlzIGRlZmluZWQgYXMg dHJhbnNwb3J0IGFnbm9zdGljPHNwYW4gbGFuZz0iWkgtQ04iPuKApjwvc3Bhbj48L3NwYW4+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPltRaW5dOiBBZ3JlZS4g U2VlIG1vcmUgY2xhcmlmaWNhdGlvbiBhYm92ZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0 Ij5BbnkgdGhvdWdodHMgPzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MzYuMHB0Ij5BbGV4IEh1YW5nIEZlbmc8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPklOU0EgTHlv biB8IFVueXRlIHRlYW08bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MGNtO21hcmdpbi1yaWdodDowY207 bWFyZ2luLWJvdHRvbToxMi4wcHQ7bWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRv bTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6MGNtO21hcmdpbi1yaWdodDowY207bWFyZ2luLWJvdHRvbToxMi4wcHQ7 bWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCkRhdGU6IFdlZCwgMiBKdW4gMjAyMSAwMTowNzowNSAmIzQz OzAwMDA8YnI+DQpGcm9tOiBRaW4gV3UgJmx0OzxhIGhyZWY9Im1haWx0bzpiaWxsLnd1QGh1YXdl aS5jb20iPmJpbGwud3VAaHVhd2VpLmNvbTwvYT4mZ3Q7PGJyPg0KVG86IE1haGVzaCBKZXRoYW5h bmRhbmkgJmx0OzxhIGhyZWY9Im1haWx0bzptamV0aGFuYW5kYW5pQGdtYWlsLmNvbSI+bWpldGhh bmFuZGFuaUBnbWFpbC5jb208L2E+Jmd0Ozxicj4NCkNjOiBLZW50IFdhdHNlbiAmbHQ7PGEgaHJl Zj0ibWFpbHRvOmtlbnQmIzQzO2lldGZAd2F0c2VuLm5ldCI+a2VudCYjNDM7aWV0ZkB3YXRzZW4u bmV0PC9hPiZndDssICZxdW90OzxhIGhyZWY9Im1haWx0bzpuZXRjb25mQGlldGYub3JnIj5uZXRj b25mQGlldGYub3JnPC9hPiZxdW90Ozxicj4NCiZsdDs8YSBocmVmPSJtYWlsdG86bmV0Y29uZkBp ZXRmLm9yZyI+bmV0Y29uZkBpZXRmLm9yZzwvYT4mZ3Q7PGJyPg0KU3ViamVjdDogW25ldGNvbmZd ID8/OiAmbmJzcDtDYXBhYmlsaXR5LWZldGNoaW5nIG1lY2hhbmlzbXM8YnI+DQpNZXNzYWdlLUlE OiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmQzZTI4YzMzNTliMzQzNTJiNDJjNmY5OWNlODgxNDA1QGh1 YXdlaS5jb20iPmQzZTI4YzMzNTliMzQzNTJiNDJjNmY5OWNlODgxNDA1QGh1YXdlaS5jb208L2E+ Jmd0Ozxicj4NCkNvbnRlbnQtVHlwZTogdGV4dC9wbGFpbjsgY2hhcnNldD0mcXVvdDt1dGYtOCZx dW90Ozxicj4NCjxicj4NCkhpLCBNYWhlc2g6PGJyPg0KPGJyPg0KPz8/OiBNYWhlc2ggSmV0aGFu YW5kYW5pIFs8YSBocmVmPSJtYWlsdG86bWpldGhhbmFuZGFuaUBnbWFpbC5jb20iPm1haWx0bzpt amV0aGFuYW5kYW5pQGdtYWlsLmNvbTwvYT5dPGJyPg0KPz8/PzogMjAyMT82PzI/IDY6NDQ8YnI+ DQo/Pz86IFFpbiBXdSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmJpbGwud3VAaHVhd2VpLmNvbSI+Ymls bC53dUBodWF3ZWkuY29tPC9hPiZndDs8YnI+DQo/PzogS2VudCBXYXRzZW4gJmx0OzxhIGhyZWY9 Im1haWx0bzprZW50JiM0MztpZXRmQHdhdHNlbi5uZXQiPmtlbnQmIzQzO2lldGZAd2F0c2VuLm5l dDwvYT4mZ3Q7Ow0KPGEgaHJlZj0ibWFpbHRvOm5ldGNvbmZAaWV0Zi5vcmciPm5ldGNvbmZAaWV0 Zi5vcmc8L2E+PGJyPg0KPz86IFJlOiBbbmV0Y29uZl0gQ2FwYWJpbGl0eS1mZXRjaGluZyBtZWNo YW5pc21zPGJyPg0KPGJyPg0KW1RyaW1taW5nIGRvd24gdGhlIGUtbWFpbCB0byBvcGVuIHRvcGlj c108YnI+DQo8YnI+DQpIaSBRaW4sPGJyPg0KPGJyPg0KU2VlIGlubGluZSB3aXRoIFttajFdPGJy Pg0KPGJyPg0KPGJyPg0KT24gTWF5IDE4LCAyMDIxLCBhdCA0OjQwIEFNLCBRaW4gV3UgJmx0Ozxh IGhyZWY9Im1haWx0bzpiaWxsLnd1QGh1YXdlaS5jb20iPmJpbGwud3VAaHVhd2VpLmNvbTwvYT4m bHQ7PGEgaHJlZj0ibWFpbHRvOmJpbGwud3VAaHVhd2VpLmNvbSI+bWFpbHRvOmJpbGwud3VAaHVh d2VpLmNvbTwvYT4mZ3Q7Jmd0OyB3cm90ZTo8YnI+DQo8YnI+DQpIaSwgTWFoZXNoOjxicj4NCjxi cj4NCjxicj4NClRoZSBxdWVzdGlvbiBpcyB3aGV0aGVyIHRoZSByZWNlaXZlciBuZWVkcyB0byBi ZSBhIE5FVENPTkYvUkVTVENPTkYgc2VydmVyLiBBcyBtYXFpdWZhbmcgd3JvdGUgaW4gaGlzIHJl c3BvbnNlLCBpZiB0aGUgcmVjZWl2ZXIgc3VwcG9ydHMgdGhlIGRhdGEtZXhwb3J0LWNhcGFiaWxp dGllcyBkcmFmdCwgdGhlbiBpdCB3b3VsZCBuZWVkIHRvIGJlIGEgTkVUQ09ORi9SRVNUQ09ORiBz ZXJ2ZXIsIHdoZXJlYXMgd2l0aCB0aGUgaHR0cHMtbm90aWYgZHJhZnQNCiB0aGF0IGlzIG5vdCB0 aGUgY2FzZS4gVGhpcyBpcyB0aGUgY2FzZSB3aGV0aGVyIHRoZSByZWNlaXZlciBzdXBwb3J0cyBS RkMgODYzOSBvciBub3QuPGJyPg0KW1Fpbl06TXkgdW5kZXJzdGFuZGluZyBpcyBkYXRhLWV4cG9y dC1jYXBhYmlsaXRpZXMgZG9lc24/dCByZXF1aXJlIHJlY2VpdmVyIHRvIGJlIHRpZWQgd2l0aCBO RVRDT05GL1JFU1RDT05GIHNlcnZlci4gSSBhc3N1bWUgdGhlIG1hbmFnZW1lbnQgc3lzdGVtIChp LmUuLCByZWNlaXZlcikgYW5kIG5ldHdvcmsgZGV2aWNlIChpLmUuLCBwdWJsaXNoZXIpIGNhbiB1 c2UgSFRUUFMgdG8gZXhjaGFuZ2UgYWR2ZXJ0aXNlZCBkYXRhLjxicj4NCjxicj4NCkluIGFkZGl0 aW9uLCBNYXliZSB3aGF0IGlzIG1pc3NpbmcgaW4gdGhlIGRhdGEtZXhwb3J0LWNhcGFiaWxpdGll cyBkcmFmdCBpcyB0byBkZWZpbmUgUlBDIHRvIGFsbG93IHRoZSBwdWJsaXNoZXIgZ2V0IGNhcGFi aWxpdHkgZnJvbSByZWNlaXZlciB0aHJvdWdoIEhUVFBTIGNoYW5uZWwsIHNpbWlsYXIgdG8gd2hh dCBpcyBnZXQtYm9vdHN0cmFwcGluZy1kYXRhIFJQQyBkZWZpbmVkIGluIFJGQzg1NzIuPGJyPg0K PGJyPg0KW21qMV0gU3RpcHVsYXRpbmcgYSBIVFRQcyBjaGFubmVsIHdvcmtzIGZvciB0aGUgSFRU UFMgbm90aWYgZHJhZnQuIEJ1dCB3aGF0IHdpbGwgb3RoZXIgdHJhbnNwb3J0IHR5cGUgZHJhZnRz IHVzZT8gZS5nLiB0aGUgVURQIG5vdGlmIGRyYWZ0Pz88YnI+DQo8YnI+DQpbUWluXTpJIHRoaW5r IFVEUCBub3RpZiBkcmFmdCBjb3VsZCBhbHNvIHVzZSBIVFRQcyBjaGFubmVsIHRvIGNhcnJ5IGNh cGFiaWxpdHkgaW5mb3JtYXRpb24gZnJvbSB0aGUgc2VydmVyIHRvIHRoZSBjbGllbnQgaW4gdGhl IGZvcm0gb2YgWUFORyBpbnN0YW5jZSBmaWxlIGZvcm1hdC48YnI+DQo8YnI+DQpQbGVhc2Ugbm90 ZSB0aGF0IFJGQyA4NjM5IHJlY2VpdmVycyBkbyBub3QgaGF2ZSB0byBiZSBORVRDT05GL1JFU1RD T05GIHNlcnZlcnMgZm9yIGNvbmZpZ3VyZWQgc3Vic2NyaXB0aW9ucy4gUkZDIDg2MzksIFNlY3Rp b24gMi43IGRlZmluZXMgdGhlIGNvbnRyb2wgbWVzc2FnZXMgc3VjaCBhcyAmbHQ7c3Vic2NyaXB0 aW9uLXN0YXJ0ZWQmZ3Q7IHVzaW5nIG9uZS13YXkgWUFORyA/bm90aWZpY2F0aW9uPyBzdGF0ZW1l bnRzLjxicj4NCjxicj4NCltRaW5dOiBVbmRlcnN0YW5kIHRoaXMgY2FzZSwgRG8geW91IHRoaW5r IHdlIHNob3VsZCBkZWZpbmUgYSBuZXcgbm90aWZpY2F0aW9uIGluIHRoZSBkYXRhLWV4cG9ydC1j YXBhYmlsaXRpZXMgZHJhZnQgaW5zdGVhZCBvZiBjb25zaWRlcmluZyB0byBkZWZpbmUgUlBDPzxi cj4NCjxicj4NClttajFdIEkgZG8gbm90IHVuZGVyc3RhbmQgdGhpcyBzdGF0ZW1lbnQuIENhbiB5 b3UgZXhwYW5kPzxicj4NCjxicj4NCltRaW5dOiBJIGFtIG5vdCBzdXJlIHRoZSBSUEMgaXMgYSBn b29kIGRlc2lnbiBjaG9pY2UsIEkgdGhpbmsgd2UgY291bGQgaGF2ZSAzIG9wdGlvbnM8YnI+DQo/ YT9SZXBvcnQgY2FwYWJpbGl0eSBpbmZvcm1hdGlvbiBmcm9tIHRoZSBIVFRQcyBzZXJ2ZXIgb3Ig dGhlIEhUVFBzIGNsaWVudCBhdCBydW4tdGltZSBvciBpbXBsZW1lbnRhdGlvbi0gdGltZSwgcGVy IHRoZSBZQU5HIEluc3RhbmNlIERhdGEgRmlsZSBGb3JtYXQuPGJyPg0KKGIpIERlZmluZSBvbmUg d2F5IFlBTkcgbm90aWZpY2F0aW9uIHNpbWlsYXIgdG8gJmx0O3N1YnNjcmlwdGlvbi1zdGFydGVk Jmd0OyB0aGF0IGlzIHNlbnQgZnJvbSB0aGUgc2VydmVyIHRvIHRoZSBjbGllbnQ8YnI+DQooYykg UmVwb3J0IGNhcGFiaWxpdHkgaW5mb3JtYXRpb24gb25seSBmcm9tIE5FVENPTkYgc2VydmVyIHVz aW5nIFlBTkcgbW9kZWwgZGVmaW5lIGluIGRhdGEtZXhwb3J0LWNhcGFpYmxpdGllcyBkcmFmdDxi cj4NCkkgdGhpbmsgKGIpIG9ubHkgYWxsb3cgdGhlIHNlcnZlciBhZHZlcnRpc2UgdGhlIHNlcnZl ciBjYXBhYmlsaXR5IHRvIHRoZSBjbGllbnQgYnV0IGRvZXMgbm90IGFsbG93IHRoZSBjbGllbnQg aXNzdWUgbm90aWZpY2F0aW9uIGFuZCBhZHZlcnRpc2UgY2xpZW50IGNhcGFiaWxpdHkgdG8gdGhl IHNlcnZlcjxicj4NCihjKSBpcyBzb21ldGhpbmcgeW91IGVudmlzaW9uIGhvdyBpdCBpcyB1c2Vk LCB0aGUgbGltaXRhdGlvbiBpcyB0byByZXF1aXJlIE5FVENPTkYgc2VydmVyIHRvIGJlIHN1cHBv cnRlZCBieSB0aGUgcmVjZWl2ZXIgb3IgdGhlIGNsaWVudCwgYnV0IHRoaXMgb3B0aW9uIGlzIG5v dCB3aGF0IHdlIHByb3Bvc2VkIGluIHRoZSBkYXRhLWV4cG9ydC1jYXBhYmlsaXRpZXMgZHJhZnQu PGJyPg0KVGhlIHNvbHV0aW9uIHdlIHByb3Bvc2VkIGlzIChhKSB3aGljaCBhbGxvd3MgcmVwb3J0 IGNhcGFiaWxpdHkgaW5mb3JtYXRpb24gZWl0aGVyIGZyb20gdGhlIFNlcnZlciBvciB0aGUgY2xp ZW50IHVzaW5nIFlBTkcgSW5zdGFuY2UgZGF0YSBmaWxlLiBIb3BlIHRoaXMgY2xhcmlmaWVzLjxi cj4NCjxicj4NCk1haGVzaCBKZXRoYW5hbmRhbmk8YnI+DQo8YSBocmVmPSJtYWlsdG86bWpldGhh bmFuZGFuaUBnbWFpbC5jb20iPm1qZXRoYW5hbmRhbmlAZ21haWwuY29tPC9hPiZsdDs8YSBocmVm PSJtYWlsdG86bWpldGhhbmFuZGFuaUBnbWFpbC5jb20iPm1haWx0bzptamV0aGFuYW5kYW5pQGdt YWlsLmNvbTwvYT4mZ3Q7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1 b3RlPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_0ca926471ac04ca3a44c0351d5bb0fe3huaweicom_-- From nobody Thu Jun 10 02:52:49 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D9F813A3C55 for ; Thu, 10 Jun 2021 02:52:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=btconnect.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FsQle8Ms851r for ; Thu, 10 Jun 2021 02:52:33 -0700 (PDT) Received: from EUR05-VI1-obe.outbound.protection.outlook.com (mail-vi1eur05on2101.outbound.protection.outlook.com [40.107.21.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EA4BA3A3C43 for ; Thu, 10 Jun 2021 02:52:32 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=d4KxSAGmJcdTlv/0AK8JWGMrwplJXnluvVISNpOxa0mioivj1auQQfN/JOX0GqiVDbpH4HJoirHmTgqoQQZaFjTA67H0QrpnlJVux+q05qhw/CrdxfvRqJjbRe+WN2IzQ86S5opoXYxnR9pSKyg7iNEQSQpaEzi3YZSLWcpdP1zuLIEBcFXqjoj9PEMRw/Bunqx8LzS6VkUTMoTZmroNWag67T/jeu3ej6RyVXAfamfE9rVPSoIbq3uzojldaNzV601a2B1aAwXS12KkitIQ+SIN570i07W5mY6d/HKn/DsqStzwWjDQL+7pWESttVOgy2xz1PBvLa1DzXc0uvm0Bw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=gSg1oggj5Y4Xs1U3tcyhApoGfE8gqtzU7tZ8dsyGs/o=; b=etQ7hKWJ9lB4HUmFNyYzq7wG9oBZ6dge1Vz2zYN+xGRKCw9vvjO5Z2Gn0LcUs48DeG8mtKF9Q27/IY+hOjOSj7jCKT30tKJn/3qtd0JdUbRhxN8yhK1zjofW4tD4CouvX1FCbSYkJ8vwwg3+ECcaFFRsmhkv7PkQqH1h5+ASQLbV1IvGBMVMGY6HHbbeTv17we1H02kobkDQ2FmB5NMiiOVCfbICpmbOapWSap0Gyqw3kw3FmhyyXqNpEqAOBAcOJZY8A7Eq5rxPEgHt8Kab5DyLn50dE9Ub+4b5D3Zv5LRt9kIXJieUW97mfKmyKyirde5pbWc51rHdi1//lJqbnA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=btconnect.com; dmarc=pass action=none header.from=btconnect.com; dkim=pass header.d=btconnect.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btconnect.onmicrosoft.com; s=selector2-btconnect-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=gSg1oggj5Y4Xs1U3tcyhApoGfE8gqtzU7tZ8dsyGs/o=; b=jsP4ZMUVM2wfy7IEYAoFGnFwJir4VGrJ7Ze+OhJvZdxAbDqhbxKQfimgg+UG3XCglT45z0mIGKCekBI9sheZiul1C5Wifw3WCubL/Ai6WG7NkYFGOWWwVUoCA4KKhv5+Ffh52NZoPg/ufOg4wufmbP90lgNUA+HCNYE3gaoOQBc= Received: from AM7PR07MB6248.eurprd07.prod.outlook.com (2603:10a6:20b:134::11) by AM6PR07MB5057.eurprd07.prod.outlook.com (2603:10a6:20b:36::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4242.10; Thu, 10 Jun 2021 09:52:29 +0000 Received: from AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::a05a:a474:bf78:f0a9]) by AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::a05a:a474:bf78:f0a9%8]) with mapi id 15.20.4219.017; Thu, 10 Jun 2021 09:52:29 +0000 From: tom petch To: Kent Watsen , "netconf@ietf.org" Thread-Topic: [netconf] Create IANA-defined modules? Thread-Index: AQHXUmI5UkCatU/0PEq109lYObrc4asBmrnfgAt5LKM= Date: Thu, 10 Jun 2021 09:52:29 +0000 Message-ID: References: <01000179aa118e62-0d8dd2b2-f001-4ff3-9d10-4b4e15098055-000000@email.amazonses.com> <5F969C92-1A1F-4983-878F-9C222C3DEC05@cisco.com>, <01000179cfb08608-c708dd5b-c015-4608-986f-52d5d013153b-000000@email.amazonses.com> In-Reply-To: <01000179cfb08608-c708dd5b-c015-4608-986f-52d5d013153b-000000@email.amazonses.com> Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: watsen.net; dkim=none (message not signed) header.d=none;watsen.net; dmarc=none action=none header.from=btconnect.com; x-originating-ip: [86.143.250.49] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 4fcc7c6b-6a7c-400f-2d7d-08d92bf575bd x-ms-traffictypediagnostic: AM6PR07MB5057: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM7PR07MB6248.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(366004)(396003)(346002)(136003)(39860400002)(376002)(86362001)(8936002)(52536014)(8676002)(6506007)(110136005)(53546011)(316002)(4326008)(122000001)(66574015)(966005)(71200400001)(38100700002)(186003)(55016002)(9686003)(64756008)(66446008)(76116006)(66946007)(66476007)(66556008)(91956017)(33656002)(2906002)(26005)(7696005)(478600001)(5660300002)(83380400001); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: =?utf-8?B?M3NHRG43UGd4QmxOOFgrK3ZzbGszempWN3orNlViblZOblp3U0MwZGp5cThQ?= =?utf-8?B?VTREUVpEOG9nYmhkWnJaVVorSTVKOTVweUFQd0lPK3pGNXRjRzFLSnNaTnpq?= =?utf-8?B?TDJhSnowZDFUMktwUXRFdFZTRm91MU9yZ2V1QnR2NGQ0M1l0OFF6b3dReGQz?= =?utf-8?B?NWJiNzVIdkF0bVBFMjFxdDBpV2VKUVBtWE9YbmRMcHgwNk56K3VaTXhPV09D?= =?utf-8?B?cU1nVy9QY1p0T0hZblluU3JCbm5DTGRDMEdmTWJ3MDhnWFZXOVhMK0JnbFA4?= =?utf-8?B?K2FKRG4zeEFYVmVWMDdGMkw5a1VBYWhXRmlWMGsrSkNVQ2hHTmJRSTFwalZw?= =?utf-8?B?RXdYdmpoQ1B2TTJjbGZjRVJzQjh6YUdXaTVlNnpTQm5hZThKdkYrRkVpWHUx?= =?utf-8?B?N0N3VTI1ZHRDWjlaVEhHR0R5K1AraWlvTE1vNlBWZStKVkR5Nm5pa0VXclB2?= =?utf-8?B?UWlpTUZNbmpLRnlnZHl3YnpSaXAvNGh3dWl4NjRuaHhJV1Yvd05WSkhtV3pP?= =?utf-8?B?MjNXRXlHbUkzVTFxS0c3S2pGQzlXQ1lVQXlsOGJiZUs3YU1ZalBpZndidjZN?= =?utf-8?B?UFpLMS85bnl2Q0lrL01qVnBGK1BMMWh5RXQ2bW84NjhoeDRZczNxK3NyYS9h?= =?utf-8?B?ZnRBNXphYnc2TTh5QmpaQnR5YXZLZTBnQXhoalNHRWc2d081L0Jzb2tLck0x?= =?utf-8?B?YVhYMlk1aE5BYzlnRWZ5QUZXQVpiSUZ3K01IcEVvTUgyQ2Q2NUlZMTNTNk15?= =?utf-8?B?VTQ5cTU4QWxUNUlKL3Z2SVowM3hXN0R3a3pRaktTeGZ6ZTN1TVRHSWVudzNj?= =?utf-8?B?UXgvNHpQY3pNb2x0eTc4T25jaFVvWm91cXVYVTdIbmxaTzBKbEZLT0g3YlRa?= =?utf-8?B?a0ljdm5BSDl5N1IwOFpnTExLZnREZXdweml1Zkh2V1BFZjZaTUZXWmtoeGtt?= =?utf-8?B?VHVqalhFU0FOZE9UWmZJQnd6Y1BjbThFRTROaSt3ViswZzFUL2ZqY3NlS05D?= =?utf-8?B?amg1b05ObXZ6c3c3MHFoTHFPTTdjT2cxM3ZFTEkyN2RVNEVBZzhRR1VSdmNP?= =?utf-8?B?YnRidUpKeGpmR2dvcmVLWGlaU3k2QkVYZktZMFNxcU5aamprbTFoZDVwbS9M?= =?utf-8?B?Ym1tMnl0YlQ3ZFlLakdia1lqdS8rVUtTZ1BJOVowNnQrR0lJSjFsajhyVnc0?= =?utf-8?B?V2hvYUlYKzBKNE4vWUFFT2pZcXlaaWNUUUlVY3d0NHRrVGlCR0lwNGdRTkFB?= =?utf-8?B?SWhFOUM2Mkd3ZEdjRk5DbkhlV210cHdSb3pETU9LS0RiUDlPMnRIVVVsQ1pK?= =?utf-8?B?SytrTXE2UzB4SlJpNjJlUEtNNVpjQWVsUjZsajYvejZQYThXUnB1Sk04K2dT?= =?utf-8?B?KzQ5UnFndFpDMU54bVlZOFpUTEo1dHN5UWEwcUhHZzhyNVRCZ0hURWpxU3dI?= =?utf-8?B?NzdiSGZONjYvbEtrYUxLSXkzYXFaNjBTbTZKYUxWaGp5YnBvS2pucnpzU3c2?= =?utf-8?B?ZHVISzZ5Vk1yZCt4bWIxZ2JnRnUxOGhZRzkwNDk3K29VNW41bTBmTlByNzRv?= =?utf-8?B?bXdPdkV6VGdwUWZSeDBJRloxemJmNys5Y2V5bGxRWFhTa1pmUVdMOGl4U3NC?= =?utf-8?B?d3F3NFNmYnJxMXhXdC9wSVo5aUNGckE5YjdOT0ZRNVZqM2dqOURBT3BZRTU2?= =?utf-8?B?QVF6RVpSWlBGUDlTa3ZLMi83aTFVN1RlOHpyeWdOYi9TUnlPUHkzRHJ2QXUz?= =?utf-8?Q?ix8dAWe/FhR00dczY4=3D?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: btconnect.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AM7PR07MB6248.eurprd07.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 4fcc7c6b-6a7c-400f-2d7d-08d92bf575bd X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Jun 2021 09:52:29.0854 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: cf8853ed-96e5-465b-9185-806bfe185e30 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: xZ1mPQfieRt9hr3vC69aPYe0Kw7epcyLZ8JJ2tVUrKs4YDygCRrJX8ZIGjZj8g90UH7HlSOXmPzsMQYfkCVSGg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR07MB5057 Archived-At: Subject: Re: [netconf] Create IANA-defined modules? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Jun 2021 09:52:48 -0000 TW1tbSB0aGlzIGlzIGdldHRpbmcgZXZlciBtb3JlIHRhbmdsZWQgYnV0IGxldCBtZSBzZWUgaWYg SSBjYW4gZ2V0IG15IGNvbW1lbnRzIHRocm91Z2ggdGhlIEludGVybmV0IHBvbGljZTotKQrvg4Eg ClFpbiBXdSA8YmlsbC53dUBodWF3ZWkuY29tPnwgV2VkLCAwOSBKdW5lIDIwMjEgMTM6MDcgVVRD CuWPkeS7tuS6ujogbmV0Y29uZiBbbWFpbHRvOm5ldGNvbmYtYm91bmNlc0BpZXRmLm9yZ10g5Luj 6KGoIEtlbnQgV2F0c2VuCuWPkemAgeaXtumXtDogMjAyMeW5tDXmnIgyN+aXpSAzOjA2CuaUtuS7 tuS6ujogbmV0Y29uZkBpZXRmLm9yZwoKW0NDLWluZyBHYXJ5LCB3aG8gY29udHJpYnV0ZWQgdGhl IOKAnGlldGYtW3Rscy9zc2hdLWNvbW1vbiIgbW9kdWxlcyBvcmlnaW5hbGx5XQoKCk5FVENPTkYg V0csCgpUaGUg4oCcdGxzLWNsaWVudC1zZXJ2ZXLigJ0gZHJhZnQganVzdCByZWNlaXZlZCB0aGUg Zm9sbG93aW5nIEdpdEh1YiDigJxpc3N1ZeKAnToKCj09PT09c3RhcnQ9PT09PQpUaGlzIGlzIHJh dGhlciBhIHF1ZXN0aW9uIHRoYW4gYW4gaXNzdWUsIG1heWJlLgoKR2l2ZW4gdGhhdCBJQU5BIG1h aW50YWlucyB0aGUgVExTIHBhcmFtZXRlcnMgYXQgICBodHRwczovL3d3dy5pYW5hLm9yZy9hc3Np Z25tZW50cy90bHMtcGFyYW1ldGVycy90bHMtcGFyYW1ldGVycy54aHRtbCwgd291bGQgaXQgbm90 IGJlIGJldHRlciBmb3IgdGhhdCBjb250ZW50IHRvIGNvbWUgZnJvbSBzb21ldGhpbmcgbGlrZSBp YW5hLXRsc1stcGFyYW1ldGVyc10ueWFuZyByYXRoZXIgdGhhbiBhbiBJRVRGIG1haW50YWluZWQg WUFORyBtb2R1bGU/Cj09PT09c3RvcD09PT09CgpUaGlzIGlzIGEgZ29vZCBwb2ludC4gIFBlcmhh cHMgd2Ugc2hvdWxkIG1vdmUgYWxsIHRoZSBpZGVudGl0aWVzIGZvciB0aGUgYWxnb3JpdGhtcyBk ZWZpbmVkIGluIHRoZSDigJxpZXRmLXRscy1jb21tb27igJ0gbW9kdWxlIHRvIGFuIElBTkEtbWFp bnRhaW5lZCDigJxpYW5hLXRscy1wYXJhbWV0ZXJz4oCdIG1vZHVsZS4gIFRob3VnaHRzPwoKW1Fp bl06IEkgYWdyZWUgdGhpcyBzZWVtcyBzdHJhaWdodGZvcndhcmQgdG8gbWUuIFRoZSBtb2R1bGUg bmFtZSBjb3VsZCBiZSAiaWFuYS10bHMtdHlwZXMiIGxpa2UuCgo8dHA+IGV4Y2VwdCB0aGF0IHRo YXQgbmFtZSBtYWtlcyBpdCBsb29rIGxpa2UgdGhlIHdvcmsgb2YgdGhlIFRMUyBXRyB3aGljaCBp dCBzaG91bGQgYmUgYnV0IGl0IG5vdC4KCkJ5IGV4dGVuc2lvbiwgdGhlIHNhbWUgc3RhdGVtZW50 IGFwcGxpZXMgdG8gdGhlIOKAnHNzaC1jbGllbnQtc2VydmVy4oCdIGRyYWZ0IGFuZCB0aGUgSUFO QSBtYWludGFpbmVkIFNTSCBwYXJhbWV0ZXJzIHBhZ2U6IGh0dHBzOi8vd3d3LmlhbmEub3JnL2Fz c2lnbm1lbnRzL3NzaC1wYXJhbWV0ZXJzL3NzaC1wYXJhbWV0ZXJzLnhodG1sLgoKT25lIHBvdGVu dGlhbCBpc3N1ZSB3aXRoIGRvaW5nIHRoaXMgaXMgdGhhdCB0aGUgZXhpc3RpbmcgaWRlbnRpdGll cyBoYXZlIOKAnGlmLWZlYXR1cmXigJ0gc3RhdGVtZW50cyB0aGF0IGNvbnN0cmFpbiB0aGVtIHRv IHNwZWNpZmljIFRMUy12ZXJzaW9ucyBhbmQgYWxnb3JpdGhtLWZhbWlsaWVzLCBhbmQgYXJlIHNv bWV0aW1lcyBtYXJrZWQgYXMg4oCcZGVwcmVjYXRlZCIuICBCeSBleGFtcGxlOgoKICAgIGlkZW50 aXR5IGVjZGhlLWVjZHNhLXdpdGgtYWVzLTEyOC1jYmMtc2hhMjU2IHsKICAgICAgIGlmLWZlYXR1 cmUgInRscy0xXzIiOwogICAgICAgaWYtZmVhdHVyZSAidGxzLWVjYyBhbmQgdGxzLXNoYTIiOwog ICAgICAgYmFzZSBjaXBoZXItc3VpdGUtYmFzZTsKICAgICAgIHN0YXR1cyAiZGVwcmVjYXRlZCI7 CiAgICAgICBkZXNjcmlwdGlvbgogICAgICAgICAgICJDaXBoZXIgc3VpdGUgVExTX0VDREhFX0VD RFNBX1dJVEhfQUVTXzEyOF9DQkNfU0hBMjU2LiI7CiAgICAgICByZWZlcmVuY2UKICAgICAgICAg ICJSRkMgNTI4OTogVExTIEVsbGlwdGljIEN1cnZlIENpcGhlciBTdWl0ZXMgd2l0aAogICAgICAg ICAgICAgICAgICAgICAgICAgICAgIFNIQS0yNTYvMzg0IGFuZCBBRVMgR2Fsb2lzIENvdW50ZXIg TW9kZSAoR0NNKSI7CiAgICB9CgpCdXQgdGhhdCBpbmZvcm1hdGlvbiBpcyBOT1QgY2FwdHVyZWQg aW4gdGhlIElBTkEtbWFpbnRhaW5lZCBwYWdlLiAgIFdoYXQgdG8gZG8/CgpbUWluXTogV2h5IG5v dCBiaW5kIHRscyB2ZXJzaW9uIHdpdGggY2lwaGVyLXN1aXRlIGluIHRoZSBlY2RoZS1lY2RzYS13 aXRoLWFlcy0xMjgtY2JjLXNoYTI1NiBpZGVudGl0eSBkZWZpbml0aW9uLiBBbHNvIEkgZmVlbCBp ZGVudGl0eSBuYW1lIGlzIHRvbyBsb25nLgoKPHRwPiAgVGhlIFRMUyBXRyBkZWZpbmVkIGFuZCBu YW1lZCB0aGUgY2lwaGVyIHN1aXRlIGFuZCB0aGF0IGlzIHRoZSBuYW1lIHRoZXkgZ2F2ZSBpdC4g IFVzZSBzb21ldGhpbmcgZWxzZSBhbmQgbm8gb25lIGZhbWlsaWFyIHdpdGggVExTIHdpbGwga25v dyB3aGF0IGl0IGlzLgoKCgpPbmUgb3B0aW9uIHdvdWxkIGJlIHRvIGRyb3AgYWxsIHRoZSBmZWF0 dXJlIHN0YXRlbWVudHMuICBBbGwgdGhleSBkbyBpcyBsaW1pdCB0aGUgdG90YWxpdHkgb2YgYWxn b3JpdGhtcyBwcmVzZW50ZWQgdG8gYW4gYWRtaW5pc3RyYXRvciwgd2hlbiBjb25maWd1cmluZyB3 aGljaCBhbGdvcml0aG1zIHRoZSBjbGllbnQvc2VydmVyIHNob3VsZCBzdXBwb3J0LiAgV29yc3Qg Y2FzZSwgYWxsIGFsZ29yaXRobXMgKG9mIGEgZ2l2ZW4gdHlwZSkgYXJlIHByZXNlbnRlZCwgcmVn YXJkbGVzcyBpZiBzdXBwb3J0ZWQgYnkgdGhlLCBlLmcuLCBUTFMgcHJvdG9jb2wgdmVyc2lvbi4g IFdoZW4gY29uZmlndXJpbmcgY2xpZW50cy9zZXJ2ZXJzIHVzaW5nLCBlLmcuLCB0ZXh0LWJhc2Vk IGNvbmZpZ3VyYXRpb24gZmlsZXMsIHN1Y2ggZmlsdGVycyBhcmUgbmV2ZXIgYXZhaWxhYmxlLiAg RG9lcyBhbnlvbmUga25vdyB3aGF0IENpc2NvL0p1bmlwZXIvZXRjLiBkZXZpY2VzIGRvIGluIHRo ZWlyIGNvbW1hbmQtbGluZSBhbmQvb3Igd2ViIGludGVyZmFjZXM/CgpbUWluXTogU2VlIGFib3Zl LCBkbyB3ZSBuZWVkIHRvIGludHJvZHVjZSBpZi1mZWF0dXJlICJ0bHMtMV8yIiBhbmQgd2h5IG5v dCB0aWUgdGhlIHRscyB2ZXJzaW9uIGluIHRoZSBjaXBoZXItc3VpdGUgbmFtZSBzdWNoIGFzICJ0 bHMxMi1lY2RoZS1lY2RzYS13aXRoLWFlcy0xMjgtY2JjLXNoYTI1NiIuIAoKPHRwPiBBZ2Fpbiwg dGhlIFRMUyBXRyBkZXNpZ25lZCBhbmQgbmFtZWQgdGhlIGNpcGhlciBzdWl0ZXMgYW5kIHRoZXkg YXJlIGludGVuZGVkIHRvIGJlIHZlcnNpb24gbmV1dHJhbC4gIExvb2sgYXQgdGhlIElBTkEgcmVn aXN0cnksIGRvemVucyBvZiB0aGVtLCBhbGwgVExTXyAgY2FsbCB0aGVtIHNvbWV0aGluZyBkaWZm ZXJlbnQgYW5kIG5vIG9uZSBmYW1pbGlhciB3aXRoIFRMUyB3aWxsIGtub3cgd2hhdCB5b3UgYXJl IHRhbGtpbmcgYWJvdXQuICBUaGUgY2hvaWNlIG9mIHRoZSBuYW1lIHdhcyBtYWRlIGJ5IHRoZSBU TFMgV0cgYW5kIGl0IHdvdWxkIGJlIHdyb25nIG9mIHRoZSBOZXRjb25mIFdHIHRvIHNlZWsgdG8g aW1wcm92ZSBpdCBhZnRlciBhbGwgdGhlc2UgZGVjYWRlcy4gIFlvdSBtaWdodCBhcmd1ZSB0aGF0 IGVuY29kaW5nIGFsbCB0aGUgc2VtYW50aWNzIGluIHRoZSBuYW1lIHdhcyBhIHBvb3IgY2hvaWNl IGJ1dCBpZiBzbywgYWRkaW5nIG1vcmUgc2VtYW50aWNzIGlzIG5vdCBhbiBpbXByb3ZlbWVudAoK VG9tIFBldGNoCgpBbm90aGVyIG9wdGlvbiwgd2hpY2ggSSBsaWtlIGJlY2F1c2UgaXTigJlzIGxl c3Mgd29yayBmb3IgbWUgKHVubGVzcyBzb21lb25lIGNhbiB2b2x1bnRlZXIgYSBHaXRIdWIgcHVs bCByZXF1ZXN0KSwgaXMgdG8gcmVtb3ZlIHRoZSBpZXRmLVt0bHMvc3NoXS1jb21tb24gbW9kdWxl cyBhbHRvZ2V0aGVyLiAgVGhleeKAmXJlIGN1cnJlbnRseSBvcHRpb25hbC10by1jb25maWd1cmUg YW5kLCB3aGVuIG5vdCBjb25maWd1cmVkLCBpdOKAmXMgYW4gaW1wbGVtZW50YXRpb24tc3BlY2lm aWMgZGVjaXNpb24gd2hhdCwgZS5nLiwgYWxnb3JpdGhtcyB0byBsaXN0IGFzIGJlaW5nIHN1cHBv cnRlZCBkdXJpbmcgdGhlIHByb3RvY29sIGhhbmRzaGFrZS4gIFBlcnNvbmFsbHksIEnigJl2ZSBu ZXZlciB1c2VkIHRoZW0gKG9yIGltcGxlbWVudGVkIHN1cHBvcnQgZm9yIHRoZW0pLCBoYXBwaWx5 IGRlZmVycmluZyB0byBpbnRlcm5hbCBjb2RlIGFuZCB1bmRlcmx5aW5nIGxpYnJhcmllcy4gIElu IGxpZXUgb2YgdXMgbm90IGRlZmluaW5nIHRoZXNlIG1vZHVsZXMgbm93LCBhcHBsaWNhdGlvbnMg Y291bGQgYXVnbWVudC1pbiB0aGVpciBvd24gY29uZmlndXJhdGlvbiBub2RlcyBhbmQsIG9mIGNv dXJzZSwgYSBmdXR1cmUgV0cgZWZmb3J0IGNvdWxkIGFkZCB0aGVtLiAgVGhvdWdodHMgb24gdGhp cyBhcHByb2FjaD8KCksuCgoKCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X18KRnJvbTogbmV0Y29uZiA8bmV0Y29uZi1ib3VuY2VzQGlldGYub3JnPiBvbiBiZWhhbGYgb2Yg S2VudCBXYXRzZW4gPGtlbnQraWV0ZkB3YXRzZW4ubmV0PgpTZW50OiAwMyBKdW5lIDIwMjEgMDM6 MjUKVG86IG5ldGNvbmZAaWV0Zi5vcmcKU3ViamVjdDogUmU6IFtuZXRjb25mXSBDcmVhdGUgSUFO QS1kZWZpbmVkIG1vZHVsZXM/CgpJ4oCZdmUgYmVlbiBsb29raW5nIGF0IHRoaXMgY2hhbmdlIChz aW5jZSBubyBvbmUgdm9sdW50ZWVyZWQgdG8gaGVscCA6c2lnaDopIGFuZCBub3RpY2VkIHRoYXQg R2FyeSBoYWQgZmVhdHVyZSBzdGF0ZW1lbnRzIGZvciBvcHRpb25hbC10by1pbXBsZW1lbnQgYWxn b3JpdGhtcy4KCldoZW4gd2Ugd2VyZSBkb2luZyB0aGUgbm93LWFiYW5kb25lZCDigJxhbGdvcml0 aG1z4oCdIHdvcmsgaW4gY3J5cHRvLXR5cGVzLCB3ZSBkZWZpbmVkIGEgdG9wLWxldmVsIOKAnGNv bmZpZyBmYWxzZeKAnSB0cmVlIGZvciBhIGxpc3Qgb2Ygc3VwcG9ydGVkIGFsZ29yaXRobXMuICBG b3IgaW5zdGFuY2UsIHNlZSAic3VwcG9ydGVkLXN5bW1ldHJpYy1hbGdvcml0aG1z4oCdIGhlcmU6 ICBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9odG1sL2RyYWZ0LWlldGYtbmV0Y29u Zi1jcnlwdG8tdHlwZXMtMTQjYXBwZW5kaXgtQS4xLiAgVGhpcyBzZWVtcyBiZXR0ZXIgdG8gbWUs IGFncmVlZD8gIFdvdWxkIGFuIFJQQyBiZSBiZXR0ZXIgdGhhbiBhICJjb25maWcgZmFsc2UiIHRy ZWU/CgpEb2VzIGl0IG1hdHRlciBpZiB0aGUgYWxnb3JpdGhtcyBhcmUgZGVmaW5lZCB1c2luZyBh biBlbnVtZXJhdGlvbiBvciBhcyBhbiBpZGVudGl0eT8KCkdhcnkgZGVmaW5lZCB0aGVtIGFzIGlk ZW50aXRpZXMsIGJ1dCB0aGUgYWJhbmRvbmVkIGNyeXB0by10eXBlcyB3b3JrIGhhZCB0aGVtIGFz IGVudW1lcmF0aW9ucy4gIEluIGVpdGhlciBjYXNlLCB0aGUgSUFOQS1tYWludGFpbmVkIG1vZHVs ZSBuZWVkcyB0byBiZSAqaW1wbGVtZW50ZWQqIC0gdGhvdWdodHM/CgpOb3RlOiBpZiDigJxpZGVu dGl0eeKAnSBzdGF0ZW1lbnRzIGFyZSB1c2VkLCBhbmQgdGhlIG1vZHVsZSBpcyAqaW1wbGVtZW50 ZWQqIChmb3IgdGhlIHRvcC1sZXZlbCDigJxzdXBwb3J0ZWQgYWxnb3JpdGhtc+KAnSBkYXRhIHRy ZWUpIGRvZXMgTk9UIG1lYW4gdGhlIHNlcnZlciBzdXBwb3J0cyBhbGwgdGhlIGFsZ29yaXRobXMs IHdoaWNoIGlzIHRydWUgb25seSBpZiB0aGUgYWxnb3JpdGhtIGFwcGVhcnMgaW4gdGhlIOKAnHN1 cHBvcnRlZCBhbGdvcml0aG1z4oCdIGxpc3QgLSBzdGlsbCBtYWtlcyBzZW5zZSwgb3IgaXMgdGhp cyBhIGNvbXBlbGxpbmcgcmVhc29uIHRvIE5PVCB1c2UgaWRlbnRpdGllcz8KClBTOiBwdXR0aW5n IGVhY2ggYWxnb3JpdGhtIGludG8gaXRzIG93biBtb2R1bGUgdGhhdCBjYW4gYmUgZGlzdGluY3Rs eSDigJxpbXBsZW1lbnRlZCogaXMgYSBub24tc3RhcnRlci4KCksuCgoK From nobody Thu Jun 10 14:36:58 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E04C33A1AEE for ; Thu, 10 Jun 2021 14:36:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.596 X-Spam-Level: X-Spam-Status: No, score=-9.596 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=b8/sZA4r; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=F9a+fO/e Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s8WxEU4GIPK2 for ; Thu, 10 Jun 2021 14:36:50 -0700 (PDT) Received: from alln-iport-7.cisco.com (alln-iport-7.cisco.com [173.37.142.94]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C3E433A1AED for ; Thu, 10 Jun 2021 14:36:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=689; q=dns/txt; s=iport; t=1623361010; x=1624570610; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=2biwOQs58S+w17GD6KJv6j8ea2VzK3PXocKKbiMeF7w=; b=b8/sZA4r2lHqXgv2a4mTXXlZEi2Tukh9ekfIPDW/sT9kVazttda55dYf IyYzivIllX312TxLXJGqkYEGCV9H+II0hYPu5I/b0We5+la6Kcfy6XDbR 8P5GGsY+OWV49nJWq9O0T3FtcuqJffls6LZzVkB6CEhcKLka6XiCG2Rfz 4=; X-IPAS-Result: =?us-ascii?q?A0AZAgAmhcJgl4gNJK1agQmBV4FTUX5aNzELiAUDhTmjE?= =?us-ascii?q?YEugSUDVAsBAQENAQE3CAIEAQGBGIM4AoJoAiU0CQ4CBAEBAQEDAgMBAQEBB?= =?us-ascii?q?QEBBQEBAQIBBgQUAQEBAQEBAQFohWgNhkYCAQMSLgEBOA8CAQhGMiUCBAESC?= =?us-ascii?q?BqCTwGCVQMvAQ6aYwGBOgKKH3iBNIEBggcBAQYEBIFIQYMOGIIxAwaBOoJ7i?= =?us-ascii?q?VCBHyccgUlEgRVDgmA+gmIBAQIBgV0Cg0uCLoQcUQKCdLttCoMcig+UABKDT?= =?us-ascii?q?KIYlVKMF5gZAgICAgQFAg4BAQaBVDmBW3AVO4JpUBcCDo44g1eFFIVKcwI2A?= =?us-ascii?q?gYKAQEDCXyHXAGBEAEB?= IronPort-PHdr: A9a23:GzfhyhMXwDxpQQUqoXMl6ncbWUAX0o4cdiYK44Y8hrQIdKm/rNzuP 03asPNqilKBHYDW8OlNhOeetaf8EXcB7pCMvDFnEtRMWhYJhN9Qk1kmB8iIWlLyMOXnaWo8E dgRHFNg9muwZE5SHsu2blbOo3q0uDgVHBi3NQd8KunvXIDIiMHi3OGp8JqVaAJN11KA IronPort-HdrOrdr: A9a23:4VbzhKBsb+AP2xvlHegpsceALOsnbusQ8zAXPh9KKCC9I/b3qy nxppsmPEfP+UossQIb6K+90c67MDLhHP9OkMcs1NKZPDUO11HYVL2KgbGSpgEIXheOi9K1tp 0QM5SWaueAdmSS5PySiGLTfrpQo6jkzEnrv5al854Hd3AMV0gU1XYBNu/tKDwReOApP+tcKL Osou584xawc3Ueacq2QlMfWfLYmtHNnJX6JTYbGh8O8mC1/HCVwY+/NyLd8gYVUjtJz7tn23 PCiRbF6qKqtOz+4gPA1lXU849dlLLau5l+7Y23+40owwfX+0GVjbdaKvu/VfcO0biSAWMR4Z 3xStEbTpxOAj3qDzqISFDWqnfdOX4Vmg7fIBmj8CHeSQiTfkNnNyKH7rgpLycxonBQzO1Uwe ZF2XmUuIFQCg6FlCPh58LQXxUvjUasp2E++NRjxUC3fLFuIIO5l7Zvt3+90a1wax7S+cQiCq 1jHcvc7PFZfReTaG3YpHBmxJipUm4oFhmLT0AesojNugIm0ExR3g8d3ogSj30A/JUyR91N4P nFKL1hkPVLQtUNZaxwCe8dSY+8C3DLQxjLLGWOSG6XWZ3v+0i94qIfxY9Fq91CVKZ4uafaqa 6xJm+w71RCCX4GIff+qKGj3Cq9M1mAYQ== X-IronPort-Anti-Spam-Filtered: true X-IronPort-AV: E=Sophos;i="5.83,264,1616457600"; d="scan'208";a="707513206" Received: from alln-core-3.cisco.com ([173.36.13.136]) by alln-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 10 Jun 2021 21:36:49 +0000 Received: from mail.cisco.com (xbe-rcd-007.cisco.com [173.37.102.22]) by alln-core-3.cisco.com (8.15.2/8.15.2) with ESMTPS id 15ALanta024968 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 10 Jun 2021 21:36:49 GMT Received: from xhs-rtp-001.cisco.com (64.101.210.228) by xbe-rcd-007.cisco.com (173.37.102.22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.2.792.15; Thu, 10 Jun 2021 16:36:49 -0500 Received: from xhs-rtp-002.cisco.com (64.101.210.229) by xhs-rtp-001.cisco.com (64.101.210.228) with Microsoft SMTP Server (TLS) id 15.0.1497.18; Thu, 10 Jun 2021 17:36:48 -0400 Received: from NAM10-BN7-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server (TLS) id 15.0.1497.18 via Frontend Transport; Thu, 10 Jun 2021 17:36:48 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=b4n0+n1V0abyAJkS3OZbW+CrkGLq50uuvFD6MyvDl/f6/cMueAcYWuwBHk2ZX2VijmPMrSh3ccSnaTqL47XZkwS/3so4h72Lh5jfyHkT45X4Lst5qq588CreI1wBK1gnr5VladLXihwxHeKwHYowcsMTaZO1AAM607ziDK+NRbR9hMLELk0DQWyRk7jIs34/jmA1L9zYweeBmtV78CGC0vwRm5QGqHYBWdmlHRxWIDW1difAZPQY6A4MTxR/QCRJ71qTnCds0FbjJ6Qjqd98FwXRczDBY39UqiSLSPLpivdWh8Cbz+cpzfZXyJc81se3YR3Hzzp93g0w4NgRV/qKTg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ybtcolzk3vjrA2cb+e5TpXp/bm1oYKT5k2pdR2iX9Rk=; b=bcX21pqL11/9eMJOXDn+uqqdmUbyrpYidukrYGEDLMIg4sV0RJemZbA3ry/aWbd3aG6gDfXSNbaIC5paHRlHJHx7Vm7Air7dWOdElBG1JfnFueUO0dntv0VL1sf1HKnTF/+TW8PN/Gc6xJpQCI9WXAMvKH1eq5nbzDGXoMkwsrh3GKWVtR9vuF+QyOcqtlGvHAQSS0iITwufv9uMoxoJaqgR3uVw7RFK1/tdi/gIj+YAmoq4urxUN0G0np08UgboLajIuqNAwhy/dFNsA8DmTG0cHBnYdZKJh/8bGACm5DvvPC2XzA+JYMfQJG+uTx49apJ6zRXzerM7K+Qn+kBtEw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ybtcolzk3vjrA2cb+e5TpXp/bm1oYKT5k2pdR2iX9Rk=; b=F9a+fO/eLdMaeDLc9lBcARKQOv8dbomConsaliOlcfhol+0UK4zlAi+MzmqZm1aLysfpwrByeczt8+VfWemlkFs/Mq8UvpWX7BBR+bIjnXwu4lGEg/5Q6+ZedidFar4I9+Bbof2LRJTi48+XfLnt34Tjf/cfC4UT+NmlrR+F/KQ= Received: from MWHPR11MB2032.namprd11.prod.outlook.com (2603:10b6:300:2b::13) by MWHPR11MB1952.namprd11.prod.outlook.com (2603:10b6:300:111::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4219.21; Thu, 10 Jun 2021 21:36:47 +0000 Received: from MWHPR11MB2032.namprd11.prod.outlook.com ([fe80::852d:44c4:b446:2dad]) by MWHPR11MB2032.namprd11.prod.outlook.com ([fe80::852d:44c4:b446:2dad%8]) with mapi id 15.20.4219.023; Thu, 10 Jun 2021 21:36:46 +0000 From: "Per Andersson (perander)" To: Kent Watsen , "netconf@ietf.org" Thread-Topic: [netconf] Create IANA-defined modules? Thread-Index: AQHXUplk3fGBKyh7AE2HQh20ygChC6sBmjaAgAwy27M= Date: Thu, 10 Jun 2021 21:36:46 +0000 Message-ID: References: <01000179aa118e62-0d8dd2b2-f001-4ff3-9d10-4b4e15098055-000000@email.amazonses.com> <5F969C92-1A1F-4983-878F-9C222C3DEC05@cisco.com>, <01000179cfb08608-c708dd5b-c015-4608-986f-52d5d013153b-000000@email.amazonses.com> In-Reply-To: <01000179cfb08608-c708dd5b-c015-4608-986f-52d5d013153b-000000@email.amazonses.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: watsen.net; dkim=none (message not signed) header.d=none;watsen.net; dmarc=none action=none header.from=cisco.com; x-originating-ip: [64.103.40.29] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: e68cea25-5587-4967-e9ef-08d92c57d94a x-ms-traffictypediagnostic: MWHPR11MB1952: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7691; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:MWHPR11MB2032.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(136003)(396003)(376002)(39860400002)(366004)(346002)(8936002)(83380400001)(33656002)(52536014)(66446008)(66476007)(91956017)(76116006)(66946007)(7696005)(26005)(6506007)(2906002)(64756008)(478600001)(316002)(110136005)(66556008)(71200400001)(9686003)(38100700002)(186003)(55016002)(5660300002)(122000001)(966005)(8676002)(86362001)(4744005); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?Windows-1252?Q?zAlA94VgG0VFbeioFD0eON2w6SdYFM7AYdU+3hb6w9qiDDw1/Uw3Su6V?= =?Windows-1252?Q?SR2M9vhTwbjnWyqosGckS5/pCV7hABVehUVH4PnYVVQPeeumQ+wzyvmZ?= =?Windows-1252?Q?KTTKU+EKsRn7x4Idxfej/ZW1nJkyylqoNNWw1FnINIauyFYKUL0qKKhz?= =?Windows-1252?Q?QHv251JuBH4nX3pONm+aYBhmlEhEGsD4mSnS1QnkyVZFjpcVnvwjLoU0?= =?Windows-1252?Q?3VynInRJJAZuXcguOZS8jPEkqYa9aK5/ttql0wDBt1W16tM3UCbXcfH8?= =?Windows-1252?Q?GOduQVqZZKsdtlq8o1ga5wq0ywe94GpNMbq2MTKcc4gv4us2zWu3nyRz?= =?Windows-1252?Q?pYzzdm052ePxlFJX0XVV65f9HGHtBS/TYvewZjhKZZcJly+mCuTBXBjm?= =?Windows-1252?Q?iFctM+EIgh6WXY47fQl+mojhpEFyqPFsym3KYOVmX708snpRiYVnJ3Oe?= =?Windows-1252?Q?/kc6oDhaYX0WE5OTowbIWoz1OSnOt/FdIGW+lWFX6sCZ2wTZOhuKM3An?= =?Windows-1252?Q?aVLcAcstVbwJQO0NHXDSURrM/iBxfoyOBTQpcW49TbxFH6i+z+ed3wQD?= =?Windows-1252?Q?cnDeuvUuaQAup7QS0SVEgztReZKTNmAji6bUdPB9aYPTlNecqgBRZnKb?= =?Windows-1252?Q?3kwl3DYd34Lve6eH6Jqd62qne1xQMYegEwBdOiBQkICr5x0ybYgNbqid?= =?Windows-1252?Q?SYW9+pCvwpNe6WjGFHIMNO3W8C1yNe3tATur6DGvZg6jOZREMgggGn+4?= =?Windows-1252?Q?jn8w18O5qaAA04AeD61As3JqHyCI2mCx7QSd+appV9Uw37Pes63ZrIcA?= =?Windows-1252?Q?LR2zN9XBNLCkybMHd2Nf6np7LzijQi1piwUUk5Mt/mb2VTOJipFE8qlJ?= =?Windows-1252?Q?TBd+fAevBGD3/D6xfWW7dJOXZ9JBECcl1BUMRMxhCmYXLCdvp89qLlwF?= =?Windows-1252?Q?bTU2arwBrNdhzzVTq+r34xJK1eUvoP4vytdEMiKCKaGe1MU5yXlfvJwJ?= =?Windows-1252?Q?qhS7cfGy/ssz2y1p9tr1WJ2oBwHZ19uIt2Ajq3W2Mt/azRS9wIt+RHlf?= =?Windows-1252?Q?tZ+XdaRPS22VjTazrqYKdWUzcQCBLa9XhOpEBsyq4uL6ydhKmeous9WL?= =?Windows-1252?Q?B9yfpjGdgd+qSks5Ax9oojChrojL3XIX0whODqsEzahAVha67e076Dmn?= =?Windows-1252?Q?1zLjJS1QaqCQKBZHM6iDfL87lNSOx28vH8mc7Re5De4p+G2pdD129YS7?= =?Windows-1252?Q?x7xhmU/hEtMdYskQMYWG1bxiQotOnnv3LoT+tKhpHIX/7/34EA/v/6sk?= =?Windows-1252?Q?HeA5zhzE4o9e0EvELLDQEMGLc9nzPcvBmwemkbVcUUUx/Pvnx8oWFF8n?= =?Windows-1252?Q?QY1p2nay7QwR9azsvApWZ78XeNvUHcTCUgY=3D?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MWHPR11MB2032.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: e68cea25-5587-4967-e9ef-08d92c57d94a X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Jun 2021 21:36:46.5749 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: X3VVzYghTkdJbYbANekIypTpalwCxIy2hGljYHXEU6QyQn1rOVKdRweCu8p+Aaron66UdzIEhYGtswB1Bw6xLQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR11MB1952 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.22, xbe-rcd-007.cisco.com X-Outbound-Node: alln-core-3.cisco.com Archived-At: Subject: Re: [netconf] Create IANA-defined modules? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Jun 2021 21:36:56 -0000 Kent Watsen on Thursday, June 3, 2021 04:25:=0A= > When we were doing the now-abandoned =93algorithms=94 work in crypto-type= s, we defined a top-level =93config false=94 tree for a list of supported a= lgorithms. For instance, see "supported-symmetric-algorithms=94 here: htt= ps://datatracker.ietf.org/doc/html/draft-ietf-netconf-crypto-types-14#appen= dix-A.1. This seems better to me, agreed? Would an RPC be better than a "= config false" tree?=0A= =0A= Having it as a "config false" tree would make it possible to use=0A= e.g. must or when expressions towards that tree if one would=0A= want. Which is better IMHO.=0A= =0A= =0A= --=0A= Per= From nobody Mon Jun 14 07:28:00 2021 Return-Path: <0100017a0aebfbf3-9e9c22e8-da12-4364-a572-8ce7fd43bf0f-000000@amazonses.watsen.net> X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3A5133A25F7 for ; Mon, 14 Jun 2021 07:27:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bBJHnDgz5i3c for ; Mon, 14 Jun 2021 07:27:57 -0700 (PDT) Received: from a8-88.smtp-out.amazonses.com (a8-88.smtp-out.amazonses.com [54.240.8.88]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DC9FC3A25FD for ; Mon, 14 Jun 2021 07:27:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1623680875; h=Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc:Content-Transfer-Encoding:Message-Id:References:To:Feedback-ID; bh=T6mmLlU7d30Frku5l+FehyvICFNOwcw1u8w1qq/iQNI=; b=fQFWVDYjlVaHlFR6GgnPlOc8Nduod9S9B9ajbeJJaLMwzYHuSbfVMhJaMPtKInA2 PPHD1RpffY30zASUXnd0zauEZWsd7O47RXXtzKW5uy96CQ+OONGLrHlyLYPEEmjMox8 SH3uVk+8IcRXPWhNqsRS5Rb4HXMafQlDipU3u22w= Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.100.0.2.22\)) From: Kent Watsen In-Reply-To: Date: Mon, 14 Jun 2021 14:27:55 +0000 Cc: "netconf@ietf.org" , Henk Birkholz , "garywu@cisco.com" Content-Transfer-Encoding: quoted-printable Message-ID: <0100017a0aebfbf3-9e9c22e8-da12-4364-a572-8ce7fd43bf0f-000000@email.amazonses.com> References: <0100017980c49236-7975b99d-b591-4da2-a118-f6598517c4e5-000000@email.amazonses.com> <010001798c0d947e-4d2d14f5-9f0e-450d-ac99-e18c260f0c2b-000000@email.amazonses.com> <01000179a0aa5d37-4810234e-8db2-434d-b8fa-780c1648955a-000000@email.amazonses.com> <01000179a5bdc371-b665451f-61d4-4364-9d55-e9369f3adc8e-000000@email.amazonses.com> To: tom petch X-Mailer: Apple Mail (2.3654.100.0.2.22) Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES X-SES-Outgoing: 2021.06.14-54.240.8.88 Archived-At: Subject: Re: [netconf] More complications X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Jun 2021 14:27:58 -0000 [CC-ing Henk, to whom a question is directed to below] Hi Tom, > Top posting a new and different issue. Thanks for updating the subject line. > server case psk references ServerKeyExchange and psk-identity-hint = neither of which exist in TLS1.3. The client sends an extension = PreSharedKeyExtension which contains a list of identities from which the = server selects one as selected-identity for which the identifier is = uint16 indexing into the client's list. RFC8446 s.4.2.11. >=20 > The client description also needs amending. >=20 > TLS1.2 was extended to use tickets in this area to aid session = resumption; these have now gone and been replaced by this extension. I = would not suggest adding support for tickets. >=20 > As I may have said before, TLS 1.3 is different. Henk, could you help with these edits? Support for PSK and raw public = key were added to draft-ietf-netconf-tls-client-server per your request = and, if memory serves me, didn=E2=80=99t you help me with the YANG = update too? I suppose what is needed is a either a =E2=80=9Cchoice=E2=80= =9D statement (with cases for 1.2 and 1.3) *or* sibling-container = statements (in case it=E2=80=99s necessary both are configured in case, = e.g., the client sends one or the other)... > Tom Petch=20 Kent From nobody Mon Jun 14 09:22:25 2021 Return-Path: <0100017a0b54a42f-d3785582-968d-4f2f-bf41-1ff336bff051-000000@amazonses.watsen.net> X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42E4F3A29BA for ; Mon, 14 Jun 2021 09:22:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.894 X-Spam-Level: X-Spam-Status: No, score=-1.894 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yvDGxXsIE17f for ; Mon, 14 Jun 2021 09:22:17 -0700 (PDT) Received: from a48-90.smtp-out.amazonses.com (a48-90.smtp-out.amazonses.com [54.240.48.90]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 415533A29B5 for ; Mon, 14 Jun 2021 09:22:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1623687734; h=From:Message-Id:Content-Type:Mime-Version:Subject:Date:In-Reply-To:Cc:To:References:Feedback-ID; bh=ovwxxwdqTv5yKWf/97uzJgnSmAWAI2fQ75gDAo24BmY=; b=S5pHiPafPP9WV8mcgmYCG9F7JIU3NqClW/4FmUn+N/kaUR7hka+wP0WwrLmOElp5 KfyaTAKal45qLyRuzCDUibnYfCuiMZXqCc9zAJXRvRac8aALR2aDdasBLuV0d1fUqo+ y3KQ4zNAlQkHJIS1MG2saISs+slXvv9y7Y17Lb5M= From: Kent Watsen Message-ID: <0100017a0b54a42f-d3785582-968d-4f2f-bf41-1ff336bff051-000000@email.amazonses.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_DD345D3C-EFE6-41C3-9A1B-7AE4FB6AA740" Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.100.0.2.22\)) Date: Mon, 14 Jun 2021 16:22:14 +0000 In-Reply-To: Cc: "netconf@ietf.org" To: Qin Wu , tom petch , "Per Andersson (perander)" References: <01000179aa118e62-0d8dd2b2-f001-4ff3-9d10-4b4e15098055-000000@email.amazonses.com> <5F969C92-1A1F-4983-878F-9C222C3DEC05@cisco.com> <01000179cfb08608-c708dd5b-c015-4608-986f-52d5d013153b-000000@email.amazonses.com> X-Mailer: Apple Mail (2.3654.100.0.2.22) Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES X-SES-Outgoing: 2021.06.14-54.240.48.90 Archived-At: Subject: Re: [netconf] Create IANA-defined modules? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Jun 2021 16:22:22 -0000 --Apple-Mail=_DD345D3C-EFE6-41C3-9A1B-7AE4FB6AA740 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Thank you Qin, Tom, and Per for the responses to my last post=E2=80=A6this= message addresses them all. Since the discussion has been mostly about *how* to create the = IANA-defined module (not *if* we should, e.g., dropping the work for = some future effort to pickup), I take it that folks believe having the = ability for configure supported-algorithms is needed now. As no one = offered to help (:sigh:, and people wonder why this work takes so long), = I wrote the attached script that creates the attached module directly = from the data obtained from the IANA-maintained "TLS Cipher Suites" = sub-registry of the "Transport Layer Security (TLS) Parameters=E2=80=9D = registry here: = https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml. = The resulting module is also attached. =20 Tom, you will be happy to know that the all the identity names begin = with =E2=80=9Ctls=E2=80=9D :) Also, there are no =E2=80=9Cfeature=E2=80= =9D statements, since there is nothing in the source registry that can = be used to generate =E2=80=9Cif-feature=E2=80=9D statements. Out of the = 347 algorithms listed in the registry, 310 algorithms are marked = =E2=80=9Cstatus deprecated=E2=80=9D (driven by the =E2=80=9Crecommended=E2= =80=9D column having value =E2=80=99N=E2=80=99), and 7 algorithms are = marked =E2=80=9Cstatus obsolete=E2=80=9D (driven by the = "SC-tls-des-idea-ciphers-to-historic=E2=80=9D reference). Regarding if to use a =E2=80=9Cconfig false=E2=80=9D tree or an RPC, = Per makes an interesting point about =E2=80=9Cmust" and =E2=80=9Cwhen=E2=80= =9D expressions, though I do wonder how that would play out in practice, = as said expressions would (presumably) be defined under =E2=80=9Cconfig = true=E2=80=9D nodes and hence couldn't reference the =E2=80=9Cconfig = false=E2=80=9D values? Maybe Per could say some more about the use-case = in mind. No one responded regarding if we should use identities or enumerations. = The attached sample module uses identities, but it would be an easy = thing to change the script to generated enumerations - thoughts? Again: if =E2=80=9Cidentity=E2=80=9D statements are used, and the module = is *implemented*, it would NOT mean the server supports all (or even = any) of the algorithms. This would only be known if the algorithm = appears in the =E2=80=9Csupported algorithms=E2=80=9D "config false=E2=80=9D= list. Does anyone feel this is a misuse of YANG? IMO, YANG identities = needing to be implemented is not very useful in practice, and so I = don=E2=80=99t view that as a negative in the slightest. K. --Apple-Mail=_DD345D3C-EFE6-41C3-9A1B-7AE4FB6AA740 Content-Type: multipart/mixed; boundary="Apple-Mail=_28657206-5472-4BAB-9A55-18A2C40E5213" --Apple-Mail=_28657206-5472-4BAB-9A55-18A2C40E5213 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Thank you Qin, Tom, = and Per for the responses to my last post=E2=80=A6this message addresses = them all.

Since the = discussion has been mostly about *how* to create the IANA-defined module = (not *if* we should, e.g., dropping the work for some future effort to = pickup), I take it that folks believe having the ability for configure = supported-algorithms is needed now.  As no one offered to help = (:sigh:, and people wonder why this work takes so long), I wrote the = attached script that creates the attached module directly from the data = obtained from the IANA-maintained "TLS Cipher Suites" sub-registry of = the "Transport Layer Security (TLS) = Parameters=E2=80=9D registry here: https://www.iana.org/assignments/tls-parameters/tls-paramet= ers.xhtml.  The resulting module is also attached.  

Tom, you will be happy = to know that the all the identity names begin with =E2=80=9Ctls=E2=80=9D =  :)    Also, there are no =E2=80=9Cfeature=E2=80=9D = statements, since there is nothing in the source registry that can be = used to generate =E2=80=9Cif-feature=E2=80=9D statements.  Out of = the 347 algorithms listed in the registry,  310 = algorithms are marked =E2=80=9Cstatus deprecated=E2=80=9D (driven by = the =E2=80=9Crecommended=E2=80=9D column having = value =E2=80=99N=E2=80=99), and 7 algorithms are marked = =E2=80=9Cstatus obsolete=E2=80=9D (driven by the = "SC-tls-des-idea-ciphers-to-historic=E2=80=9D reference).

Regarding if to use = a  =E2=80=9Cconfig false=E2=80=9D tree or an RPC, = Per makes an interesting point about =E2=80=9Cmust" and =E2=80=9Cwhen=E2=80=9D expressions= , though I do wonder how that would play out in practice, as said = expressions would (presumably) be defined under =E2=80=9Cconfig true=E2=80= =9D nodes and hence couldn't reference the =E2=80=9Cconfig false=E2=80= =9D values?  Maybe Per could say some more about the use-case in = mind.

No one responded regarding if we should use identities or = enumerations.  The attached sample module uses identities, but it would = be an easy thing to change the script to generated enumerations = - thoughts?

Again: if =E2=80=9Cidentity=E2=80=9D statements = are used, and the module is *implemented*, it would NOT mean the server = supports all (or even any) of the algorithms. This would only be known = if the algorithm appears in the =E2=80=9Csupported algorithms=E2=80=9D = "config false=E2=80=9D list.  Does anyone feel this is a misuse of = YANG?  IMO, YANG identities needing to be implemented is not very = useful in practice, and so I don=E2=80=99t view that as a negative in = the slightest.

K.


= --Apple-Mail=_28657206-5472-4BAB-9A55-18A2C40E5213 Content-Disposition: attachment; filename=gen-identities.sh Content-Type: application/octet-stream; x-unix-mode=0755; name="gen-identities.sh" Content-Transfer-Encoding: 7bit BASE="cipher-suite-base" SKIP=0 LINES="0x00,0x00 TLS_NULL_WITH_NULL_NULL Y N [RFC5246] 0x00,0x01 TLS_RSA_WITH_NULL_MD5 Y N [RFC5246] 0x00,0x02 TLS_RSA_WITH_NULL_SHA Y N [RFC5246] 0x00,0x03 TLS_RSA_EXPORT_WITH_RC4_40_MD5 N N [RFC4346][RFC6347] 0x00,0x04 TLS_RSA_WITH_RC4_128_MD5 N N [RFC5246][RFC6347] 0x00,0x05 TLS_RSA_WITH_RC4_128_SHA N N [RFC5246][RFC6347] 0x00,0x06 TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5 Y N [RFC4346] 0x00,0x07 TLS_RSA_WITH_IDEA_CBC_SHA Y N [RFC5469][SC-tls-des-idea-ciphers-to-historic] 0x00,0x08 TLS_RSA_EXPORT_WITH_DES40_CBC_SHA Y N [RFC4346] 0x00,0x09 TLS_RSA_WITH_DES_CBC_SHA Y N [RFC5469][SC-tls-des-idea-ciphers-to-historic] 0x00,0x0A TLS_RSA_WITH_3DES_EDE_CBC_SHA Y N [RFC5246] 0x00,0x0B TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA Y N [RFC4346] 0x00,0x0C TLS_DH_DSS_WITH_DES_CBC_SHA Y N [RFC5469][SC-tls-des-idea-ciphers-to-historic] 0x00,0x0D TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA Y N [RFC5246] 0x00,0x0E TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA Y N [RFC4346] 0x00,0x0F TLS_DH_RSA_WITH_DES_CBC_SHA Y N [RFC5469][SC-tls-des-idea-ciphers-to-historic] 0x00,0x10 TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA Y N [RFC5246] 0x00,0x11 TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA Y N [RFC4346] 0x00,0x12 TLS_DHE_DSS_WITH_DES_CBC_SHA Y N [RFC5469][SC-tls-des-idea-ciphers-to-historic] 0x00,0x13 TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA Y N [RFC5246] 0x00,0x14 TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA Y N [RFC4346] 0x00,0x15 TLS_DHE_RSA_WITH_DES_CBC_SHA Y N [RFC5469][SC-tls-des-idea-ciphers-to-historic] 0x00,0x16 TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA Y N [RFC5246] 0x00,0x17 TLS_DH_anon_EXPORT_WITH_RC4_40_MD5 N N [RFC4346][RFC6347] 0x00,0x18 TLS_DH_anon_WITH_RC4_128_MD5 N N [RFC5246][RFC6347] 0x00,0x19 TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA Y N [RFC4346] 0x00,0x1A TLS_DH_anon_WITH_DES_CBC_SHA Y N [RFC5469][SC-tls-des-idea-ciphers-to-historic] 0x00,0x1B TLS_DH_anon_WITH_3DES_EDE_CBC_SHA Y N [RFC5246] 0x00,0x1C-1D Reserved to avoid conflicts with SSLv3 [RFC5246] 0x00,0x1E TLS_KRB5_WITH_DES_CBC_SHA Y N [RFC2712] 0x00,0x1F TLS_KRB5_WITH_3DES_EDE_CBC_SHA Y N [RFC2712] 0x00,0x20 TLS_KRB5_WITH_RC4_128_SHA N N [RFC2712][RFC6347] 0x00,0x21 TLS_KRB5_WITH_IDEA_CBC_SHA Y N [RFC2712] 0x00,0x22 TLS_KRB5_WITH_DES_CBC_MD5 Y N [RFC2712] 0x00,0x23 TLS_KRB5_WITH_3DES_EDE_CBC_MD5 Y N [RFC2712] 0x00,0x24 TLS_KRB5_WITH_RC4_128_MD5 N N [RFC2712][RFC6347] 0x00,0x25 TLS_KRB5_WITH_IDEA_CBC_MD5 Y N [RFC2712] 0x00,0x26 TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA Y N [RFC2712] 0x00,0x27 TLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA Y N [RFC2712] 0x00,0x28 TLS_KRB5_EXPORT_WITH_RC4_40_SHA N N [RFC2712][RFC6347] 0x00,0x29 TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5 Y N [RFC2712] 0x00,0x2A TLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5 Y N [RFC2712] 0x00,0x2B TLS_KRB5_EXPORT_WITH_RC4_40_MD5 N N [RFC2712][RFC6347] 0x00,0x2C TLS_PSK_WITH_NULL_SHA Y N [RFC4785] 0x00,0x2D TLS_DHE_PSK_WITH_NULL_SHA Y N [RFC4785] 0x00,0x2E TLS_RSA_PSK_WITH_NULL_SHA Y N [RFC4785] 0x00,0x2F TLS_RSA_WITH_AES_128_CBC_SHA Y N [RFC5246] 0x00,0x30 TLS_DH_DSS_WITH_AES_128_CBC_SHA Y N [RFC5246] 0x00,0x31 TLS_DH_RSA_WITH_AES_128_CBC_SHA Y N [RFC5246] 0x00,0x32 TLS_DHE_DSS_WITH_AES_128_CBC_SHA Y N [RFC5246] 0x00,0x33 TLS_DHE_RSA_WITH_AES_128_CBC_SHA Y N [RFC5246] 0x00,0x34 TLS_DH_anon_WITH_AES_128_CBC_SHA Y N [RFC5246] 0x00,0x35 TLS_RSA_WITH_AES_256_CBC_SHA Y N [RFC5246] 0x00,0x36 TLS_DH_DSS_WITH_AES_256_CBC_SHA Y N [RFC5246] 0x00,0x37 TLS_DH_RSA_WITH_AES_256_CBC_SHA Y N [RFC5246] 0x00,0x38 TLS_DHE_DSS_WITH_AES_256_CBC_SHA Y N [RFC5246] 0x00,0x39 TLS_DHE_RSA_WITH_AES_256_CBC_SHA Y N [RFC5246] 0x00,0x3A TLS_DH_anon_WITH_AES_256_CBC_SHA Y N [RFC5246] 0x00,0x3B TLS_RSA_WITH_NULL_SHA256 Y N [RFC5246] 0x00,0x3C TLS_RSA_WITH_AES_128_CBC_SHA256 Y N [RFC5246] 0x00,0x3D TLS_RSA_WITH_AES_256_CBC_SHA256 Y N [RFC5246] 0x00,0x3E TLS_DH_DSS_WITH_AES_128_CBC_SHA256 Y N [RFC5246] 0x00,0x3F TLS_DH_RSA_WITH_AES_128_CBC_SHA256 Y N [RFC5246] 0x00,0x40 TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 Y N [RFC5246] 0x00,0x41 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA Y N [RFC5932] 0x00,0x42 TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA Y N [RFC5932] 0x00,0x43 TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA Y N [RFC5932] 0x00,0x44 TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA Y N [RFC5932] 0x00,0x45 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA Y N [RFC5932] 0x00,0x46 TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA Y N [RFC5932] 0x00,0x47-4F Reserved to avoid conflicts with deployed implementations [Pasi_Eronen] 0x00,0x50-58 Reserved to avoid conflicts [Pasi Eronen, , 2008-04-04. 2008-04-04] 0x00,0x59-5C Reserved to avoid conflicts with deployed implementations [Pasi_Eronen] 0x00,0x5D-5F Unassigned 0x00,0x60-66 Reserved to avoid conflicts with widely deployed implementations [Pasi_Eronen] 0x00,0x67 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 Y N [RFC5246] 0x00,0x68 TLS_DH_DSS_WITH_AES_256_CBC_SHA256 Y N [RFC5246] 0x00,0x69 TLS_DH_RSA_WITH_AES_256_CBC_SHA256 Y N [RFC5246] 0x00,0x6A TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 Y N [RFC5246] 0x00,0x6B TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 Y N [RFC5246] 0x00,0x6C TLS_DH_anon_WITH_AES_128_CBC_SHA256 Y N [RFC5246] 0x00,0x6D TLS_DH_anon_WITH_AES_256_CBC_SHA256 Y N [RFC5246] 0x00,0x6E-83 Unassigned 0x00,0x84 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA Y N [RFC5932] 0x00,0x85 TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA Y N [RFC5932] 0x00,0x86 TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA Y N [RFC5932] 0x00,0x87 TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA Y N [RFC5932] 0x00,0x88 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA Y N [RFC5932] 0x00,0x89 TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA Y N [RFC5932] 0x00,0x8A TLS_PSK_WITH_RC4_128_SHA N N [RFC4279][RFC6347] 0x00,0x8B TLS_PSK_WITH_3DES_EDE_CBC_SHA Y N [RFC4279] 0x00,0x8C TLS_PSK_WITH_AES_128_CBC_SHA Y N [RFC4279] 0x00,0x8D TLS_PSK_WITH_AES_256_CBC_SHA Y N [RFC4279] 0x00,0x8E TLS_DHE_PSK_WITH_RC4_128_SHA N N [RFC4279][RFC6347] 0x00,0x8F TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA Y N [RFC4279] 0x00,0x90 TLS_DHE_PSK_WITH_AES_128_CBC_SHA Y N [RFC4279] 0x00,0x91 TLS_DHE_PSK_WITH_AES_256_CBC_SHA Y N [RFC4279] 0x00,0x92 TLS_RSA_PSK_WITH_RC4_128_SHA N N [RFC4279][RFC6347] 0x00,0x93 TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA Y N [RFC4279] 0x00,0x94 TLS_RSA_PSK_WITH_AES_128_CBC_SHA Y N [RFC4279] 0x00,0x95 TLS_RSA_PSK_WITH_AES_256_CBC_SHA Y N [RFC4279] 0x00,0x96 TLS_RSA_WITH_SEED_CBC_SHA Y N [RFC4162] 0x00,0x97 TLS_DH_DSS_WITH_SEED_CBC_SHA Y N [RFC4162] 0x00,0x98 TLS_DH_RSA_WITH_SEED_CBC_SHA Y N [RFC4162] 0x00,0x99 TLS_DHE_DSS_WITH_SEED_CBC_SHA Y N [RFC4162] 0x00,0x9A TLS_DHE_RSA_WITH_SEED_CBC_SHA Y N [RFC4162] 0x00,0x9B TLS_DH_anon_WITH_SEED_CBC_SHA Y N [RFC4162] 0x00,0x9C TLS_RSA_WITH_AES_128_GCM_SHA256 Y N [RFC5288] 0x00,0x9D TLS_RSA_WITH_AES_256_GCM_SHA384 Y N [RFC5288] 0x00,0x9E TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 Y Y [RFC5288] 0x00,0x9F TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 Y Y [RFC5288] 0x00,0xA0 TLS_DH_RSA_WITH_AES_128_GCM_SHA256 Y N [RFC5288] 0x00,0xA1 TLS_DH_RSA_WITH_AES_256_GCM_SHA384 Y N [RFC5288] 0x00,0xA2 TLS_DHE_DSS_WITH_AES_128_GCM_SHA256 Y N [RFC5288] 0x00,0xA3 TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 Y N [RFC5288] 0x00,0xA4 TLS_DH_DSS_WITH_AES_128_GCM_SHA256 Y N [RFC5288] 0x00,0xA5 TLS_DH_DSS_WITH_AES_256_GCM_SHA384 Y N [RFC5288] 0x00,0xA6 TLS_DH_anon_WITH_AES_128_GCM_SHA256 Y N [RFC5288] 0x00,0xA7 TLS_DH_anon_WITH_AES_256_GCM_SHA384 Y N [RFC5288] 0x00,0xA8 TLS_PSK_WITH_AES_128_GCM_SHA256 Y N [RFC5487] 0x00,0xA9 TLS_PSK_WITH_AES_256_GCM_SHA384 Y N [RFC5487] 0x00,0xAA TLS_DHE_PSK_WITH_AES_128_GCM_SHA256 Y Y [RFC5487] 0x00,0xAB TLS_DHE_PSK_WITH_AES_256_GCM_SHA384 Y Y [RFC5487] 0x00,0xAC TLS_RSA_PSK_WITH_AES_128_GCM_SHA256 Y N [RFC5487] 0x00,0xAD TLS_RSA_PSK_WITH_AES_256_GCM_SHA384 Y N [RFC5487] 0x00,0xAE TLS_PSK_WITH_AES_128_CBC_SHA256 Y N [RFC5487] 0x00,0xAF TLS_PSK_WITH_AES_256_CBC_SHA384 Y N [RFC5487] 0x00,0xB0 TLS_PSK_WITH_NULL_SHA256 Y N [RFC5487] 0x00,0xB1 TLS_PSK_WITH_NULL_SHA384 Y N [RFC5487] 0x00,0xB2 TLS_DHE_PSK_WITH_AES_128_CBC_SHA256 Y N [RFC5487] 0x00,0xB3 TLS_DHE_PSK_WITH_AES_256_CBC_SHA384 Y N [RFC5487] 0x00,0xB4 TLS_DHE_PSK_WITH_NULL_SHA256 Y N [RFC5487] 0x00,0xB5 TLS_DHE_PSK_WITH_NULL_SHA384 Y N [RFC5487] 0x00,0xB6 TLS_RSA_PSK_WITH_AES_128_CBC_SHA256 Y N [RFC5487] 0x00,0xB7 TLS_RSA_PSK_WITH_AES_256_CBC_SHA384 Y N [RFC5487] 0x00,0xB8 TLS_RSA_PSK_WITH_NULL_SHA256 Y N [RFC5487] 0x00,0xB9 TLS_RSA_PSK_WITH_NULL_SHA384 Y N [RFC5487] 0x00,0xBA TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256 Y N [RFC5932] 0x00,0xBB TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256 Y N [RFC5932] 0x00,0xBC TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256 Y N [RFC5932] 0x00,0xBD TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256 Y N [RFC5932] 0x00,0xBE TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 Y N [RFC5932] 0x00,0xBF TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256 Y N [RFC5932] 0x00,0xC0 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256 Y N [RFC5932] 0x00,0xC1 TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256 Y N [RFC5932] 0x00,0xC2 TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256 Y N [RFC5932] 0x00,0xC3 TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256 Y N [RFC5932] 0x00,0xC4 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256 Y N [RFC5932] 0x00,0xC5 TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256 Y N [RFC5932] 0x00,0xC6 TLS_SM4_GCM_SM3 N N [RFC8998] 0x00,0xC7 TLS_SM4_CCM_SM3 N N [RFC8998] 0x00,0xC8-FE Unassigned 0x00,0xFF TLS_EMPTY_RENEGOTIATION_INFO_SCSV Y N [RFC5746] 0x01-09,* Unassigned 0x0A,0x00-09 Unassigned 0x0A,0x0A Reserved Y N [RFC8701] 0x0A,0x0B-FF Unassigned 0x0B-12,* Unassigned 0x13,0x00 Unassigned 0x13,0x01 TLS_AES_128_GCM_SHA256 Y Y [RFC8446] 0x13,0x02 TLS_AES_256_GCM_SHA384 Y Y [RFC8446] 0x13,0x03 TLS_CHACHA20_POLY1305_SHA256 Y Y [RFC8446] 0x13,0x04 TLS_AES_128_CCM_SHA256 Y Y [RFC8446] 0x13,0x05 TLS_AES_128_CCM_8_SHA256 Y N [RFC8446][IESG Action 2018-08-16] 0x13,0x06-FF Unassigned 0x14-19,* Unassigned 0x1A,0x00-19 Unassigned 0x1A,0x1A Reserved Y N [RFC8701] 0x1A,0x1B-FF Unassigned 0x1B-29,* Unassigned 0x2A,0x00-29 Unassigned 0x2A,0x2A Reserved Y N [RFC8701] 0x2A,0x2B-FF Unassigned 0x2B-39,* Unassigned 0x3A,0x00-39 Unassigned 0x3A,0x3A Reserved Y N [RFC8701] 0x3A,0x3B-FF Unassigned 0x3B-49,* Unassigned 0x4A,0x00-49 Unassigned 0x4A,0x4A Reserved Y N [RFC8701] 0x4A,0x4B-FF Unassigned 0x4B-55,* Unassigned 0x56,0x00 TLS_FALLBACK_SCSV Y N [RFC7507] 0x56,0x01-FF Unassigned 0x57-59,* Unassigned 0x5A,0x00-59 Unassigned 0x5A,0x5A Reserved Y N [RFC8701] 0x5A,0x5B-FF Unassigned 0x5B-69,* Unassigned 0x6A,0x00-69 Unassigned 0x6A,0x6A Reserved Y N [RFC8701] 0x6A,0x6B-FF Unassigned 0x6B-79,* Unassigned 0x7A,0x00-79 Unassigned 0x7A,0x7A Reserved Y N [RFC8701] 0x7A,0x7B-FF Unassigned 0x7B-89,* Unassigned 0x8A,0x00-89 Unassigned 0x8A,0x8A Reserved Y N [RFC8701] 0x8A,0x8B-FF Unassigned 0x8B-99,* Unassigned 0x9A,0x00-99 Unassigned 0x9A,0x9A Reserved Y N [RFC8701] 0x9A,0x9B-FF Unassigned 0x9B-A9,* Unassigned 0xAA,0x00-A9 Unassigned 0xAA,0xAA Reserved Y N [RFC8701] 0xAA,0xAB-FF Unassigned 0xAB-B9,* Unassigned 0xBA,0x00-B9 Unassigned 0xBA,0xBA Reserved Y N [RFC8701] 0xBA,0xBB-FF Unassigned 0xBB-BF,* Unassigned 0xC0,0x00 Unassigned 0xC0,0x01 TLS_ECDH_ECDSA_WITH_NULL_SHA Y N [RFC8422] 0xC0,0x02 TLS_ECDH_ECDSA_WITH_RC4_128_SHA N N [RFC8422][RFC6347] 0xC0,0x03 TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA Y N [RFC8422] 0xC0,0x04 TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA Y N [RFC8422] 0xC0,0x05 TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA Y N [RFC8422] 0xC0,0x06 TLS_ECDHE_ECDSA_WITH_NULL_SHA Y N [RFC8422] 0xC0,0x07 TLS_ECDHE_ECDSA_WITH_RC4_128_SHA N N [RFC8422][RFC6347] 0xC0,0x08 TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA Y N [RFC8422] 0xC0,0x09 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA Y N [RFC8422] 0xC0,0x0A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA Y N [RFC8422] 0xC0,0x0B TLS_ECDH_RSA_WITH_NULL_SHA Y N [RFC8422] 0xC0,0x0C TLS_ECDH_RSA_WITH_RC4_128_SHA N N [RFC8422][RFC6347] 0xC0,0x0D TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA Y N [RFC8422] 0xC0,0x0E TLS_ECDH_RSA_WITH_AES_128_CBC_SHA Y N [RFC8422] 0xC0,0x0F TLS_ECDH_RSA_WITH_AES_256_CBC_SHA Y N [RFC8422] 0xC0,0x10 TLS_ECDHE_RSA_WITH_NULL_SHA Y N [RFC8422] 0xC0,0x11 TLS_ECDHE_RSA_WITH_RC4_128_SHA N N [RFC8422][RFC6347] 0xC0,0x12 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA Y N [RFC8422] 0xC0,0x13 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA Y N [RFC8422] 0xC0,0x14 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA Y N [RFC8422] 0xC0,0x15 TLS_ECDH_anon_WITH_NULL_SHA Y N [RFC8422] 0xC0,0x16 TLS_ECDH_anon_WITH_RC4_128_SHA N N [RFC8422][RFC6347] 0xC0,0x17 TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA Y N [RFC8422] 0xC0,0x18 TLS_ECDH_anon_WITH_AES_128_CBC_SHA Y N [RFC8422] 0xC0,0x19 TLS_ECDH_anon_WITH_AES_256_CBC_SHA Y N [RFC8422] 0xC0,0x1A TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA Y N [RFC5054] 0xC0,0x1B TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA Y N [RFC5054] 0xC0,0x1C TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA Y N [RFC5054] 0xC0,0x1D TLS_SRP_SHA_WITH_AES_128_CBC_SHA Y N [RFC5054] 0xC0,0x1E TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA Y N [RFC5054] 0xC0,0x1F TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA Y N [RFC5054] 0xC0,0x20 TLS_SRP_SHA_WITH_AES_256_CBC_SHA Y N [RFC5054] 0xC0,0x21 TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA Y N [RFC5054] 0xC0,0x22 TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA Y N [RFC5054] 0xC0,0x23 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 Y N [RFC5289] 0xC0,0x24 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 Y N [RFC5289] 0xC0,0x25 TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256 Y N [RFC5289] 0xC0,0x26 TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 Y N [RFC5289] 0xC0,0x27 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 Y N [RFC5289] 0xC0,0x28 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 Y N [RFC5289] 0xC0,0x29 TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256 Y N [RFC5289] 0xC0,0x2A TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 Y N [RFC5289] 0xC0,0x2B TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 Y Y [RFC5289] 0xC0,0x2C TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 Y Y [RFC5289] 0xC0,0x2D TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256 Y N [RFC5289] 0xC0,0x2E TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384 Y N [RFC5289] 0xC0,0x2F TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 Y Y [RFC5289] 0xC0,0x30 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 Y Y [RFC5289] 0xC0,0x31 TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256 Y N [RFC5289] 0xC0,0x32 TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384 Y N [RFC5289] 0xC0,0x33 TLS_ECDHE_PSK_WITH_RC4_128_SHA N N [RFC5489][RFC6347] 0xC0,0x34 TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA Y N [RFC5489] 0xC0,0x35 TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA Y N [RFC5489] 0xC0,0x36 TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA Y N [RFC5489] 0xC0,0x37 TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256 Y N [RFC5489] 0xC0,0x38 TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384 Y N [RFC5489] 0xC0,0x39 TLS_ECDHE_PSK_WITH_NULL_SHA Y N [RFC5489] 0xC0,0x3A TLS_ECDHE_PSK_WITH_NULL_SHA256 Y N [RFC5489] 0xC0,0x3B TLS_ECDHE_PSK_WITH_NULL_SHA384 Y N [RFC5489] 0xC0,0x3C TLS_RSA_WITH_ARIA_128_CBC_SHA256 Y N [RFC6209] 0xC0,0x3D TLS_RSA_WITH_ARIA_256_CBC_SHA384 Y N [RFC6209] 0xC0,0x3E TLS_DH_DSS_WITH_ARIA_128_CBC_SHA256 Y N [RFC6209] 0xC0,0x3F TLS_DH_DSS_WITH_ARIA_256_CBC_SHA384 Y N [RFC6209] 0xC0,0x40 TLS_DH_RSA_WITH_ARIA_128_CBC_SHA256 Y N [RFC6209] 0xC0,0x41 TLS_DH_RSA_WITH_ARIA_256_CBC_SHA384 Y N [RFC6209] 0xC0,0x42 TLS_DHE_DSS_WITH_ARIA_128_CBC_SHA256 Y N [RFC6209] 0xC0,0x43 TLS_DHE_DSS_WITH_ARIA_256_CBC_SHA384 Y N [RFC6209] 0xC0,0x44 TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256 Y N [RFC6209] 0xC0,0x45 TLS_DHE_RSA_WITH_ARIA_256_CBC_SHA384 Y N [RFC6209] 0xC0,0x46 TLS_DH_anon_WITH_ARIA_128_CBC_SHA256 Y N [RFC6209] 0xC0,0x47 TLS_DH_anon_WITH_ARIA_256_CBC_SHA384 Y N [RFC6209] 0xC0,0x48 TLS_ECDHE_ECDSA_WITH_ARIA_128_CBC_SHA256 Y N [RFC6209] 0xC0,0x49 TLS_ECDHE_ECDSA_WITH_ARIA_256_CBC_SHA384 Y N [RFC6209] 0xC0,0x4A TLS_ECDH_ECDSA_WITH_ARIA_128_CBC_SHA256 Y N [RFC6209] 0xC0,0x4B TLS_ECDH_ECDSA_WITH_ARIA_256_CBC_SHA384 Y N [RFC6209] 0xC0,0x4C TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256 Y N [RFC6209] 0xC0,0x4D TLS_ECDHE_RSA_WITH_ARIA_256_CBC_SHA384 Y N [RFC6209] 0xC0,0x4E TLS_ECDH_RSA_WITH_ARIA_128_CBC_SHA256 Y N [RFC6209] 0xC0,0x4F TLS_ECDH_RSA_WITH_ARIA_256_CBC_SHA384 Y N [RFC6209] 0xC0,0x50 TLS_RSA_WITH_ARIA_128_GCM_SHA256 Y N [RFC6209] 0xC0,0x51 TLS_RSA_WITH_ARIA_256_GCM_SHA384 Y N [RFC6209] 0xC0,0x52 TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256 Y N [RFC6209] 0xC0,0x53 TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384 Y N [RFC6209] 0xC0,0x54 TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256 Y N [RFC6209] 0xC0,0x55 TLS_DH_RSA_WITH_ARIA_256_GCM_SHA384 Y N [RFC6209] 0xC0,0x56 TLS_DHE_DSS_WITH_ARIA_128_GCM_SHA256 Y N [RFC6209] 0xC0,0x57 TLS_DHE_DSS_WITH_ARIA_256_GCM_SHA384 Y N [RFC6209] 0xC0,0x58 TLS_DH_DSS_WITH_ARIA_128_GCM_SHA256 Y N [RFC6209] 0xC0,0x59 TLS_DH_DSS_WITH_ARIA_256_GCM_SHA384 Y N [RFC6209] 0xC0,0x5A TLS_DH_anon_WITH_ARIA_128_GCM_SHA256 Y N [RFC6209] 0xC0,0x5B TLS_DH_anon_WITH_ARIA_256_GCM_SHA384 Y N [RFC6209] 0xC0,0x5C TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256 Y N [RFC6209] 0xC0,0x5D TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384 Y N [RFC6209] 0xC0,0x5E TLS_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256 Y N [RFC6209] 0xC0,0x5F TLS_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384 Y N [RFC6209] 0xC0,0x60 TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256 Y N [RFC6209] 0xC0,0x61 TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384 Y N [RFC6209] 0xC0,0x62 TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256 Y N [RFC6209] 0xC0,0x63 TLS_ECDH_RSA_WITH_ARIA_256_GCM_SHA384 Y N [RFC6209] 0xC0,0x64 TLS_PSK_WITH_ARIA_128_CBC_SHA256 Y N [RFC6209] 0xC0,0x65 TLS_PSK_WITH_ARIA_256_CBC_SHA384 Y N [RFC6209] 0xC0,0x66 TLS_DHE_PSK_WITH_ARIA_128_CBC_SHA256 Y N [RFC6209] 0xC0,0x67 TLS_DHE_PSK_WITH_ARIA_256_CBC_SHA384 Y N [RFC6209] 0xC0,0x68 TLS_RSA_PSK_WITH_ARIA_128_CBC_SHA256 Y N [RFC6209] 0xC0,0x69 TLS_RSA_PSK_WITH_ARIA_256_CBC_SHA384 Y N [RFC6209] 0xC0,0x6A TLS_PSK_WITH_ARIA_128_GCM_SHA256 Y N [RFC6209] 0xC0,0x6B TLS_PSK_WITH_ARIA_256_GCM_SHA384 Y N [RFC6209] 0xC0,0x6C TLS_DHE_PSK_WITH_ARIA_128_GCM_SHA256 Y N [RFC6209] 0xC0,0x6D TLS_DHE_PSK_WITH_ARIA_256_GCM_SHA384 Y N [RFC6209] 0xC0,0x6E TLS_RSA_PSK_WITH_ARIA_128_GCM_SHA256 Y N [RFC6209] 0xC0,0x6F TLS_RSA_PSK_WITH_ARIA_256_GCM_SHA384 Y N [RFC6209] 0xC0,0x70 TLS_ECDHE_PSK_WITH_ARIA_128_CBC_SHA256 Y N [RFC6209] 0xC0,0x71 TLS_ECDHE_PSK_WITH_ARIA_256_CBC_SHA384 Y N [RFC6209] 0xC0,0x72 TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 Y N [RFC6367] 0xC0,0x73 TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 Y N [RFC6367] 0xC0,0x74 TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 Y N [RFC6367] 0xC0,0x75 TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 Y N [RFC6367] 0xC0,0x76 TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 Y N [RFC6367] 0xC0,0x77 TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384 Y N [RFC6367] 0xC0,0x78 TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256 Y N [RFC6367] 0xC0,0x79 TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384 Y N [RFC6367] 0xC0,0x7A TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256 Y N [RFC6367] 0xC0,0x7B TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384 Y N [RFC6367] 0xC0,0x7C TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256 Y N [RFC6367] 0xC0,0x7D TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384 Y N [RFC6367] 0xC0,0x7E TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256 Y N [RFC6367] 0xC0,0x7F TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384 Y N [RFC6367] 0xC0,0x80 TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256 Y N [RFC6367] 0xC0,0x81 TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384 Y N [RFC6367] 0xC0,0x82 TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256 Y N [RFC6367] 0xC0,0x83 TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384 Y N [RFC6367] 0xC0,0x84 TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256 Y N [RFC6367] 0xC0,0x85 TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384 Y N [RFC6367] 0xC0,0x86 TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256 Y N [RFC6367] 0xC0,0x87 TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384 Y N [RFC6367] 0xC0,0x88 TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256 Y N [RFC6367] 0xC0,0x89 TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384 Y N [RFC6367] 0xC0,0x8A TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256 Y N [RFC6367] 0xC0,0x8B TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384 Y N [RFC6367] 0xC0,0x8C TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256 Y N [RFC6367] 0xC0,0x8D TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384 Y N [RFC6367] 0xC0,0x8E TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256 Y N [RFC6367] 0xC0,0x8F TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384 Y N [RFC6367] 0xC0,0x90 TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256 Y N [RFC6367] 0xC0,0x91 TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384 Y N [RFC6367] 0xC0,0x92 TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256 Y N [RFC6367] 0xC0,0x93 TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384 Y N [RFC6367] 0xC0,0x94 TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256 Y N [RFC6367] 0xC0,0x95 TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384 Y N [RFC6367] 0xC0,0x96 TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256 Y N [RFC6367] 0xC0,0x97 TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384 Y N [RFC6367] 0xC0,0x98 TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256 Y N [RFC6367] 0xC0,0x99 TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384 Y N [RFC6367] 0xC0,0x9A TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256 Y N [RFC6367] 0xC0,0x9B TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384 Y N [RFC6367] 0xC0,0x9C TLS_RSA_WITH_AES_128_CCM Y N [RFC6655] 0xC0,0x9D TLS_RSA_WITH_AES_256_CCM Y N [RFC6655] 0xC0,0x9E TLS_DHE_RSA_WITH_AES_128_CCM Y Y [RFC6655] 0xC0,0x9F TLS_DHE_RSA_WITH_AES_256_CCM Y Y [RFC6655] 0xC0,0xA0 TLS_RSA_WITH_AES_128_CCM_8 Y N [RFC6655] 0xC0,0xA1 TLS_RSA_WITH_AES_256_CCM_8 Y N [RFC6655] 0xC0,0xA2 TLS_DHE_RSA_WITH_AES_128_CCM_8 Y N [RFC6655] 0xC0,0xA3 TLS_DHE_RSA_WITH_AES_256_CCM_8 N N [RFC6655] 0xC0,0xA4 TLS_PSK_WITH_AES_128_CCM Y N [RFC6655] 0xC0,0xA5 TLS_PSK_WITH_AES_256_CCM Y N [RFC6655] 0xC0,0xA6 TLS_DHE_PSK_WITH_AES_128_CCM Y Y [RFC6655] 0xC0,0xA7 TLS_DHE_PSK_WITH_AES_256_CCM Y Y [RFC6655] 0xC0,0xA8 TLS_PSK_WITH_AES_128_CCM_8 Y N [RFC6655] 0xC0,0xA9 TLS_PSK_WITH_AES_256_CCM_8 Y N [RFC6655] 0xC0,0xAA TLS_PSK_DHE_WITH_AES_128_CCM_8 Y N [RFC6655] 0xC0,0xAB TLS_PSK_DHE_WITH_AES_256_CCM_8 Y N [RFC6655] 0xC0,0xAC TLS_ECDHE_ECDSA_WITH_AES_128_CCM Y N [RFC7251] 0xC0,0xAD TLS_ECDHE_ECDSA_WITH_AES_256_CCM Y N [RFC7251] 0xC0,0xAE TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8 Y N [RFC7251] 0xC0,0xAF TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8 Y N [RFC7251] 0xC0,0xB0 TLS_ECCPWD_WITH_AES_128_GCM_SHA256 Y N [RFC8492] 0xC0,0xB1 TLS_ECCPWD_WITH_AES_256_GCM_SHA384 Y N [RFC8492] 0xC0,0xB2 TLS_ECCPWD_WITH_AES_128_CCM_SHA256 Y N [RFC8492] 0xC0,0xB3 TLS_ECCPWD_WITH_AES_256_CCM_SHA384 Y N [RFC8492] 0xC0,0xB4 TLS_SHA256_SHA256 Y N [draft-camwinget-tls-ts13-macciphersuites] 0xC0,0xB5 TLS_SHA384_SHA384 Y N [draft-camwinget-tls-ts13-macciphersuites] 0xC0,0xB6-FF Unassigned 0xC1,0x00 TLS_GOSTR341112_256_WITH_KUZNYECHIK_CTR_OMAC N N [draft-smyshlyaev-tls12-gost-suites] 0xC1,0x01 TLS_GOSTR341112_256_WITH_MAGMA_CTR_OMAC N N [draft-smyshlyaev-tls12-gost-suites] 0xC1,0x02 TLS_GOSTR341112_256_WITH_28147_CNT_IMIT N N [draft-smyshlyaev-tls12-gost-suites] 0xC1,0x03 TLS_GOSTR341112_256_WITH_KUZNYECHIK_MGM_L N N [draft-smyshlyaev-tls13-gost-suites] 0xC1,0x04 TLS_GOSTR341112_256_WITH_MAGMA_MGM_L N N [draft-smyshlyaev-tls13-gost-suites] 0xC1,0x05 TLS_GOSTR341112_256_WITH_KUZNYECHIK_MGM_S N N [draft-smyshlyaev-tls13-gost-suites] 0xC1,0x06 TLS_GOSTR341112_256_WITH_MAGMA_MGM_S N N [draft-smyshlyaev-tls13-gost-suites] 0xC1,0x07-FF Unassigned 0xC2-C9,* Unassigned 0xCA,0x00-C9 Unassigned 0xCA,0xCA Reserved Y N [RFC8701] 0xCA,0xCB-FF Unassigned 0xCB,* Unassigned 0xCC,0x00-A7 Unassigned 0xCC,0xA8 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 Y Y [RFC7905] 0xCC,0xA9 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 Y Y [RFC7905] 0xCC,0xAA TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256 Y Y [RFC7905] 0xCC,0xAB TLS_PSK_WITH_CHACHA20_POLY1305_SHA256 Y N [RFC7905] 0xCC,0xAC TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256 Y Y [RFC7905] 0xCC,0xAD TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256 Y Y [RFC7905] 0xCC,0xAE TLS_RSA_PSK_WITH_CHACHA20_POLY1305_SHA256 Y N [RFC7905] 0xCC,0xAF-FF Unassigned 0xCD-CF,* Unassigned 0xD0,0x00 Unassigned 0xD0,0x01 TLS_ECDHE_PSK_WITH_AES_128_GCM_SHA256 Y Y [RFC8442] 0xD0,0x02 TLS_ECDHE_PSK_WITH_AES_256_GCM_SHA384 Y Y [RFC8442] 0xD0,0x03 TLS_ECDHE_PSK_WITH_AES_128_CCM_8_SHA256 Y N [RFC8442] 0xD0,0x04 Unassigned 0xD0,0x05 TLS_ECDHE_PSK_WITH_AES_128_CCM_SHA256 Y Y [RFC8442] 0xD0,0x06-FF Unassigned 0xD1-D9,* Unassigned 0xDA,0x00-D9 Unassigned 0xDA,0xDA Reserved Y N [RFC8701] 0xDA,0xDB-FF Unassigned 0xDB-E9,* Unassigned 0xEA,0x00-E9 Unassigned 0xEA,0xEA Reserved Y N [RFC8701] 0xEA,0xEB-FF Unassigned 0xEB-F9,* Unassigned 0xFA,0x00-C9 Unassigned 0xFA,0xFA Reserved Y N [RFC8701] 0xFA,0xFB-FF Unassigned 0xFB-FD,* Unassigned 0xFE,0x00-FD Unassigned 0xFE,0xFE-FF Reserved to avoid conflicts with widely deployed implementations [Pasi_Eronen] 0xFF,0x00-FF Reserved for Private Use [RFC8446]" while read line ; do alg=`echo $line | awk '{print $2}' | tr [A-Z] [a-z] | sed -e 's/_/-/g'` echo "$alg" | grep -q "^tls-" || { #echo "Alg \"$alg\" is not real - skipping!" continue } echo $line | grep -q '\[' || { #echo "Line \"$line\" does contain the '\' character for refs - skipping!" continue } refs=`echo "$line" | sed 's/^[^\[]*\[/\[/'` #echo "refs=$refs" echo "$refs" | grep -q "^\[RFC" || { #echo "Refs \"$refs\" does not begin with \"[RFC\" - skipping!" continue } status="current" recommended=`echo $line | awk '{print $4}'` echo "$recommended" | grep -q "^N$" && { #echo "deprecated found in line: $line" status="deprecated" } yang_ref="" ref_lines=`echo "$refs" | sed 's/]/]\n/'` while read ref_line; do #echo "ref_line=$ref_line" ref=`echo $ref_line | sed 's/^\[\(.*\)\]$/\1/'` #echo "$ref_line ---> $ref" if [[ "$ref" = "SC-tls-des-idea-ciphers-to-historic" ]]; then status="obsolete" elif [[ "$ref" = "RFC2712" ]]; then ref_text="RFC 2712: Addition of Kerberos Cipher Suites to Transport Layer Security (TLS)" elif [[ "$ref" = "RFC4162" ]]; then ref_text="RFC 4162: Addition of SEED Ciphersuites to Transport Layer Security (TLS)" elif [[ "$ref" = "RFC4279" ]]; then ref_text="RFC 4279: Pre-Shared Key Ciphersuites for Transport Layer Security (TLS)" elif [[ "$ref" = "RFC4346" ]]; then ref_text="RFC 4346: The TLS Protocol Version 1.1" elif [[ "$ref" = "RFC4785" ]]; then ref_text="RFC 4785: Pre-Shared Key Cipher Suites with NULL Encryption for Transport Layer Security (TLS)" elif [[ "$ref" = "RFC5054" ]]; then ref_text="RFC 5054: Using SRP for TLS Authentication" elif [[ "$ref" = "RFC5246" ]]; then ref_text="RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2" elif [[ "$ref" = "RFC5288" ]]; then ref_text="RFC 5288: AES-GCM Cipher Suites for TLS" elif [[ "$ref" = "RFC5289" ]]; then ref_text="RFC 5289: TLS Elliptic Curve Cipher Suites with SHA-256/384 and AES Galois Counter Mode" elif [[ "$ref" = "RFC5469" ]]; then ref_text="RFC 5469: DES and IDEA Cipher Suites for Transport Layer Security (TLS)" elif [[ "$ref" = "RFC5487" ]]; then ref_text="RFC 5487: Pre-Shared Key Cipher Suites for Transport Layer Security (TLS) with SHA-256/384 and AES Galois Counter Mode" elif [[ "$ref" = "RFC5489" ]]; then ref_text="RFC 5489: ECDHE_PSK Ciphersuites for Transport Layer Security (TLS)" elif [[ "$ref" = "RFC5746" ]]; then ref_text="RFC 5746: Transport Layer Security (TLS) Renegotiation Indication Extension" elif [[ "$ref" = "RFC5932" ]]; then ref_text="RFC 5932: Camellia Cipher Suites for TLS" elif [[ "$ref" = "RFC6209" ]]; then ref_text="RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)" elif [[ "$ref" = "RFC6347" ]]; then ref_text="RFC 6347: Datagram Transport Layer Security version 1.2" elif [[ "$ref" = "RFC6367" ]]; then ref_text="RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)" elif [[ "$ref" = "RFC6655" ]]; then ref_text="RFC 6655: AES-CCM Cipher Suites for TLS" elif [[ "$ref" = "RFC7251" ]]; then ref_text="RFC 7251: AES-CCM ECC Cipher Suites for TLS" elif [[ "$ref" = "RFC7507" ]]; then ref_text="RFC 7507: TLS Fallback Signaling Cipher Suite Value (SCSV) for Preventing Protocol Downgrade Attacks" elif [[ "$ref" = "RFC7905" ]]; then ref_text="RFC 7905: ChaCha20-Poly1305 Cipher Suites for Transport Layer Security (TLS)" elif [[ "$ref" = "RFC8422" ]]; then ref_text="RFC 8422: Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier" elif [[ "$ref" = "RFC8442" ]]; then ref_text="RFC 8442: ECDHE_PSK with AES-GCM and AES-CCM Cipher Suites" elif [[ "$ref" = "RFC8446" ]]; then ref_text="RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3" elif [[ "$ref" = "RFC8492" ]]; then ref_text="RFC 8492: Secure Password Ciphersuites for Transport Layer Security (TLS)" elif [[ "$ref" = "RFC8998" ]]; then ref_text="RFC 8998: ShangMi (SM) Cipher Suites for Transport Layer Security (TLS) Protocol Version 1.3" elif [[ "$ref" = "IESG Action 2018-08-16" ]]; then continue else echo "Unrecognized ref ($ref) - exiting!" exit 1 fi if [[ -z "$yang_ref" ]]; then yang_ref="$ref_text" else if [[ "$yang_ref" = "$ref_text" ]]; then if [[ "$ref" != "SC-tls-des-idea-ciphers-to-historic" ]]; then echo "Unrecognized \"same\" case - exiting!" exit fi fi yang_ref="$yang_ref\n $ref_text" fi done <<< "$ref_lines" des=`echo $alg | tr [a-z] [A-Z]` echo " identity $alg {" echo " base $BASE;" echo "$status" | grep -q "current" || { echo " status $status;" } echo " description" echo " \"$des\";" echo " reference" echo -e " \"$yang_ref\";" echo " }" echo done <<< "$LINES" --Apple-Mail=_28657206-5472-4BAB-9A55-18A2C40E5213 Content-Transfer-Encoding: 7bit Content-Type: text/html; charset=us-ascii


--Apple-Mail=_28657206-5472-4BAB-9A55-18A2C40E5213 Content-Disposition: attachment; filename=iana-tls-cipher-suite-algs.yang Content-Type: application/octet-stream; x-unix-mode=0644; name="iana-tls-cipher-suite-algs.yang" Content-Transfer-Encoding: 7bit module iana-tls-cipher-suite-algs { yang-version 1.1; namespace "urn:ietf:params:xml:ns:yang:iana-tls-cipher-suite-algs"; prefix tlscsa; organization "Internet Assigned Numbers Authority (IANA)"; contact "Postal: ICANN 12025 Waterfront Drive, Suite 300 Los Angeles, CA 90094-2536 United States of America Tel: +1 310 301 5800 Email: iana@iana.org"; description "This module defines identities for the Cipher Suite algorithms defined in the 'TLS Cipher Suites' sub-registry of the 'Transport Layer Security (TLS) Parameters' registry maintained by IANA. Copyright (c) 2021 IETF Trust and the persons identified as authors of the code. All rights reserved. Redistribution and use in source and binary forms, with or without modification, is permitted pursuant to, and subject to the license terms contained in, the Simplified BSD License set forth in Section 4.c of the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/license-info). The initial version of this YANG module is part of RFC FFFF (https://www.rfc-editor.org/info/rfcFFFF); see the RFC itself for full legal notices."; revision 2021-06-02 { description "Initial version"; reference "RFC FFFF: YANG Groupings for TLS Clients and TLS Servers"; } identity cipher-suite-base { description "Base identity used to identify TLS cipher suites."; } identity tls-null-with-null-null { base cipher-suite-base; status deprecated; description "TLS-NULL-WITH-NULL-NULL"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-rsa-with-null-md5 { base cipher-suite-base; status deprecated; description "TLS-RSA-WITH-NULL-MD5"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-rsa-with-null-sha { base cipher-suite-base; status deprecated; description "TLS-RSA-WITH-NULL-SHA"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-rsa-export-with-rc4-40-md5 { base cipher-suite-base; status deprecated; description "TLS-RSA-EXPORT-WITH-RC4-40-MD5"; reference "RFC 4346: The TLS Protocol Version 1.1 RFC 6347: Datagram Transport Layer Security version 1.2"; } identity tls-rsa-with-rc4-128-md5 { base cipher-suite-base; status deprecated; description "TLS-RSA-WITH-RC4-128-MD5"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2 RFC 6347: Datagram Transport Layer Security version 1.2"; } identity tls-rsa-with-rc4-128-sha { base cipher-suite-base; status deprecated; description "TLS-RSA-WITH-RC4-128-SHA"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2 RFC 6347: Datagram Transport Layer Security version 1.2"; } identity tls-rsa-export-with-rc2-cbc-40-md5 { base cipher-suite-base; status deprecated; description "TLS-RSA-EXPORT-WITH-RC2-CBC-40-MD5"; reference "RFC 4346: The TLS Protocol Version 1.1"; } identity tls-rsa-with-idea-cbc-sha { base cipher-suite-base; status obsolete; description "TLS-RSA-WITH-IDEA-CBC-SHA"; reference "RFC 5469: DES and IDEA Cipher Suites for Transport Layer Security (TLS) RFC 5469: DES and IDEA Cipher Suites for Transport Layer Security (TLS)"; } identity tls-rsa-export-with-des40-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-RSA-EXPORT-WITH-DES40-CBC-SHA"; reference "RFC 4346: The TLS Protocol Version 1.1"; } identity tls-rsa-with-des-cbc-sha { base cipher-suite-base; status obsolete; description "TLS-RSA-WITH-DES-CBC-SHA"; reference "RFC 5469: DES and IDEA Cipher Suites for Transport Layer Security (TLS) RFC 5469: DES and IDEA Cipher Suites for Transport Layer Security (TLS)"; } identity tls-rsa-with-3des-ede-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-RSA-WITH-3DES-EDE-CBC-SHA"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-dh-dss-export-with-des40-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DH-DSS-EXPORT-WITH-DES40-CBC-SHA"; reference "RFC 4346: The TLS Protocol Version 1.1"; } identity tls-dh-dss-with-des-cbc-sha { base cipher-suite-base; status obsolete; description "TLS-DH-DSS-WITH-DES-CBC-SHA"; reference "RFC 5469: DES and IDEA Cipher Suites for Transport Layer Security (TLS) RFC 5469: DES and IDEA Cipher Suites for Transport Layer Security (TLS)"; } identity tls-dh-dss-with-3des-ede-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DH-DSS-WITH-3DES-EDE-CBC-SHA"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-dh-rsa-export-with-des40-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DH-RSA-EXPORT-WITH-DES40-CBC-SHA"; reference "RFC 4346: The TLS Protocol Version 1.1"; } identity tls-dh-rsa-with-des-cbc-sha { base cipher-suite-base; status obsolete; description "TLS-DH-RSA-WITH-DES-CBC-SHA"; reference "RFC 5469: DES and IDEA Cipher Suites for Transport Layer Security (TLS) RFC 5469: DES and IDEA Cipher Suites for Transport Layer Security (TLS)"; } identity tls-dh-rsa-with-3des-ede-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DH-RSA-WITH-3DES-EDE-CBC-SHA"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-dhe-dss-export-with-des40-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DHE-DSS-EXPORT-WITH-DES40-CBC-SHA"; reference "RFC 4346: The TLS Protocol Version 1.1"; } identity tls-dhe-dss-with-des-cbc-sha { base cipher-suite-base; status obsolete; description "TLS-DHE-DSS-WITH-DES-CBC-SHA"; reference "RFC 5469: DES and IDEA Cipher Suites for Transport Layer Security (TLS) RFC 5469: DES and IDEA Cipher Suites for Transport Layer Security (TLS)"; } identity tls-dhe-dss-with-3des-ede-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DHE-DSS-WITH-3DES-EDE-CBC-SHA"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-dhe-rsa-export-with-des40-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DHE-RSA-EXPORT-WITH-DES40-CBC-SHA"; reference "RFC 4346: The TLS Protocol Version 1.1"; } identity tls-dhe-rsa-with-des-cbc-sha { base cipher-suite-base; status obsolete; description "TLS-DHE-RSA-WITH-DES-CBC-SHA"; reference "RFC 5469: DES and IDEA Cipher Suites for Transport Layer Security (TLS) RFC 5469: DES and IDEA Cipher Suites for Transport Layer Security (TLS)"; } identity tls-dhe-rsa-with-3des-ede-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DHE-RSA-WITH-3DES-EDE-CBC-SHA"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-dh-anon-export-with-rc4-40-md5 { base cipher-suite-base; status deprecated; description "TLS-DH-ANON-EXPORT-WITH-RC4-40-MD5"; reference "RFC 4346: The TLS Protocol Version 1.1 RFC 6347: Datagram Transport Layer Security version 1.2"; } identity tls-dh-anon-with-rc4-128-md5 { base cipher-suite-base; status deprecated; description "TLS-DH-ANON-WITH-RC4-128-MD5"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2 RFC 6347: Datagram Transport Layer Security version 1.2"; } identity tls-dh-anon-export-with-des40-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DH-ANON-EXPORT-WITH-DES40-CBC-SHA"; reference "RFC 4346: The TLS Protocol Version 1.1"; } identity tls-dh-anon-with-des-cbc-sha { base cipher-suite-base; status obsolete; description "TLS-DH-ANON-WITH-DES-CBC-SHA"; reference "RFC 5469: DES and IDEA Cipher Suites for Transport Layer Security (TLS) RFC 5469: DES and IDEA Cipher Suites for Transport Layer Security (TLS)"; } identity tls-dh-anon-with-3des-ede-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DH-ANON-WITH-3DES-EDE-CBC-SHA"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-krb5-with-des-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-KRB5-WITH-DES-CBC-SHA"; reference "RFC 2712: Addition of Kerberos Cipher Suites to Transport Layer Security (TLS)"; } identity tls-krb5-with-3des-ede-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-KRB5-WITH-3DES-EDE-CBC-SHA"; reference "RFC 2712: Addition of Kerberos Cipher Suites to Transport Layer Security (TLS)"; } identity tls-krb5-with-rc4-128-sha { base cipher-suite-base; status deprecated; description "TLS-KRB5-WITH-RC4-128-SHA"; reference "RFC 2712: Addition of Kerberos Cipher Suites to Transport Layer Security (TLS) RFC 6347: Datagram Transport Layer Security version 1.2"; } identity tls-krb5-with-idea-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-KRB5-WITH-IDEA-CBC-SHA"; reference "RFC 2712: Addition of Kerberos Cipher Suites to Transport Layer Security (TLS)"; } identity tls-krb5-with-des-cbc-md5 { base cipher-suite-base; status deprecated; description "TLS-KRB5-WITH-DES-CBC-MD5"; reference "RFC 2712: Addition of Kerberos Cipher Suites to Transport Layer Security (TLS)"; } identity tls-krb5-with-3des-ede-cbc-md5 { base cipher-suite-base; status deprecated; description "TLS-KRB5-WITH-3DES-EDE-CBC-MD5"; reference "RFC 2712: Addition of Kerberos Cipher Suites to Transport Layer Security (TLS)"; } identity tls-krb5-with-rc4-128-md5 { base cipher-suite-base; status deprecated; description "TLS-KRB5-WITH-RC4-128-MD5"; reference "RFC 2712: Addition of Kerberos Cipher Suites to Transport Layer Security (TLS) RFC 6347: Datagram Transport Layer Security version 1.2"; } identity tls-krb5-with-idea-cbc-md5 { base cipher-suite-base; status deprecated; description "TLS-KRB5-WITH-IDEA-CBC-MD5"; reference "RFC 2712: Addition of Kerberos Cipher Suites to Transport Layer Security (TLS)"; } identity tls-krb5-export-with-des-cbc-40-sha { base cipher-suite-base; status deprecated; description "TLS-KRB5-EXPORT-WITH-DES-CBC-40-SHA"; reference "RFC 2712: Addition of Kerberos Cipher Suites to Transport Layer Security (TLS)"; } identity tls-krb5-export-with-rc2-cbc-40-sha { base cipher-suite-base; status deprecated; description "TLS-KRB5-EXPORT-WITH-RC2-CBC-40-SHA"; reference "RFC 2712: Addition of Kerberos Cipher Suites to Transport Layer Security (TLS)"; } identity tls-krb5-export-with-rc4-40-sha { base cipher-suite-base; status deprecated; description "TLS-KRB5-EXPORT-WITH-RC4-40-SHA"; reference "RFC 2712: Addition of Kerberos Cipher Suites to Transport Layer Security (TLS) RFC 6347: Datagram Transport Layer Security version 1.2"; } identity tls-krb5-export-with-des-cbc-40-md5 { base cipher-suite-base; status deprecated; description "TLS-KRB5-EXPORT-WITH-DES-CBC-40-MD5"; reference "RFC 2712: Addition of Kerberos Cipher Suites to Transport Layer Security (TLS)"; } identity tls-krb5-export-with-rc2-cbc-40-md5 { base cipher-suite-base; status deprecated; description "TLS-KRB5-EXPORT-WITH-RC2-CBC-40-MD5"; reference "RFC 2712: Addition of Kerberos Cipher Suites to Transport Layer Security (TLS)"; } identity tls-krb5-export-with-rc4-40-md5 { base cipher-suite-base; status deprecated; description "TLS-KRB5-EXPORT-WITH-RC4-40-MD5"; reference "RFC 2712: Addition of Kerberos Cipher Suites to Transport Layer Security (TLS) RFC 6347: Datagram Transport Layer Security version 1.2"; } identity tls-psk-with-null-sha { base cipher-suite-base; status deprecated; description "TLS-PSK-WITH-NULL-SHA"; reference "RFC 4785: Pre-Shared Key Cipher Suites with NULL Encryption for Transport Layer Security (TLS)"; } identity tls-dhe-psk-with-null-sha { base cipher-suite-base; status deprecated; description "TLS-DHE-PSK-WITH-NULL-SHA"; reference "RFC 4785: Pre-Shared Key Cipher Suites with NULL Encryption for Transport Layer Security (TLS)"; } identity tls-rsa-psk-with-null-sha { base cipher-suite-base; status deprecated; description "TLS-RSA-PSK-WITH-NULL-SHA"; reference "RFC 4785: Pre-Shared Key Cipher Suites with NULL Encryption for Transport Layer Security (TLS)"; } identity tls-rsa-with-aes-128-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-RSA-WITH-AES-128-CBC-SHA"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-dh-dss-with-aes-128-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DH-DSS-WITH-AES-128-CBC-SHA"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-dh-rsa-with-aes-128-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DH-RSA-WITH-AES-128-CBC-SHA"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-dhe-dss-with-aes-128-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DHE-DSS-WITH-AES-128-CBC-SHA"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-dhe-rsa-with-aes-128-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DHE-RSA-WITH-AES-128-CBC-SHA"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-dh-anon-with-aes-128-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DH-ANON-WITH-AES-128-CBC-SHA"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-rsa-with-aes-256-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-RSA-WITH-AES-256-CBC-SHA"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-dh-dss-with-aes-256-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DH-DSS-WITH-AES-256-CBC-SHA"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-dh-rsa-with-aes-256-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DH-RSA-WITH-AES-256-CBC-SHA"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-dhe-dss-with-aes-256-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DHE-DSS-WITH-AES-256-CBC-SHA"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-dhe-rsa-with-aes-256-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DHE-RSA-WITH-AES-256-CBC-SHA"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-dh-anon-with-aes-256-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DH-ANON-WITH-AES-256-CBC-SHA"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-rsa-with-null-sha256 { base cipher-suite-base; status deprecated; description "TLS-RSA-WITH-NULL-SHA256"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-rsa-with-aes-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-RSA-WITH-AES-128-CBC-SHA256"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-rsa-with-aes-256-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-RSA-WITH-AES-256-CBC-SHA256"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-dh-dss-with-aes-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-DH-DSS-WITH-AES-128-CBC-SHA256"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-dh-rsa-with-aes-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-DH-RSA-WITH-AES-128-CBC-SHA256"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-dhe-dss-with-aes-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-DHE-DSS-WITH-AES-128-CBC-SHA256"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-rsa-with-camellia-128-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-RSA-WITH-CAMELLIA-128-CBC-SHA"; reference "RFC 5932: Camellia Cipher Suites for TLS"; } identity tls-dh-dss-with-camellia-128-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DH-DSS-WITH-CAMELLIA-128-CBC-SHA"; reference "RFC 5932: Camellia Cipher Suites for TLS"; } identity tls-dh-rsa-with-camellia-128-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DH-RSA-WITH-CAMELLIA-128-CBC-SHA"; reference "RFC 5932: Camellia Cipher Suites for TLS"; } identity tls-dhe-dss-with-camellia-128-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA"; reference "RFC 5932: Camellia Cipher Suites for TLS"; } identity tls-dhe-rsa-with-camellia-128-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA"; reference "RFC 5932: Camellia Cipher Suites for TLS"; } identity tls-dh-anon-with-camellia-128-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DH-ANON-WITH-CAMELLIA-128-CBC-SHA"; reference "RFC 5932: Camellia Cipher Suites for TLS"; } identity tls-dhe-rsa-with-aes-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-DHE-RSA-WITH-AES-128-CBC-SHA256"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-dh-dss-with-aes-256-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-DH-DSS-WITH-AES-256-CBC-SHA256"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-dh-rsa-with-aes-256-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-DH-RSA-WITH-AES-256-CBC-SHA256"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-dhe-dss-with-aes-256-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-DHE-DSS-WITH-AES-256-CBC-SHA256"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-dhe-rsa-with-aes-256-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-DHE-RSA-WITH-AES-256-CBC-SHA256"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-dh-anon-with-aes-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-DH-ANON-WITH-AES-128-CBC-SHA256"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-dh-anon-with-aes-256-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-DH-ANON-WITH-AES-256-CBC-SHA256"; reference "RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2"; } identity tls-rsa-with-camellia-256-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-RSA-WITH-CAMELLIA-256-CBC-SHA"; reference "RFC 5932: Camellia Cipher Suites for TLS"; } identity tls-dh-dss-with-camellia-256-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DH-DSS-WITH-CAMELLIA-256-CBC-SHA"; reference "RFC 5932: Camellia Cipher Suites for TLS"; } identity tls-dh-rsa-with-camellia-256-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DH-RSA-WITH-CAMELLIA-256-CBC-SHA"; reference "RFC 5932: Camellia Cipher Suites for TLS"; } identity tls-dhe-dss-with-camellia-256-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA"; reference "RFC 5932: Camellia Cipher Suites for TLS"; } identity tls-dhe-rsa-with-camellia-256-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA"; reference "RFC 5932: Camellia Cipher Suites for TLS"; } identity tls-dh-anon-with-camellia-256-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DH-ANON-WITH-CAMELLIA-256-CBC-SHA"; reference "RFC 5932: Camellia Cipher Suites for TLS"; } identity tls-psk-with-rc4-128-sha { base cipher-suite-base; status deprecated; description "TLS-PSK-WITH-RC4-128-SHA"; reference "RFC 4279: Pre-Shared Key Ciphersuites for Transport Layer Security (TLS) RFC 6347: Datagram Transport Layer Security version 1.2"; } identity tls-psk-with-3des-ede-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-PSK-WITH-3DES-EDE-CBC-SHA"; reference "RFC 4279: Pre-Shared Key Ciphersuites for Transport Layer Security (TLS)"; } identity tls-psk-with-aes-128-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-PSK-WITH-AES-128-CBC-SHA"; reference "RFC 4279: Pre-Shared Key Ciphersuites for Transport Layer Security (TLS)"; } identity tls-psk-with-aes-256-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-PSK-WITH-AES-256-CBC-SHA"; reference "RFC 4279: Pre-Shared Key Ciphersuites for Transport Layer Security (TLS)"; } identity tls-dhe-psk-with-rc4-128-sha { base cipher-suite-base; status deprecated; description "TLS-DHE-PSK-WITH-RC4-128-SHA"; reference "RFC 4279: Pre-Shared Key Ciphersuites for Transport Layer Security (TLS) RFC 6347: Datagram Transport Layer Security version 1.2"; } identity tls-dhe-psk-with-3des-ede-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DHE-PSK-WITH-3DES-EDE-CBC-SHA"; reference "RFC 4279: Pre-Shared Key Ciphersuites for Transport Layer Security (TLS)"; } identity tls-dhe-psk-with-aes-128-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DHE-PSK-WITH-AES-128-CBC-SHA"; reference "RFC 4279: Pre-Shared Key Ciphersuites for Transport Layer Security (TLS)"; } identity tls-dhe-psk-with-aes-256-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DHE-PSK-WITH-AES-256-CBC-SHA"; reference "RFC 4279: Pre-Shared Key Ciphersuites for Transport Layer Security (TLS)"; } identity tls-rsa-psk-with-rc4-128-sha { base cipher-suite-base; status deprecated; description "TLS-RSA-PSK-WITH-RC4-128-SHA"; reference "RFC 4279: Pre-Shared Key Ciphersuites for Transport Layer Security (TLS) RFC 6347: Datagram Transport Layer Security version 1.2"; } identity tls-rsa-psk-with-3des-ede-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-RSA-PSK-WITH-3DES-EDE-CBC-SHA"; reference "RFC 4279: Pre-Shared Key Ciphersuites for Transport Layer Security (TLS)"; } identity tls-rsa-psk-with-aes-128-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-RSA-PSK-WITH-AES-128-CBC-SHA"; reference "RFC 4279: Pre-Shared Key Ciphersuites for Transport Layer Security (TLS)"; } identity tls-rsa-psk-with-aes-256-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-RSA-PSK-WITH-AES-256-CBC-SHA"; reference "RFC 4279: Pre-Shared Key Ciphersuites for Transport Layer Security (TLS)"; } identity tls-rsa-with-seed-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-RSA-WITH-SEED-CBC-SHA"; reference "RFC 4162: Addition of SEED Ciphersuites to Transport Layer Security (TLS)"; } identity tls-dh-dss-with-seed-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DH-DSS-WITH-SEED-CBC-SHA"; reference "RFC 4162: Addition of SEED Ciphersuites to Transport Layer Security (TLS)"; } identity tls-dh-rsa-with-seed-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DH-RSA-WITH-SEED-CBC-SHA"; reference "RFC 4162: Addition of SEED Ciphersuites to Transport Layer Security (TLS)"; } identity tls-dhe-dss-with-seed-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DHE-DSS-WITH-SEED-CBC-SHA"; reference "RFC 4162: Addition of SEED Ciphersuites to Transport Layer Security (TLS)"; } identity tls-dhe-rsa-with-seed-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DHE-RSA-WITH-SEED-CBC-SHA"; reference "RFC 4162: Addition of SEED Ciphersuites to Transport Layer Security (TLS)"; } identity tls-dh-anon-with-seed-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-DH-ANON-WITH-SEED-CBC-SHA"; reference "RFC 4162: Addition of SEED Ciphersuites to Transport Layer Security (TLS)"; } identity tls-rsa-with-aes-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-RSA-WITH-AES-128-GCM-SHA256"; reference "RFC 5288: AES-GCM Cipher Suites for TLS"; } identity tls-rsa-with-aes-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-RSA-WITH-AES-256-GCM-SHA384"; reference "RFC 5288: AES-GCM Cipher Suites for TLS"; } identity tls-dhe-rsa-with-aes-128-gcm-sha256 { base cipher-suite-base; description "TLS-DHE-RSA-WITH-AES-128-GCM-SHA256"; reference "RFC 5288: AES-GCM Cipher Suites for TLS"; } identity tls-dhe-rsa-with-aes-256-gcm-sha384 { base cipher-suite-base; description "TLS-DHE-RSA-WITH-AES-256-GCM-SHA384"; reference "RFC 5288: AES-GCM Cipher Suites for TLS"; } identity tls-dh-rsa-with-aes-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-DH-RSA-WITH-AES-128-GCM-SHA256"; reference "RFC 5288: AES-GCM Cipher Suites for TLS"; } identity tls-dh-rsa-with-aes-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-DH-RSA-WITH-AES-256-GCM-SHA384"; reference "RFC 5288: AES-GCM Cipher Suites for TLS"; } identity tls-dhe-dss-with-aes-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-DHE-DSS-WITH-AES-128-GCM-SHA256"; reference "RFC 5288: AES-GCM Cipher Suites for TLS"; } identity tls-dhe-dss-with-aes-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-DHE-DSS-WITH-AES-256-GCM-SHA384"; reference "RFC 5288: AES-GCM Cipher Suites for TLS"; } identity tls-dh-dss-with-aes-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-DH-DSS-WITH-AES-128-GCM-SHA256"; reference "RFC 5288: AES-GCM Cipher Suites for TLS"; } identity tls-dh-dss-with-aes-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-DH-DSS-WITH-AES-256-GCM-SHA384"; reference "RFC 5288: AES-GCM Cipher Suites for TLS"; } identity tls-dh-anon-with-aes-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-DH-ANON-WITH-AES-128-GCM-SHA256"; reference "RFC 5288: AES-GCM Cipher Suites for TLS"; } identity tls-dh-anon-with-aes-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-DH-ANON-WITH-AES-256-GCM-SHA384"; reference "RFC 5288: AES-GCM Cipher Suites for TLS"; } identity tls-psk-with-aes-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-PSK-WITH-AES-128-GCM-SHA256"; reference "RFC 5487: Pre-Shared Key Cipher Suites for Transport Layer Security (TLS) with SHA-256/384 and AES Galois Counter Mode"; } identity tls-psk-with-aes-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-PSK-WITH-AES-256-GCM-SHA384"; reference "RFC 5487: Pre-Shared Key Cipher Suites for Transport Layer Security (TLS) with SHA-256/384 and AES Galois Counter Mode"; } identity tls-dhe-psk-with-aes-128-gcm-sha256 { base cipher-suite-base; description "TLS-DHE-PSK-WITH-AES-128-GCM-SHA256"; reference "RFC 5487: Pre-Shared Key Cipher Suites for Transport Layer Security (TLS) with SHA-256/384 and AES Galois Counter Mode"; } identity tls-dhe-psk-with-aes-256-gcm-sha384 { base cipher-suite-base; description "TLS-DHE-PSK-WITH-AES-256-GCM-SHA384"; reference "RFC 5487: Pre-Shared Key Cipher Suites for Transport Layer Security (TLS) with SHA-256/384 and AES Galois Counter Mode"; } identity tls-rsa-psk-with-aes-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-RSA-PSK-WITH-AES-128-GCM-SHA256"; reference "RFC 5487: Pre-Shared Key Cipher Suites for Transport Layer Security (TLS) with SHA-256/384 and AES Galois Counter Mode"; } identity tls-rsa-psk-with-aes-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-RSA-PSK-WITH-AES-256-GCM-SHA384"; reference "RFC 5487: Pre-Shared Key Cipher Suites for Transport Layer Security (TLS) with SHA-256/384 and AES Galois Counter Mode"; } identity tls-psk-with-aes-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-PSK-WITH-AES-128-CBC-SHA256"; reference "RFC 5487: Pre-Shared Key Cipher Suites for Transport Layer Security (TLS) with SHA-256/384 and AES Galois Counter Mode"; } identity tls-psk-with-aes-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-PSK-WITH-AES-256-CBC-SHA384"; reference "RFC 5487: Pre-Shared Key Cipher Suites for Transport Layer Security (TLS) with SHA-256/384 and AES Galois Counter Mode"; } identity tls-psk-with-null-sha256 { base cipher-suite-base; status deprecated; description "TLS-PSK-WITH-NULL-SHA256"; reference "RFC 5487: Pre-Shared Key Cipher Suites for Transport Layer Security (TLS) with SHA-256/384 and AES Galois Counter Mode"; } identity tls-psk-with-null-sha384 { base cipher-suite-base; status deprecated; description "TLS-PSK-WITH-NULL-SHA384"; reference "RFC 5487: Pre-Shared Key Cipher Suites for Transport Layer Security (TLS) with SHA-256/384 and AES Galois Counter Mode"; } identity tls-dhe-psk-with-aes-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-DHE-PSK-WITH-AES-128-CBC-SHA256"; reference "RFC 5487: Pre-Shared Key Cipher Suites for Transport Layer Security (TLS) with SHA-256/384 and AES Galois Counter Mode"; } identity tls-dhe-psk-with-aes-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-DHE-PSK-WITH-AES-256-CBC-SHA384"; reference "RFC 5487: Pre-Shared Key Cipher Suites for Transport Layer Security (TLS) with SHA-256/384 and AES Galois Counter Mode"; } identity tls-dhe-psk-with-null-sha256 { base cipher-suite-base; status deprecated; description "TLS-DHE-PSK-WITH-NULL-SHA256"; reference "RFC 5487: Pre-Shared Key Cipher Suites for Transport Layer Security (TLS) with SHA-256/384 and AES Galois Counter Mode"; } identity tls-dhe-psk-with-null-sha384 { base cipher-suite-base; status deprecated; description "TLS-DHE-PSK-WITH-NULL-SHA384"; reference "RFC 5487: Pre-Shared Key Cipher Suites for Transport Layer Security (TLS) with SHA-256/384 and AES Galois Counter Mode"; } identity tls-rsa-psk-with-aes-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-RSA-PSK-WITH-AES-128-CBC-SHA256"; reference "RFC 5487: Pre-Shared Key Cipher Suites for Transport Layer Security (TLS) with SHA-256/384 and AES Galois Counter Mode"; } identity tls-rsa-psk-with-aes-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-RSA-PSK-WITH-AES-256-CBC-SHA384"; reference "RFC 5487: Pre-Shared Key Cipher Suites for Transport Layer Security (TLS) with SHA-256/384 and AES Galois Counter Mode"; } identity tls-rsa-psk-with-null-sha256 { base cipher-suite-base; status deprecated; description "TLS-RSA-PSK-WITH-NULL-SHA256"; reference "RFC 5487: Pre-Shared Key Cipher Suites for Transport Layer Security (TLS) with SHA-256/384 and AES Galois Counter Mode"; } identity tls-rsa-psk-with-null-sha384 { base cipher-suite-base; status deprecated; description "TLS-RSA-PSK-WITH-NULL-SHA384"; reference "RFC 5487: Pre-Shared Key Cipher Suites for Transport Layer Security (TLS) with SHA-256/384 and AES Galois Counter Mode"; } identity tls-rsa-with-camellia-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-RSA-WITH-CAMELLIA-128-CBC-SHA256"; reference "RFC 5932: Camellia Cipher Suites for TLS"; } identity tls-dh-dss-with-camellia-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-DH-DSS-WITH-CAMELLIA-128-CBC-SHA256"; reference "RFC 5932: Camellia Cipher Suites for TLS"; } identity tls-dh-rsa-with-camellia-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-DH-RSA-WITH-CAMELLIA-128-CBC-SHA256"; reference "RFC 5932: Camellia Cipher Suites for TLS"; } identity tls-dhe-dss-with-camellia-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA256"; reference "RFC 5932: Camellia Cipher Suites for TLS"; } identity tls-dhe-rsa-with-camellia-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA256"; reference "RFC 5932: Camellia Cipher Suites for TLS"; } identity tls-dh-anon-with-camellia-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-DH-ANON-WITH-CAMELLIA-128-CBC-SHA256"; reference "RFC 5932: Camellia Cipher Suites for TLS"; } identity tls-rsa-with-camellia-256-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-RSA-WITH-CAMELLIA-256-CBC-SHA256"; reference "RFC 5932: Camellia Cipher Suites for TLS"; } identity tls-dh-dss-with-camellia-256-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-DH-DSS-WITH-CAMELLIA-256-CBC-SHA256"; reference "RFC 5932: Camellia Cipher Suites for TLS"; } identity tls-dh-rsa-with-camellia-256-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-DH-RSA-WITH-CAMELLIA-256-CBC-SHA256"; reference "RFC 5932: Camellia Cipher Suites for TLS"; } identity tls-dhe-dss-with-camellia-256-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA256"; reference "RFC 5932: Camellia Cipher Suites for TLS"; } identity tls-dhe-rsa-with-camellia-256-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA256"; reference "RFC 5932: Camellia Cipher Suites for TLS"; } identity tls-dh-anon-with-camellia-256-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-DH-ANON-WITH-CAMELLIA-256-CBC-SHA256"; reference "RFC 5932: Camellia Cipher Suites for TLS"; } identity tls-sm4-gcm-sm3 { base cipher-suite-base; status deprecated; description "TLS-SM4-GCM-SM3"; reference "RFC 8998: ShangMi (SM) Cipher Suites for Transport Layer Security (TLS) Protocol Version 1.3"; } identity tls-sm4-ccm-sm3 { base cipher-suite-base; status deprecated; description "TLS-SM4-CCM-SM3"; reference "RFC 8998: ShangMi (SM) Cipher Suites for Transport Layer Security (TLS) Protocol Version 1.3"; } identity tls-empty-renegotiation-info-scsv { base cipher-suite-base; status deprecated; description "TLS-EMPTY-RENEGOTIATION-INFO-SCSV"; reference "RFC 5746: Transport Layer Security (TLS) Renegotiation Indication Extension"; } identity tls-aes-128-gcm-sha256 { base cipher-suite-base; description "TLS-AES-128-GCM-SHA256"; reference "RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3"; } identity tls-aes-256-gcm-sha384 { base cipher-suite-base; description "TLS-AES-256-GCM-SHA384"; reference "RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3"; } identity tls-chacha20-poly1305-sha256 { base cipher-suite-base; description "TLS-CHACHA20-POLY1305-SHA256"; reference "RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3"; } identity tls-aes-128-ccm-sha256 { base cipher-suite-base; description "TLS-AES-128-CCM-SHA256"; reference "RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3"; } identity tls-aes-128-ccm-8-sha256 { base cipher-suite-base; status deprecated; description "TLS-AES-128-CCM-8-SHA256"; reference "RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3"; } identity tls-fallback-scsv { base cipher-suite-base; status deprecated; description "TLS-FALLBACK-SCSV"; reference "RFC 7507: TLS Fallback Signaling Cipher Suite Value (SCSV) for Preventing Protocol Downgrade Attacks"; } identity tls-ecdh-ecdsa-with-null-sha { base cipher-suite-base; status deprecated; description "TLS-ECDH-ECDSA-WITH-NULL-SHA"; reference "RFC 8422: Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier"; } identity tls-ecdh-ecdsa-with-rc4-128-sha { base cipher-suite-base; status deprecated; description "TLS-ECDH-ECDSA-WITH-RC4-128-SHA"; reference "RFC 8422: Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier RFC 6347: Datagram Transport Layer Security version 1.2"; } identity tls-ecdh-ecdsa-with-3des-ede-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-ECDH-ECDSA-WITH-3DES-EDE-CBC-SHA"; reference "RFC 8422: Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier"; } identity tls-ecdh-ecdsa-with-aes-128-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-ECDH-ECDSA-WITH-AES-128-CBC-SHA"; reference "RFC 8422: Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier"; } identity tls-ecdh-ecdsa-with-aes-256-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-ECDH-ECDSA-WITH-AES-256-CBC-SHA"; reference "RFC 8422: Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier"; } identity tls-ecdhe-ecdsa-with-null-sha { base cipher-suite-base; status deprecated; description "TLS-ECDHE-ECDSA-WITH-NULL-SHA"; reference "RFC 8422: Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier"; } identity tls-ecdhe-ecdsa-with-rc4-128-sha { base cipher-suite-base; status deprecated; description "TLS-ECDHE-ECDSA-WITH-RC4-128-SHA"; reference "RFC 8422: Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier RFC 6347: Datagram Transport Layer Security version 1.2"; } identity tls-ecdhe-ecdsa-with-3des-ede-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-ECDHE-ECDSA-WITH-3DES-EDE-CBC-SHA"; reference "RFC 8422: Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier"; } identity tls-ecdhe-ecdsa-with-aes-128-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA"; reference "RFC 8422: Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier"; } identity tls-ecdhe-ecdsa-with-aes-256-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA"; reference "RFC 8422: Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier"; } identity tls-ecdh-rsa-with-null-sha { base cipher-suite-base; status deprecated; description "TLS-ECDH-RSA-WITH-NULL-SHA"; reference "RFC 8422: Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier"; } identity tls-ecdh-rsa-with-rc4-128-sha { base cipher-suite-base; status deprecated; description "TLS-ECDH-RSA-WITH-RC4-128-SHA"; reference "RFC 8422: Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier RFC 6347: Datagram Transport Layer Security version 1.2"; } identity tls-ecdh-rsa-with-3des-ede-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-ECDH-RSA-WITH-3DES-EDE-CBC-SHA"; reference "RFC 8422: Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier"; } identity tls-ecdh-rsa-with-aes-128-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-ECDH-RSA-WITH-AES-128-CBC-SHA"; reference "RFC 8422: Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier"; } identity tls-ecdh-rsa-with-aes-256-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-ECDH-RSA-WITH-AES-256-CBC-SHA"; reference "RFC 8422: Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier"; } identity tls-ecdhe-rsa-with-null-sha { base cipher-suite-base; status deprecated; description "TLS-ECDHE-RSA-WITH-NULL-SHA"; reference "RFC 8422: Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier"; } identity tls-ecdhe-rsa-with-rc4-128-sha { base cipher-suite-base; status deprecated; description "TLS-ECDHE-RSA-WITH-RC4-128-SHA"; reference "RFC 8422: Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier RFC 6347: Datagram Transport Layer Security version 1.2"; } identity tls-ecdhe-rsa-with-3des-ede-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-ECDHE-RSA-WITH-3DES-EDE-CBC-SHA"; reference "RFC 8422: Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier"; } identity tls-ecdhe-rsa-with-aes-128-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA"; reference "RFC 8422: Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier"; } identity tls-ecdhe-rsa-with-aes-256-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA"; reference "RFC 8422: Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier"; } identity tls-ecdh-anon-with-null-sha { base cipher-suite-base; status deprecated; description "TLS-ECDH-ANON-WITH-NULL-SHA"; reference "RFC 8422: Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier"; } identity tls-ecdh-anon-with-rc4-128-sha { base cipher-suite-base; status deprecated; description "TLS-ECDH-ANON-WITH-RC4-128-SHA"; reference "RFC 8422: Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier RFC 6347: Datagram Transport Layer Security version 1.2"; } identity tls-ecdh-anon-with-3des-ede-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-ECDH-ANON-WITH-3DES-EDE-CBC-SHA"; reference "RFC 8422: Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier"; } identity tls-ecdh-anon-with-aes-128-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-ECDH-ANON-WITH-AES-128-CBC-SHA"; reference "RFC 8422: Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier"; } identity tls-ecdh-anon-with-aes-256-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-ECDH-ANON-WITH-AES-256-CBC-SHA"; reference "RFC 8422: Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier"; } identity tls-srp-sha-with-3des-ede-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-SRP-SHA-WITH-3DES-EDE-CBC-SHA"; reference "RFC 5054: Using SRP for TLS Authentication"; } identity tls-srp-sha-rsa-with-3des-ede-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-SRP-SHA-RSA-WITH-3DES-EDE-CBC-SHA"; reference "RFC 5054: Using SRP for TLS Authentication"; } identity tls-srp-sha-dss-with-3des-ede-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-SRP-SHA-DSS-WITH-3DES-EDE-CBC-SHA"; reference "RFC 5054: Using SRP for TLS Authentication"; } identity tls-srp-sha-with-aes-128-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-SRP-SHA-WITH-AES-128-CBC-SHA"; reference "RFC 5054: Using SRP for TLS Authentication"; } identity tls-srp-sha-rsa-with-aes-128-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-SRP-SHA-RSA-WITH-AES-128-CBC-SHA"; reference "RFC 5054: Using SRP for TLS Authentication"; } identity tls-srp-sha-dss-with-aes-128-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-SRP-SHA-DSS-WITH-AES-128-CBC-SHA"; reference "RFC 5054: Using SRP for TLS Authentication"; } identity tls-srp-sha-with-aes-256-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-SRP-SHA-WITH-AES-256-CBC-SHA"; reference "RFC 5054: Using SRP for TLS Authentication"; } identity tls-srp-sha-rsa-with-aes-256-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-SRP-SHA-RSA-WITH-AES-256-CBC-SHA"; reference "RFC 5054: Using SRP for TLS Authentication"; } identity tls-srp-sha-dss-with-aes-256-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-SRP-SHA-DSS-WITH-AES-256-CBC-SHA"; reference "RFC 5054: Using SRP for TLS Authentication"; } identity tls-ecdhe-ecdsa-with-aes-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256"; reference "RFC 5289: TLS Elliptic Curve Cipher Suites with SHA-256/384 and AES Galois Counter Mode"; } identity tls-ecdhe-ecdsa-with-aes-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384"; reference "RFC 5289: TLS Elliptic Curve Cipher Suites with SHA-256/384 and AES Galois Counter Mode"; } identity tls-ecdh-ecdsa-with-aes-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-ECDH-ECDSA-WITH-AES-128-CBC-SHA256"; reference "RFC 5289: TLS Elliptic Curve Cipher Suites with SHA-256/384 and AES Galois Counter Mode"; } identity tls-ecdh-ecdsa-with-aes-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-ECDH-ECDSA-WITH-AES-256-CBC-SHA384"; reference "RFC 5289: TLS Elliptic Curve Cipher Suites with SHA-256/384 and AES Galois Counter Mode"; } identity tls-ecdhe-rsa-with-aes-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256"; reference "RFC 5289: TLS Elliptic Curve Cipher Suites with SHA-256/384 and AES Galois Counter Mode"; } identity tls-ecdhe-rsa-with-aes-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384"; reference "RFC 5289: TLS Elliptic Curve Cipher Suites with SHA-256/384 and AES Galois Counter Mode"; } identity tls-ecdh-rsa-with-aes-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-ECDH-RSA-WITH-AES-128-CBC-SHA256"; reference "RFC 5289: TLS Elliptic Curve Cipher Suites with SHA-256/384 and AES Galois Counter Mode"; } identity tls-ecdh-rsa-with-aes-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-ECDH-RSA-WITH-AES-256-CBC-SHA384"; reference "RFC 5289: TLS Elliptic Curve Cipher Suites with SHA-256/384 and AES Galois Counter Mode"; } identity tls-ecdhe-ecdsa-with-aes-128-gcm-sha256 { base cipher-suite-base; description "TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256"; reference "RFC 5289: TLS Elliptic Curve Cipher Suites with SHA-256/384 and AES Galois Counter Mode"; } identity tls-ecdhe-ecdsa-with-aes-256-gcm-sha384 { base cipher-suite-base; description "TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384"; reference "RFC 5289: TLS Elliptic Curve Cipher Suites with SHA-256/384 and AES Galois Counter Mode"; } identity tls-ecdh-ecdsa-with-aes-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-ECDH-ECDSA-WITH-AES-128-GCM-SHA256"; reference "RFC 5289: TLS Elliptic Curve Cipher Suites with SHA-256/384 and AES Galois Counter Mode"; } identity tls-ecdh-ecdsa-with-aes-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-ECDH-ECDSA-WITH-AES-256-GCM-SHA384"; reference "RFC 5289: TLS Elliptic Curve Cipher Suites with SHA-256/384 and AES Galois Counter Mode"; } identity tls-ecdhe-rsa-with-aes-128-gcm-sha256 { base cipher-suite-base; description "TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256"; reference "RFC 5289: TLS Elliptic Curve Cipher Suites with SHA-256/384 and AES Galois Counter Mode"; } identity tls-ecdhe-rsa-with-aes-256-gcm-sha384 { base cipher-suite-base; description "TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384"; reference "RFC 5289: TLS Elliptic Curve Cipher Suites with SHA-256/384 and AES Galois Counter Mode"; } identity tls-ecdh-rsa-with-aes-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-ECDH-RSA-WITH-AES-128-GCM-SHA256"; reference "RFC 5289: TLS Elliptic Curve Cipher Suites with SHA-256/384 and AES Galois Counter Mode"; } identity tls-ecdh-rsa-with-aes-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-ECDH-RSA-WITH-AES-256-GCM-SHA384"; reference "RFC 5289: TLS Elliptic Curve Cipher Suites with SHA-256/384 and AES Galois Counter Mode"; } identity tls-ecdhe-psk-with-rc4-128-sha { base cipher-suite-base; status deprecated; description "TLS-ECDHE-PSK-WITH-RC4-128-SHA"; reference "RFC 5489: ECDHE_PSK Ciphersuites for Transport Layer Security (TLS) RFC 6347: Datagram Transport Layer Security version 1.2"; } identity tls-ecdhe-psk-with-3des-ede-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-ECDHE-PSK-WITH-3DES-EDE-CBC-SHA"; reference "RFC 5489: ECDHE_PSK Ciphersuites for Transport Layer Security (TLS)"; } identity tls-ecdhe-psk-with-aes-128-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA"; reference "RFC 5489: ECDHE_PSK Ciphersuites for Transport Layer Security (TLS)"; } identity tls-ecdhe-psk-with-aes-256-cbc-sha { base cipher-suite-base; status deprecated; description "TLS-ECDHE-PSK-WITH-AES-256-CBC-SHA"; reference "RFC 5489: ECDHE_PSK Ciphersuites for Transport Layer Security (TLS)"; } identity tls-ecdhe-psk-with-aes-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA256"; reference "RFC 5489: ECDHE_PSK Ciphersuites for Transport Layer Security (TLS)"; } identity tls-ecdhe-psk-with-aes-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-PSK-WITH-AES-256-CBC-SHA384"; reference "RFC 5489: ECDHE_PSK Ciphersuites for Transport Layer Security (TLS)"; } identity tls-ecdhe-psk-with-null-sha { base cipher-suite-base; status deprecated; description "TLS-ECDHE-PSK-WITH-NULL-SHA"; reference "RFC 5489: ECDHE_PSK Ciphersuites for Transport Layer Security (TLS)"; } identity tls-ecdhe-psk-with-null-sha256 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-PSK-WITH-NULL-SHA256"; reference "RFC 5489: ECDHE_PSK Ciphersuites for Transport Layer Security (TLS)"; } identity tls-ecdhe-psk-with-null-sha384 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-PSK-WITH-NULL-SHA384"; reference "RFC 5489: ECDHE_PSK Ciphersuites for Transport Layer Security (TLS)"; } identity tls-rsa-with-aria-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-RSA-WITH-ARIA-128-CBC-SHA256"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-rsa-with-aria-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-RSA-WITH-ARIA-256-CBC-SHA384"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dh-dss-with-aria-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-DH-DSS-WITH-ARIA-128-CBC-SHA256"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dh-dss-with-aria-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-DH-DSS-WITH-ARIA-256-CBC-SHA384"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dh-rsa-with-aria-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-DH-RSA-WITH-ARIA-128-CBC-SHA256"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dh-rsa-with-aria-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-DH-RSA-WITH-ARIA-256-CBC-SHA384"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dhe-dss-with-aria-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-DHE-DSS-WITH-ARIA-128-CBC-SHA256"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dhe-dss-with-aria-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-DHE-DSS-WITH-ARIA-256-CBC-SHA384"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dhe-rsa-with-aria-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-DHE-RSA-WITH-ARIA-128-CBC-SHA256"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dhe-rsa-with-aria-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-DHE-RSA-WITH-ARIA-256-CBC-SHA384"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dh-anon-with-aria-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-DH-ANON-WITH-ARIA-128-CBC-SHA256"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dh-anon-with-aria-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-DH-ANON-WITH-ARIA-256-CBC-SHA384"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdhe-ecdsa-with-aria-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-ECDSA-WITH-ARIA-128-CBC-SHA256"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdhe-ecdsa-with-aria-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-ECDSA-WITH-ARIA-256-CBC-SHA384"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdh-ecdsa-with-aria-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-ECDH-ECDSA-WITH-ARIA-128-CBC-SHA256"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdh-ecdsa-with-aria-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-ECDH-ECDSA-WITH-ARIA-256-CBC-SHA384"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdhe-rsa-with-aria-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-RSA-WITH-ARIA-128-CBC-SHA256"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdhe-rsa-with-aria-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-RSA-WITH-ARIA-256-CBC-SHA384"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdh-rsa-with-aria-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-ECDH-RSA-WITH-ARIA-128-CBC-SHA256"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdh-rsa-with-aria-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-ECDH-RSA-WITH-ARIA-256-CBC-SHA384"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-rsa-with-aria-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-RSA-WITH-ARIA-128-GCM-SHA256"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-rsa-with-aria-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-RSA-WITH-ARIA-256-GCM-SHA384"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dhe-rsa-with-aria-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-DHE-RSA-WITH-ARIA-128-GCM-SHA256"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dhe-rsa-with-aria-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-DHE-RSA-WITH-ARIA-256-GCM-SHA384"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dh-rsa-with-aria-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-DH-RSA-WITH-ARIA-128-GCM-SHA256"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dh-rsa-with-aria-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-DH-RSA-WITH-ARIA-256-GCM-SHA384"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dhe-dss-with-aria-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-DHE-DSS-WITH-ARIA-128-GCM-SHA256"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dhe-dss-with-aria-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-DHE-DSS-WITH-ARIA-256-GCM-SHA384"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dh-dss-with-aria-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-DH-DSS-WITH-ARIA-128-GCM-SHA256"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dh-dss-with-aria-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-DH-DSS-WITH-ARIA-256-GCM-SHA384"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dh-anon-with-aria-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-DH-ANON-WITH-ARIA-128-GCM-SHA256"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dh-anon-with-aria-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-DH-ANON-WITH-ARIA-256-GCM-SHA384"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdhe-ecdsa-with-aria-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-ECDSA-WITH-ARIA-128-GCM-SHA256"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdhe-ecdsa-with-aria-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-ECDSA-WITH-ARIA-256-GCM-SHA384"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdh-ecdsa-with-aria-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-ECDH-ECDSA-WITH-ARIA-128-GCM-SHA256"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdh-ecdsa-with-aria-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-ECDH-ECDSA-WITH-ARIA-256-GCM-SHA384"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdhe-rsa-with-aria-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-RSA-WITH-ARIA-128-GCM-SHA256"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdhe-rsa-with-aria-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-RSA-WITH-ARIA-256-GCM-SHA384"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdh-rsa-with-aria-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-ECDH-RSA-WITH-ARIA-128-GCM-SHA256"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdh-rsa-with-aria-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-ECDH-RSA-WITH-ARIA-256-GCM-SHA384"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-psk-with-aria-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-PSK-WITH-ARIA-128-CBC-SHA256"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-psk-with-aria-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-PSK-WITH-ARIA-256-CBC-SHA384"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dhe-psk-with-aria-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-DHE-PSK-WITH-ARIA-128-CBC-SHA256"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dhe-psk-with-aria-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-DHE-PSK-WITH-ARIA-256-CBC-SHA384"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-rsa-psk-with-aria-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-RSA-PSK-WITH-ARIA-128-CBC-SHA256"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-rsa-psk-with-aria-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-RSA-PSK-WITH-ARIA-256-CBC-SHA384"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-psk-with-aria-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-PSK-WITH-ARIA-128-GCM-SHA256"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-psk-with-aria-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-PSK-WITH-ARIA-256-GCM-SHA384"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dhe-psk-with-aria-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-DHE-PSK-WITH-ARIA-128-GCM-SHA256"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dhe-psk-with-aria-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-DHE-PSK-WITH-ARIA-256-GCM-SHA384"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-rsa-psk-with-aria-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-RSA-PSK-WITH-ARIA-128-GCM-SHA256"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-rsa-psk-with-aria-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-RSA-PSK-WITH-ARIA-256-GCM-SHA384"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdhe-psk-with-aria-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-PSK-WITH-ARIA-128-CBC-SHA256"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdhe-psk-with-aria-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-PSK-WITH-ARIA-256-CBC-SHA384"; reference "RFC 6209: Addition of the ARIA Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdhe-ecdsa-with-camellia-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-ECDSA-WITH-CAMELLIA-128-CBC-SHA256"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdhe-ecdsa-with-camellia-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-ECDSA-WITH-CAMELLIA-256-CBC-SHA384"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdh-ecdsa-with-camellia-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-ECDH-ECDSA-WITH-CAMELLIA-128-CBC-SHA256"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdh-ecdsa-with-camellia-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-ECDH-ECDSA-WITH-CAMELLIA-256-CBC-SHA384"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdhe-rsa-with-camellia-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-RSA-WITH-CAMELLIA-128-CBC-SHA256"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdhe-rsa-with-camellia-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-RSA-WITH-CAMELLIA-256-CBC-SHA384"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdh-rsa-with-camellia-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-ECDH-RSA-WITH-CAMELLIA-128-CBC-SHA256"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdh-rsa-with-camellia-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-ECDH-RSA-WITH-CAMELLIA-256-CBC-SHA384"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-rsa-with-camellia-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-RSA-WITH-CAMELLIA-128-GCM-SHA256"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-rsa-with-camellia-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dhe-rsa-with-camellia-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-DHE-RSA-WITH-CAMELLIA-128-GCM-SHA256"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dhe-rsa-with-camellia-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-DHE-RSA-WITH-CAMELLIA-256-GCM-SHA384"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dh-rsa-with-camellia-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-DH-RSA-WITH-CAMELLIA-128-GCM-SHA256"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dh-rsa-with-camellia-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-DH-RSA-WITH-CAMELLIA-256-GCM-SHA384"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dhe-dss-with-camellia-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-DHE-DSS-WITH-CAMELLIA-128-GCM-SHA256"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dhe-dss-with-camellia-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-DHE-DSS-WITH-CAMELLIA-256-GCM-SHA384"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dh-dss-with-camellia-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-DH-DSS-WITH-CAMELLIA-128-GCM-SHA256"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dh-dss-with-camellia-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-DH-DSS-WITH-CAMELLIA-256-GCM-SHA384"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dh-anon-with-camellia-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-DH-ANON-WITH-CAMELLIA-128-GCM-SHA256"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dh-anon-with-camellia-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-DH-ANON-WITH-CAMELLIA-256-GCM-SHA384"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdhe-ecdsa-with-camellia-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-ECDSA-WITH-CAMELLIA-128-GCM-SHA256"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdhe-ecdsa-with-camellia-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-ECDSA-WITH-CAMELLIA-256-GCM-SHA384"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdh-ecdsa-with-camellia-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-ECDH-ECDSA-WITH-CAMELLIA-128-GCM-SHA256"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdh-ecdsa-with-camellia-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-ECDH-ECDSA-WITH-CAMELLIA-256-GCM-SHA384"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdhe-rsa-with-camellia-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-RSA-WITH-CAMELLIA-128-GCM-SHA256"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdhe-rsa-with-camellia-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-RSA-WITH-CAMELLIA-256-GCM-SHA384"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdh-rsa-with-camellia-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-ECDH-RSA-WITH-CAMELLIA-128-GCM-SHA256"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdh-rsa-with-camellia-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-ECDH-RSA-WITH-CAMELLIA-256-GCM-SHA384"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-psk-with-camellia-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-PSK-WITH-CAMELLIA-128-GCM-SHA256"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-psk-with-camellia-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-PSK-WITH-CAMELLIA-256-GCM-SHA384"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dhe-psk-with-camellia-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-DHE-PSK-WITH-CAMELLIA-128-GCM-SHA256"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dhe-psk-with-camellia-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-DHE-PSK-WITH-CAMELLIA-256-GCM-SHA384"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-rsa-psk-with-camellia-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-RSA-PSK-WITH-CAMELLIA-128-GCM-SHA256"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-rsa-psk-with-camellia-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-RSA-PSK-WITH-CAMELLIA-256-GCM-SHA384"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-psk-with-camellia-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-PSK-WITH-CAMELLIA-128-CBC-SHA256"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-psk-with-camellia-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-PSK-WITH-CAMELLIA-256-CBC-SHA384"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dhe-psk-with-camellia-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-DHE-PSK-WITH-CAMELLIA-128-CBC-SHA256"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-dhe-psk-with-camellia-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-DHE-PSK-WITH-CAMELLIA-256-CBC-SHA384"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-rsa-psk-with-camellia-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-RSA-PSK-WITH-CAMELLIA-128-CBC-SHA256"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-rsa-psk-with-camellia-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-RSA-PSK-WITH-CAMELLIA-256-CBC-SHA384"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdhe-psk-with-camellia-128-cbc-sha256 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-PSK-WITH-CAMELLIA-128-CBC-SHA256"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-ecdhe-psk-with-camellia-256-cbc-sha384 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-PSK-WITH-CAMELLIA-256-CBC-SHA384"; reference "RFC 6367: Addition of the Camellia Cipher Suites to Transport Layer Security (TLS)"; } identity tls-rsa-with-aes-128-ccm { base cipher-suite-base; status deprecated; description "TLS-RSA-WITH-AES-128-CCM"; reference "RFC 6655: AES-CCM Cipher Suites for TLS"; } identity tls-rsa-with-aes-256-ccm { base cipher-suite-base; status deprecated; description "TLS-RSA-WITH-AES-256-CCM"; reference "RFC 6655: AES-CCM Cipher Suites for TLS"; } identity tls-dhe-rsa-with-aes-128-ccm { base cipher-suite-base; description "TLS-DHE-RSA-WITH-AES-128-CCM"; reference "RFC 6655: AES-CCM Cipher Suites for TLS"; } identity tls-dhe-rsa-with-aes-256-ccm { base cipher-suite-base; description "TLS-DHE-RSA-WITH-AES-256-CCM"; reference "RFC 6655: AES-CCM Cipher Suites for TLS"; } identity tls-rsa-with-aes-128-ccm-8 { base cipher-suite-base; status deprecated; description "TLS-RSA-WITH-AES-128-CCM-8"; reference "RFC 6655: AES-CCM Cipher Suites for TLS"; } identity tls-rsa-with-aes-256-ccm-8 { base cipher-suite-base; status deprecated; description "TLS-RSA-WITH-AES-256-CCM-8"; reference "RFC 6655: AES-CCM Cipher Suites for TLS"; } identity tls-dhe-rsa-with-aes-128-ccm-8 { base cipher-suite-base; status deprecated; description "TLS-DHE-RSA-WITH-AES-128-CCM-8"; reference "RFC 6655: AES-CCM Cipher Suites for TLS"; } identity tls-dhe-rsa-with-aes-256-ccm-8 { base cipher-suite-base; status deprecated; description "TLS-DHE-RSA-WITH-AES-256-CCM-8"; reference "RFC 6655: AES-CCM Cipher Suites for TLS"; } identity tls-psk-with-aes-128-ccm { base cipher-suite-base; status deprecated; description "TLS-PSK-WITH-AES-128-CCM"; reference "RFC 6655: AES-CCM Cipher Suites for TLS"; } identity tls-psk-with-aes-256-ccm { base cipher-suite-base; status deprecated; description "TLS-PSK-WITH-AES-256-CCM"; reference "RFC 6655: AES-CCM Cipher Suites for TLS"; } identity tls-dhe-psk-with-aes-128-ccm { base cipher-suite-base; description "TLS-DHE-PSK-WITH-AES-128-CCM"; reference "RFC 6655: AES-CCM Cipher Suites for TLS"; } identity tls-dhe-psk-with-aes-256-ccm { base cipher-suite-base; description "TLS-DHE-PSK-WITH-AES-256-CCM"; reference "RFC 6655: AES-CCM Cipher Suites for TLS"; } identity tls-psk-with-aes-128-ccm-8 { base cipher-suite-base; status deprecated; description "TLS-PSK-WITH-AES-128-CCM-8"; reference "RFC 6655: AES-CCM Cipher Suites for TLS"; } identity tls-psk-with-aes-256-ccm-8 { base cipher-suite-base; status deprecated; description "TLS-PSK-WITH-AES-256-CCM-8"; reference "RFC 6655: AES-CCM Cipher Suites for TLS"; } identity tls-psk-dhe-with-aes-128-ccm-8 { base cipher-suite-base; status deprecated; description "TLS-PSK-DHE-WITH-AES-128-CCM-8"; reference "RFC 6655: AES-CCM Cipher Suites for TLS"; } identity tls-psk-dhe-with-aes-256-ccm-8 { base cipher-suite-base; status deprecated; description "TLS-PSK-DHE-WITH-AES-256-CCM-8"; reference "RFC 6655: AES-CCM Cipher Suites for TLS"; } identity tls-ecdhe-ecdsa-with-aes-128-ccm { base cipher-suite-base; status deprecated; description "TLS-ECDHE-ECDSA-WITH-AES-128-CCM"; reference "RFC 7251: AES-CCM ECC Cipher Suites for TLS"; } identity tls-ecdhe-ecdsa-with-aes-256-ccm { base cipher-suite-base; status deprecated; description "TLS-ECDHE-ECDSA-WITH-AES-256-CCM"; reference "RFC 7251: AES-CCM ECC Cipher Suites for TLS"; } identity tls-ecdhe-ecdsa-with-aes-128-ccm-8 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8"; reference "RFC 7251: AES-CCM ECC Cipher Suites for TLS"; } identity tls-ecdhe-ecdsa-with-aes-256-ccm-8 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-ECDSA-WITH-AES-256-CCM-8"; reference "RFC 7251: AES-CCM ECC Cipher Suites for TLS"; } identity tls-eccpwd-with-aes-128-gcm-sha256 { base cipher-suite-base; status deprecated; description "TLS-ECCPWD-WITH-AES-128-GCM-SHA256"; reference "RFC 8492: Secure Password Ciphersuites for Transport Layer Security (TLS)"; } identity tls-eccpwd-with-aes-256-gcm-sha384 { base cipher-suite-base; status deprecated; description "TLS-ECCPWD-WITH-AES-256-GCM-SHA384"; reference "RFC 8492: Secure Password Ciphersuites for Transport Layer Security (TLS)"; } identity tls-eccpwd-with-aes-128-ccm-sha256 { base cipher-suite-base; status deprecated; description "TLS-ECCPWD-WITH-AES-128-CCM-SHA256"; reference "RFC 8492: Secure Password Ciphersuites for Transport Layer Security (TLS)"; } identity tls-eccpwd-with-aes-256-ccm-sha384 { base cipher-suite-base; status deprecated; description "TLS-ECCPWD-WITH-AES-256-CCM-SHA384"; reference "RFC 8492: Secure Password Ciphersuites for Transport Layer Security (TLS)"; } identity tls-ecdhe-rsa-with-chacha20-poly1305-sha256 { base cipher-suite-base; description "TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256"; reference "RFC 7905: ChaCha20-Poly1305 Cipher Suites for Transport Layer Security (TLS)"; } identity tls-ecdhe-ecdsa-with-chacha20-poly1305-sha256 { base cipher-suite-base; description "TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256"; reference "RFC 7905: ChaCha20-Poly1305 Cipher Suites for Transport Layer Security (TLS)"; } identity tls-dhe-rsa-with-chacha20-poly1305-sha256 { base cipher-suite-base; description "TLS-DHE-RSA-WITH-CHACHA20-POLY1305-SHA256"; reference "RFC 7905: ChaCha20-Poly1305 Cipher Suites for Transport Layer Security (TLS)"; } identity tls-psk-with-chacha20-poly1305-sha256 { base cipher-suite-base; status deprecated; description "TLS-PSK-WITH-CHACHA20-POLY1305-SHA256"; reference "RFC 7905: ChaCha20-Poly1305 Cipher Suites for Transport Layer Security (TLS)"; } identity tls-ecdhe-psk-with-chacha20-poly1305-sha256 { base cipher-suite-base; description "TLS-ECDHE-PSK-WITH-CHACHA20-POLY1305-SHA256"; reference "RFC 7905: ChaCha20-Poly1305 Cipher Suites for Transport Layer Security (TLS)"; } identity tls-dhe-psk-with-chacha20-poly1305-sha256 { base cipher-suite-base; description "TLS-DHE-PSK-WITH-CHACHA20-POLY1305-SHA256"; reference "RFC 7905: ChaCha20-Poly1305 Cipher Suites for Transport Layer Security (TLS)"; } identity tls-rsa-psk-with-chacha20-poly1305-sha256 { base cipher-suite-base; status deprecated; description "TLS-RSA-PSK-WITH-CHACHA20-POLY1305-SHA256"; reference "RFC 7905: ChaCha20-Poly1305 Cipher Suites for Transport Layer Security (TLS)"; } identity tls-ecdhe-psk-with-aes-128-gcm-sha256 { base cipher-suite-base; description "TLS-ECDHE-PSK-WITH-AES-128-GCM-SHA256"; reference "RFC 8442: ECDHE_PSK with AES-GCM and AES-CCM Cipher Suites"; } identity tls-ecdhe-psk-with-aes-256-gcm-sha384 { base cipher-suite-base; description "TLS-ECDHE-PSK-WITH-AES-256-GCM-SHA384"; reference "RFC 8442: ECDHE_PSK with AES-GCM and AES-CCM Cipher Suites"; } identity tls-ecdhe-psk-with-aes-128-ccm-8-sha256 { base cipher-suite-base; status deprecated; description "TLS-ECDHE-PSK-WITH-AES-128-CCM-8-SHA256"; reference "RFC 8442: ECDHE_PSK with AES-GCM and AES-CCM Cipher Suites"; } identity tls-ecdhe-psk-with-aes-128-ccm-sha256 { base cipher-suite-base; description "TLS-ECDHE-PSK-WITH-AES-128-CCM-SHA256"; reference "RFC 8442: ECDHE_PSK with AES-GCM and AES-CCM Cipher Suites"; } } --Apple-Mail=_28657206-5472-4BAB-9A55-18A2C40E5213 Content-Transfer-Encoding: 7bit Content-Type: text/html; charset=us-ascii
--Apple-Mail=_28657206-5472-4BAB-9A55-18A2C40E5213-- --Apple-Mail=_DD345D3C-EFE6-41C3-9A1B-7AE4FB6AA740-- From nobody Mon Jun 14 10:58:56 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B5003A2CB7 for ; Mon, 14 Jun 2021 10:58:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.596 X-Spam-Level: X-Spam-Status: No, score=-9.596 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=VMOhrQK+; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=UZz+eAww Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pnRP4K_89KTP for ; Mon, 14 Jun 2021 10:58:41 -0700 (PDT) Received: from alln-iport-1.cisco.com (alln-iport-1.cisco.com [173.37.142.88]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 81BC43A2C8E for ; Mon, 14 Jun 2021 10:58:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3603; q=dns/txt; s=iport; t=1623693521; x=1624903121; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=8xegNTucZ8qeVbWQNJ6qvwTvQSYoqLRye1PNdcu6FM8=; b=VMOhrQK+GPKavLp43bLtqS7tcK5v6LbVeD9pz2X6peI1p2s4EVjZPGhq fcuOPTqIJi9SX+lIFqs52/t0JxLKbJseNNV64gJH3CjTcLbTQcPJjG4E3 X5CfMPZBt0AdjO0LTIEv9pJOHUd5L2lH1MXT+96A8bAAe5NeuMBfRlYO4 w=; X-IPAS-Result: =?us-ascii?q?A0CXAgBMmMdgl4sNJK1RCYEJgVeBU1F+WjcxC4gFA4U5i?= =?us-ascii?q?HwDmhiBLoElA1QLAQEBDQEBNQoCBAEBgRiDOAKCaQIlNQgOAgQBAQEBAwIDA?= =?us-ascii?q?QEBAQUBAQUBAQECAQYEFAEBAQEBAQEBaIVoDYZFAQEBAwEMBi4BATcBBAsCA?= =?us-ascii?q?QgVMTIlAgQBDQUIGoJPAYJVAw4hAQ6deAGBOgKKH3iBNIEBggcBAQYEBIUpG?= =?us-ascii?q?IIxAwaBOoJ7hnWDeiccgUlEgRVDgmA+hBgUGAKDS4Iuglo+BoEKIQoGgWpBO?= =?us-ascii?q?gcIu20KgxyeDxKlZJVSnw6FIgIEAgQFAg4BAQaBVgE2gVtwFTuCaVAXAg6OK?= =?us-ascii?q?w0Jg06FFIVKcwI2AgYKAQEDCXyHUwGBEAEB?= IronPort-PHdr: A9a23:BoxmpBd8caTxmktUtKF+A67TlGM/rYqcDmcuAtIPlLtSaamluZLvI B+X6fZsiQrPWoPWo7JBhvHNuq/tEWoH/d6asX8EfZANMn1NicgfkwE6RsLQD0r9Ia31ZjAhE cIEUlJ5rDm3NEFPE5P4YFvf6nS58T8VHED5Mgx4buT4E4LflYK5zee3rpbSeA5PwjG6ZOAaE Q== IronPort-HdrOrdr: A9a23:8gTYRKAd+ab83IzlHegQsceALOsnbusQ8zAXPh9KKCC9I/b3qy nxppsmPEfP+UkssHFJo6HmBEDyewKjyXcT2/hQAV7CZnimhILMFuFfBOTZskbd8kHFh4tgPO JbAtRD4b7LfBtHZKTBkXOF+r8bqbHtms3F9ISurUuFDzsaFp2IhD0JbDpzZ3cGPDWucqBJba Z0iPA3wwaISDAyVICWF3MFV+/Mq5ngj5T9eyMLABYh9U2nkS6owKSSKWnb4j4uFxd0hZsy+2 nMlAL0oo+5teug9xPa32jPq7xLhdrazMdZDsDksLlRFtyssHftWG1SYczFgNkHmpD31L/sqq iVn/4UBbU115oWRBDvnfKi4Xi77N9k0Q6S9bbRuwqSnSW+fkNmNyKE7rgpLScwLCEbzY1BOe twrhGknosSAhXakCvn4d/UExlsi0qvuHIn1fUelnpFTOIlGfJsRKEkjQho+a07bWjHAUEcYZ 9TJdCZ4OwTfUKRbnjfsGUqyNuwXm4rFhPDRkQZoMSa3zVfgXg8liIjtYMit2ZF8Ih4R4hP5u zCPKgtnLZSTtUOZaY4AOsaW8O4BmHEXBqJOmOPJlbsEr0BJhv22tLKCXUOlamXkbkzvdUPcb j6ISdlXF8JCgvT4Je1reh2Gzj2MRKAtBrWu7Nj26Q= X-IronPort-Anti-Spam-Filtered: true X-IronPort-AV: E=Sophos;i="5.83,273,1616457600"; d="scan'208";a="706566936" Received: from alln-core-6.cisco.com ([173.36.13.139]) by alln-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 14 Jun 2021 17:58:40 +0000 Received: from mail.cisco.com (xbe-aln-006.cisco.com [173.36.7.21]) by alln-core-6.cisco.com (8.15.2/8.15.2) with ESMTPS id 15EHwdVh001085 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 14 Jun 2021 17:58:40 GMT Received: from xfe-aln-005.cisco.com (173.37.135.125) by xbe-aln-006.cisco.com (173.36.7.21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.792.15; Mon, 14 Jun 2021 12:58:39 -0500 Received: from xfe-rcd-001.cisco.com (173.37.227.249) by xfe-aln-005.cisco.com (173.37.135.125) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.792.15; Mon, 14 Jun 2021 12:58:39 -0500 Received: from NAM04-MW2-obe.outbound.protection.outlook.com (72.163.14.9) by xfe-rcd-001.cisco.com (173.37.227.249) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.792.15 via Frontend Transport; Mon, 14 Jun 2021 12:58:39 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ZpUSacfk3XMKTKmlFO5aYq7BUNDmFfhbR5bLCY9ge51bs1GWoIjgzmMSTN2LN3Ef02bLhWxizdBlpBG85LJq9UHmefPEC9KXFOw+vWj3I3kdTOR7Azxx5SfjJmprFM3CT3/7/kwxMjChQ+eiHye15827C5BmwNCs8kE54PygcVe12h1ZtmKkTnd7G9UR1hFx0Cq86WIWYOBDClONMl2ubwE/QNR79Gfps37zk5dLzsd/hDhOVpLpgotFSLCAo0j/3EOhMB4W25qZKw3tIL5Kr5C58+5xFBj0aWGanGzlHio7JV3uiLncuXThEjWi8aeKy8xukUuQeSfWuSOE0wDtlg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=6RPsN2eQxkkJQq2fQDubH2OxTvGG79PBjMS7+8gWzO0=; b=YRm/j6K3Hpi2oSLY2rlSpC2pMVBu0VhrxKyv2Vz3u5UbWDjYeeL8V7+FDXSi9eKpiVdwtYMOz9gCyiAK2HCS2eQ0FJxUTTNq80otAStPHoa8Zbz1Y8LgVbl2/RS+Hguho1l6spLqD8hFMiXSf+QEtuAF5yIVj41mU9Am89I8mmhgaPcRv0h4wcpZCRm6l+t0t8yQx61nEf/Lkb4+qVnCRQ08TR+mykd7qp/0b9sAr5M4ujbrX8n9tZ8ueKGUECLnR6nng5hm8CcgP+xHUgXZ9yzvlZTJT6LtruUXZkBFGCPGoXwsQ3iG1L/4JNTx67b0uWQG1r3nn7FxuV6sa3SMPQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=6RPsN2eQxkkJQq2fQDubH2OxTvGG79PBjMS7+8gWzO0=; b=UZz+eAwwA2/zPaFCoxcyEfFvDfp0ZftJdPYiYDiDD6/mM/WcdcDVzPQcPeRR01sTx1H8/yf4/edN5e6fbh7YPq6QmzxfD1rUOK2mBcB83Goa1egIzpTmviw1IzZE5wb0Ld89VJGkdNp0Q05uj56VQqL3KPsMMl97BR2uXgG5Z5w= Received: from MWHPR11MB2032.namprd11.prod.outlook.com (2603:10b6:300:2b::13) by CO1PR11MB4977.namprd11.prod.outlook.com (2603:10b6:303:6d::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4219.22; Mon, 14 Jun 2021 17:58:38 +0000 Received: from MWHPR11MB2032.namprd11.prod.outlook.com ([fe80::852d:44c4:b446:2dad]) by MWHPR11MB2032.namprd11.prod.outlook.com ([fe80::852d:44c4:b446:2dad%8]) with mapi id 15.20.4219.025; Mon, 14 Jun 2021 17:58:38 +0000 From: "Per Andersson (perander)" To: Kent Watsen , Qin Wu , tom petch CC: "netconf@ietf.org" Thread-Topic: [netconf] Create IANA-defined modules? Thread-Index: AQHXUplk3fGBKyh7AE2HQh20ygChC6sBmjaAgAwy27OABgCaAIAAFQOi Date: Mon, 14 Jun 2021 17:58:38 +0000 Message-ID: References: <01000179aa118e62-0d8dd2b2-f001-4ff3-9d10-4b4e15098055-000000@email.amazonses.com> <5F969C92-1A1F-4983-878F-9C222C3DEC05@cisco.com> <01000179cfb08608-c708dd5b-c015-4608-986f-52d5d013153b-000000@email.amazonses.com> , <0100017a0b54a42f-d3785582-968d-4f2f-bf41-1ff336bff051-000000@email.amazonses.com> In-Reply-To: <0100017a0b54a42f-d3785582-968d-4f2f-bf41-1ff336bff051-000000@email.amazonses.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: watsen.net; dkim=none (message not signed) header.d=none;watsen.net; dmarc=none action=none header.from=cisco.com; x-originating-ip: [64.103.40.22] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: f7978e83-2fc0-4c40-09fc-08d92f5e0992 x-ms-traffictypediagnostic: CO1PR11MB4977: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:MWHPR11MB2032.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(39860400002)(346002)(376002)(366004)(396003)(136003)(2906002)(4326008)(52536014)(38100700002)(7696005)(8676002)(316002)(122000001)(966005)(55016002)(9686003)(91956017)(186003)(76116006)(66946007)(66446008)(83380400001)(66556008)(66476007)(6506007)(71200400001)(33656002)(64756008)(110136005)(478600001)(8936002)(86362001)(5660300002)(26005); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?Windows-1252?Q?4uwQK0nhmQ2MrVRYGKm9IQArGQ1uLmGXm7ESx8mF2stwRb5qYqGDBFjm?= =?Windows-1252?Q?LzgZvJ3qFdKTBAJOp6MawkAUG9qfjx15aLwajoFh08gw8Wt8eQZ3a2wU?= =?Windows-1252?Q?n6Mb5KRo/xkaUmzNAacFx0MFw1G1AqEJIGr3dHqFDbVT+sWwG9pp21KE?= =?Windows-1252?Q?cxWE2/5SP32aMTCAMui7IjTIe67oj2TQbr2Vr51/E07DfWrPX9/eYGHt?= =?Windows-1252?Q?cp3QtvAKbDjBzJLWM55ul9loPyPDXzjA4mOhwF2XRSCinm4K9i15e1Vf?= =?Windows-1252?Q?i/X8aVvVnBVI2s33w+AX9FTrJWPFzBIGNCqgATYKxpzSOYL0qTsXJ2e4?= =?Windows-1252?Q?E5tIfG0vpIdOEulZ0Jtnnca2wkScv/dExc+Ps8G+vT9BiryOIlAlkyTF?= =?Windows-1252?Q?Pnz5k3fYMS0KYAOS/k1ISnaOusBobfsu6ozLnP/oAm1tJ+bz1xhwFtIF?= =?Windows-1252?Q?2aXawNSRW5ZWs+8C+OwFTNL+ngUew6hLuUwTrGZRyw5/M6eLfwibFtCV?= =?Windows-1252?Q?MmY3sYoOiu9n3S/FugdokEwk1CGzcfadDdeFGDrTJRMRDgB+8Qp1mutX?= =?Windows-1252?Q?T1gdXdqZdqpqrhFZL2lvelQ51HnF+xHNrGzDIHECsWt7Z4eU4rO9yw9G?= =?Windows-1252?Q?pk/NABiVPPQZrfxGym5a9spybWPBep+qgdgMTvba4Ra5CstVueBLVNj3?= =?Windows-1252?Q?M6w2kdedv4ArAXmjAfV6bBtZVb68oVzQjICnm9avh2WwCBzatlt4SA19?= =?Windows-1252?Q?xs7Lm7955QKN/PA4M1Q4JGOR7wvXRn4MNm7/snehiLT06NNhsxEdJhFI?= =?Windows-1252?Q?Aq8eNo4pX4wgV8Yfy49+yNdN3pbpPLBFyPf0ZjaAZ6sJjUdZ9LWT3omh?= =?Windows-1252?Q?f5NbSO1qKBPVqUSZbYJWW8LvkfR43aJxig+lClZYimO+eW3sS4llu8VZ?= =?Windows-1252?Q?/X1aGmUO545+yPlttmGnIA5rxi+lxLNRvRH3XcwsCdHi9M9tZ9QsKva5?= =?Windows-1252?Q?sey0xaCBl4LVC7U+Z1363nOA7RpmTwUgN77T8Ktuflh9NGy80KrONhos?= =?Windows-1252?Q?oeHF57T6clMpbuCPoDlENtH8AcuVHPtREtMtCsGjnfgplw60Ol39jwAO?= =?Windows-1252?Q?PgUO7q+jYgcDxLTNSd4I7QqHjr6K8JTMVKP5wMMixcAh8iKgnUcjkJyC?= =?Windows-1252?Q?wjyqjrO/exk6XgxiPotGSW93FagkFFK3OOXjrYOJD9MA1obM3r/CB0AD?= =?Windows-1252?Q?GEp7PbO7+rettZTKWAbEybl/dU4GEF2svoN5oFHtY1lBhvKZ6NLVPJEb?= =?Windows-1252?Q?5nLALZwfLCZmdHgFZ0Nh3I64XALc8YUo7BjuugOc2eKVm92lYqJCbOCj?= =?Windows-1252?Q?Sq9DVBSZ8ufLZhK81zweoHLbmPnnaW5RiDA=3D?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MWHPR11MB2032.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: f7978e83-2fc0-4c40-09fc-08d92f5e0992 X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Jun 2021 17:58:38.3133 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: KLz6a0hUenCmavP8OVM/S2T1ns1Vf9Lupb5ESAGna5dgADaTVG7dN/OV8zK/zU9lqhnYwb9MsVPQRKcc/i/DPA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO1PR11MB4977 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.21, xbe-aln-006.cisco.com X-Outbound-Node: alln-core-6.cisco.com Archived-At: Subject: Re: [netconf] Create IANA-defined modules? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Jun 2021 17:58:54 -0000 From: Kent Watsen on Monday, June 14, 2021 18:22:=0A= >=0A= > Since the discussion has been mostly about *how* to create the IANA-defin= ed module (not *if* we should, e.g., dropping the work for some future effo= rt to pickup), I take it that folks believe having the ability for configur= e supported-algorithms is needed now. As no one offered to help (:sigh:, a= nd people wonder why this work takes so long), I wrote the attached script = that creates the attached module directly from the data obtained from the I= ANA-maintained "TLS Cipher Suites" sub-registry of the "Transport Layer Sec= urity (TLS) Parameters=94 registry here: https://www.iana.org/assignments/t= ls-parameters/tls-parameters.xhtml. The resulting module is also attached.= =0A= > =0A= > Tom, you will be happy to know that the all the identity names begin with= =93tls=94 :) Also, there are no =93feature=94 statements, since there = is nothing in the source registry that can be used to generate =93if-featur= e=94 statements. Out of the 347 algorithms listed in the registry, 310 al= gorithms are marked =93status deprecated=94 (driven by the =93recommended= =94 column having value =92N=92), and 7 algorithms are marked =93status obs= olete=94 (driven by the "SC-tls-des-idea-ciphers-to-historic=94 reference).= =0A= =0A= I was on the brink to volunteer, sorry that I didn't raise my voice in time= .=0A= Good work, nonetheless.=0A= =0A= =0A= > Regarding if to use a =93config false=94 tree or an RPC, Per makes an in= teresting point about =93must" and =93when=94 expressions, though I do wond= er how that would play out in practice, as said expressions would (presumab= ly) be defined under =93config true=94 nodes and hence couldn't reference t= he =93config false=94 values? Maybe Per could say some more about the use-= case in mind.=0A= =0A= I saw a use case where some subset of the configuration tree=0A= (e.g. a list of devices or restconf/netconf tls servers) could have=0A= a schema when expression depending on the server's supported=0A= algorithms.=0A= =0A= However, I did not think it through that they were config nodes that=0A= were going to access non-config nodes.=0A= =0A= =0A= > No one responded regarding if we should use identities or enumerations. = The attached sample module uses identities, but it would be an easy thing t= o change the script to generated enumerations - thoughts?=0A= >=0A= > Again: if =93identity=94 statements are used, and the module is *implemen= ted*, it would NOT mean the server supports all (or even any) of the algori= thms. This would only be known if the algorithm appears in the =93supported= algorithms=94 "config false=94 list. Does anyone feel this is a misuse of= YANG? IMO, YANG identities needing to be implemented is not very useful i= n practice, and so I don=92t view that as a negative in the slightest.=0A= =0A= AFAICS identities and enumerations support the same set of=0A= sub-statements .=0A= =0A= Using identities it would be possible to derive them from=0A= other identities, and by doing so encode some more=0A= information (e.g. is it a symmetric or asymmetric key etc).=0A= This could hold some value.=0A= =0A= >From reading RFC 7950, it looks to me like identities are=0A= much like atoms or named constants; their existance in=0A= an implemented module does not imply or guarantee any=0A= working (code/server) implementation. (Correct me if I'm=0A= wrong here.)=0A= =0A= I think identities should be used.=0A= =0A= =0A= --=0A= Per= From nobody Mon Jun 14 14:56:22 2021 Return-Path: <0100017a0c8674c2-3979d21e-8e8a-4c39-a2ae-e3f110eecc5f-000000@amazonses.watsen.net> X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E70A13A0E93 for ; Mon, 14 Jun 2021 14:56:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PTqNaP8FI6xO for ; Mon, 14 Jun 2021 14:56:18 -0700 (PDT) Received: from a8-33.smtp-out.amazonses.com (a8-33.smtp-out.amazonses.com [54.240.8.33]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E3CEF3A0E88 for ; Mon, 14 Jun 2021 14:56:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1623707776; h=From:Message-Id:Content-Type:Mime-Version:Subject:Date:In-Reply-To:Cc:To:References:Feedback-ID; bh=BBW44QPFbr/7YoEUymF/QpLxN5s6fnt02VXa7H2nAfs=; b=PPuUZCL0oQOVgg9vxNz+FSoNqsQlgwCMnajnbBR0Y64hWieyo2r2grJ4WSTIZGgo 3bxllNYHt9txu+pA2fwUjO1rHz/0Jq07TmEc7Xy2/nI3JgTI6IG8s1jP59fBbLdM0cD PU2LfJ1rP4ex1gW+iPyDFXtGkffSOAZ9vRsFnZdI= From: Kent Watsen Message-ID: <0100017a0c8674c2-3979d21e-8e8a-4c39-a2ae-e3f110eecc5f-000000@email.amazonses.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_4CD7F590-5BFA-4BFC-A7ED-4C7DA0AF4BB3" Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.100.0.2.22\)) Date: Mon, 14 Jun 2021 21:56:16 +0000 In-Reply-To: <0ca926471ac04ca3a44c0351d5bb0fe3@huawei.com> Cc: "netconf@ietf.org" To: "maqiufang (A)" , Qin Wu , Zmail References: <8c4abbe6e738407194d787612c8a2e9d@huawei.com> <0ca926471ac04ca3a44c0351d5bb0fe3@huawei.com> X-Mailer: Apple Mail (2.3654.100.0.2.22) Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES X-SES-Outgoing: 2021.06.14-54.240.8.33 Archived-At: Subject: Re: [netconf] Capability-fetching mechanisms X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Jun 2021 21:56:20 -0000 --Apple-Mail=_4CD7F590-5BFA-4BFC-A7ED-4C7DA0AF4BB3 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi Qin, Alex, Qiufang, > As I understood in the precedent mails, Qin is looking for a common = protocol to exchange these capabilities over all notifications drafts.=20= > =20 > [Qin]: See above, as I clarified, I think we can focus on common data = model for data export features instead of common protocol, we will = leave protocol extension to each transport specific notif draft, does = this make sense? > =20 > [Qiufang Ma] There is one more point that I would like to add here, = please note that the capability exposure mechanism defined in = data-export-capability draft is leveraged by YANG instance file.=20 > That's to say, the capabilities are documented in a standard-format = file which could be accessed by any file access method and protocol. > =20 > Maybe it is better to define this capabilities export transport = dependent protocol on another draft ? Or on the data-export-capabilities = draft, but it is defined as transport agnostic=E2=80=A6 > =20 > [Qin]: Agree. See more clarification above. > Any thoughts ? Mahesh and I generally agree with the idea of a common response payload = format that could be conveyed via draft-specific transports. We further = understand that there is a proposal to use the YANG Instance File Format = as the common format. However, we do not yet fully understand what the = response might look like for the =E2=80=9Chttps-notif=E2=80=9D draft = were it to use the YANG Instance File Format. Could one of you send an = example of what that response might look like matching the contents of = the example found in Section 3.4 in the "https-notif=E2=80=9D draft? Kent and Mahesh --Apple-Mail=_4CD7F590-5BFA-4BFC-A7ED-4C7DA0AF4BB3 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hi = Qin, Alex, Qiufang,


As I understood in the precedent mails, Qin is looking for a = common protocol to exchange these capabilities over all notifications = drafts. 
 
[Qin]: See above, as I = clarified, I think we can focus on common data model for data export = features instead of common protocol,  we will leave protocol = extension to each transport specific notif draft, does this make = sense?
 
[Qiufang Ma] There is one more point that I would like to add = here, please note that the capability exposure mechanism defined in = data-export-capability draft is leveraged by YANG instance file. 
 That's = to say, the capabilities are documented in a standard-format file which = could be accessed by any file access method and protocol.
 
Maybe it is better to define = this capabilities export transport dependent protocol on another draft ? = Or on the data-export-capabilities draft, but it is defined as = transport agnostic=E2=80=A6<= o:p class=3D"">
 
[Qin]: Agree. See more = clarification above.
Any thoughts = ?


Mahesh and I generally agree with the idea of a = common response payload format that could be conveyed via draft-specific = transports.  We further understand that there is a proposal to use = the YANG Instance File Format as the common format.  However, we do = not yet fully understand what the response might look like for the = =E2=80=9Chttps-notif=E2=80=9D draft were it to use the YANG Instance = File Format.   Could one of you send an example of what that = response might look like matching the contents of the example found in = Section 3.4 in the "https-notif=E2=80=9D draft?

Kent and Mahesh

= --Apple-Mail=_4CD7F590-5BFA-4BFC-A7ED-4C7DA0AF4BB3-- From nobody Mon Jun 14 22:54:26 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 03E0D3A2112 for ; Mon, 14 Jun 2021 22:54:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2wKLYRw7BspZ for ; Mon, 14 Jun 2021 22:54:13 -0700 (PDT) Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B3E1B3A2110 for ; Mon, 14 Jun 2021 22:54:12 -0700 (PDT) Received: from fraeml703-chm.china.huawei.com (unknown [172.18.147.226]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4G3y4t6mP2z6D9h3 for ; Tue, 15 Jun 2021 13:47:10 +0800 (CST) Received: from dggeml751-chm.china.huawei.com (10.1.199.150) by fraeml703-chm.china.huawei.com (10.206.15.52) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2176.2; Tue, 15 Jun 2021 07:54:08 +0200 Received: from dggeml753-chm.china.huawei.com (10.1.199.152) by dggeml751-chm.china.huawei.com (10.1.199.150) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2176.2; Tue, 15 Jun 2021 13:54:06 +0800 Received: from dggeml753-chm.china.huawei.com ([10.1.199.152]) by dggeml753-chm.china.huawei.com ([10.1.199.152]) with mapi id 15.01.2176.012; Tue, 15 Jun 2021 13:54:06 +0800 From: Qin Wu To: Kent Watsen , tom petch , "Per Andersson (perander)" CC: "netconf@ietf.org" Thread-Topic: [netconf] Create IANA-defined modules? Thread-Index: AddhqjRkR+YrczgKwUaLplcUh/rY0A== Date: Tue, 15 Jun 2021 05:54:06 +0000 Message-ID: <48e9f39ba2df45bd96c1dcc400765c14@huawei.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.136.123.117] Content-Type: multipart/alternative; boundary="_000_48e9f39ba2df45bd96c1dcc400765c14huaweicom_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [netconf] Create IANA-defined modules? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Jun 2021 05:54:23 -0000 --_000_48e9f39ba2df45bd96c1dcc400765c14huaweicom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 5Y+R5Lu25Lq6OiBLZW50IFdhdHNlbiBbbWFpbHRvOmtlbnQraWV0ZkB3YXRzZW4ubmV0XQ0K5Y+R 6YCB5pe26Ze0OiAyMDIx5bm0NuaciDE15pelIDA6MjINCuaUtuS7tuS6ujogUWluIFd1IDxiaWxs Lnd1QGh1YXdlaS5jb20+OyB0b20gcGV0Y2ggPGlldGZjQGJ0Y29ubmVjdC5jb20+OyBQZXIgQW5k ZXJzc29uIChwZXJhbmRlcikgPHBlcmFuZGVyQGNpc2NvLmNvbT4NCuaKhOmAgTogbmV0Y29uZkBp ZXRmLm9yZw0K5Li76aKYOiBSZTogW25ldGNvbmZdIENyZWF0ZSBJQU5BLWRlZmluZWQgbW9kdWxl cz8NCg0KVGhhbmsgeW91IFFpbiwgVG9tLCBhbmQgUGVyIGZvciB0aGUgcmVzcG9uc2VzIHRvIG15 IGxhc3QgcG9zdOKApnRoaXMgbWVzc2FnZSBhZGRyZXNzZXMgdGhlbSBhbGwuDQoNClNpbmNlIHRo ZSBkaXNjdXNzaW9uIGhhcyBiZWVuIG1vc3RseSBhYm91dCAqaG93KiB0byBjcmVhdGUgdGhlIElB TkEtZGVmaW5lZCBtb2R1bGUgKG5vdCAqaWYqIHdlIHNob3VsZCwgZS5nLiwgZHJvcHBpbmcgdGhl IHdvcmsgZm9yIHNvbWUgZnV0dXJlIGVmZm9ydCB0byBwaWNrdXApLCBJIHRha2UgaXQgdGhhdCBm b2xrcyBiZWxpZXZlIGhhdmluZyB0aGUgYWJpbGl0eSBmb3IgY29uZmlndXJlIHN1cHBvcnRlZC1h bGdvcml0aG1zIGlzIG5lZWRlZCBub3cuICBBcyBubyBvbmUgb2ZmZXJlZCB0byBoZWxwICg6c2ln aDosIGFuZCBwZW9wbGUgd29uZGVyIHdoeSB0aGlzIHdvcmsgdGFrZXMgc28gbG9uZyksIEkgd3Jv dGUgdGhlIGF0dGFjaGVkIHNjcmlwdCB0aGF0IGNyZWF0ZXMgdGhlIGF0dGFjaGVkIG1vZHVsZSBk aXJlY3RseSBmcm9tIHRoZSBkYXRhIG9idGFpbmVkIGZyb20gdGhlIElBTkEtbWFpbnRhaW5lZCAi VExTIENpcGhlciBTdWl0ZXMiIHN1Yi1yZWdpc3RyeSBvZiB0aGUgIlRyYW5zcG9ydCBMYXllciBT ZWN1cml0eSAoVExTKSBQYXJhbWV0ZXJz4oCdIHJlZ2lzdHJ5IGhlcmU6IGh0dHBzOi8vd3d3Lmlh bmEub3JnL2Fzc2lnbm1lbnRzL3Rscy1wYXJhbWV0ZXJzL3Rscy1wYXJhbWV0ZXJzLnhodG1sLiAg VGhlIHJlc3VsdGluZyBtb2R1bGUgaXMgYWxzbyBhdHRhY2hlZC4NCg0KW1FpbiBXdV0gIFRoZSBw cm9wb3NlZCBtb2R1bGUgbG9va3MgZ29vZCB0byBtZSwgSSBhc3N1bWUgdGhlc2UgY2lwaGVyLXN1 aXRlIGlkZW50aXRpZXMgYXJlIG5vdCBzcGVjaWZpYyB0byBwYXJ0aWN1bGFyIHZlcnNpb24gb2Yg VExTLCBlLmcuLCBUTFMxLjMuDQoNClRvbSwgeW91IHdpbGwgYmUgaGFwcHkgdG8ga25vdyB0aGF0 IHRoZSBhbGwgdGhlIGlkZW50aXR5IG5hbWVzIGJlZ2luIHdpdGgg4oCcdGxz4oCdICA6KSAgICBB bHNvLCB0aGVyZSBhcmUgbm8g4oCcZmVhdHVyZeKAnSBzdGF0ZW1lbnRzLCBzaW5jZSB0aGVyZSBp cyBub3RoaW5nIGluIHRoZSBzb3VyY2UgcmVnaXN0cnkgdGhhdCBjYW4gYmUgdXNlZCB0byBnZW5l cmF0ZSDigJxpZi1mZWF0dXJl4oCdIHN0YXRlbWVudHMuICBPdXQgb2YgdGhlIDM0NyBhbGdvcml0 aG1zIGxpc3RlZCBpbiB0aGUgcmVnaXN0cnksICAzMTAgYWxnb3JpdGhtcyBhcmUgbWFya2VkIOKA nHN0YXR1cyBkZXByZWNhdGVk4oCdIChkcml2ZW4gYnkgdGhlIOKAnHJlY29tbWVuZGVk4oCdIGNv bHVtbiBoYXZpbmcgdmFsdWUg4oCZTuKAmSksIGFuZCA3IGFsZ29yaXRobXMgYXJlIG1hcmtlZCDi gJxzdGF0dXMgb2Jzb2xldGXigJ0gKGRyaXZlbiBieSB0aGUgIlNDLXRscy1kZXMtaWRlYS1jaXBo ZXJzLXRvLWhpc3Rvcmlj4oCdIHJlZmVyZW5jZSkuDQoNClJlZ2FyZGluZyBpZiB0byB1c2UgYSAg 4oCcY29uZmlnIGZhbHNl4oCdIHRyZWUgb3IgYW4gUlBDLCBQZXIgbWFrZXMgYW4gaW50ZXJlc3Rp bmcgcG9pbnQgYWJvdXQg4oCcbXVzdCIgYW5kIOKAnHdoZW7igJ0gZXhwcmVzc2lvbnMsIHRob3Vn aCBJIGRvIHdvbmRlciBob3cgdGhhdCB3b3VsZCBwbGF5IG91dCBpbiBwcmFjdGljZSwgYXMgc2Fp ZCBleHByZXNzaW9ucyB3b3VsZCAocHJlc3VtYWJseSkgYmUgZGVmaW5lZCB1bmRlciDigJxjb25m aWcgdHJ1ZeKAnSBub2RlcyBhbmQgaGVuY2UgY291bGRuJ3QgcmVmZXJlbmNlIHRoZSDigJxjb25m aWcgZmFsc2XigJ0gdmFsdWVzPyAgTWF5YmUgUGVyIGNvdWxkIHNheSBzb21lIG1vcmUgYWJvdXQg dGhlIHVzZS1jYXNlIGluIG1pbmQuDQoNCk5vIG9uZSByZXNwb25kZWQgcmVnYXJkaW5nIGlmIHdl IHNob3VsZCB1c2UgaWRlbnRpdGllcyBvciBlbnVtZXJhdGlvbnMuICBUaGUgYXR0YWNoZWQgc2Ft cGxlIG1vZHVsZSB1c2VzIGlkZW50aXRpZXMsIGJ1dCBpdCB3b3VsZCBiZSBhbiBlYXN5IHRoaW5n IHRvIGNoYW5nZSB0aGUgc2NyaXB0IHRvIGdlbmVyYXRlZCBlbnVtZXJhdGlvbnMgLSB0aG91Z2h0 cz8NCg0KQWdhaW46IGlmIOKAnGlkZW50aXR54oCdIHN0YXRlbWVudHMgYXJlIHVzZWQsIGFuZCB0 aGUgbW9kdWxlIGlzICppbXBsZW1lbnRlZCosIGl0IHdvdWxkIE5PVCBtZWFuIHRoZSBzZXJ2ZXIg c3VwcG9ydHMgYWxsIChvciBldmVuIGFueSkgb2YgdGhlIGFsZ29yaXRobXMuIFRoaXMgd291bGQg b25seSBiZSBrbm93biBpZiB0aGUgYWxnb3JpdGhtIGFwcGVhcnMgaW4gdGhlIOKAnHN1cHBvcnRl ZCBhbGdvcml0aG1z4oCdICJjb25maWcgZmFsc2XigJ0gbGlzdC4gIERvZXMgYW55b25lIGZlZWwg dGhpcyBpcyBhIG1pc3VzZSBvZiBZQU5HPyAgSU1PLCBZQU5HIGlkZW50aXRpZXMgbmVlZGluZyB0 byBiZSBpbXBsZW1lbnRlZCBpcyBub3QgdmVyeSB1c2VmdWwgaW4gcHJhY3RpY2UsIGFuZCBzbyBJ IGRvbuKAmXQgdmlldyB0aGF0IGFzIGEgbmVnYXRpdmUgaW4gdGhlIHNsaWdodGVzdC4NCg0KW1Fp biBXdV0gSSBhZ3JlZSB3aXRoIFBlciB0aGF0IGl0IHNlZW1zIGlkZW50aXRpZXMgYXJlIGJldHRl ciBjaG9pY2UuDQpLLg0KDQoNCg0KDQo= --_000_48e9f39ba2df45bd96c1dcc400765c14huaweicom_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 5a6L5L2TOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtm b250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMgMiA0 O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUg MiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OuW+rui9r+mbhem7kTsN CglwYW5vc2UtMToyIDExIDUgMyAyIDIgNCAyIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OiJcQOW+rui9r+mbhem7kSI7DQoJcGFub3NlLTE6MiAxMSA1IDMgMiAyIDQgMiAyIDQ7fQ0K QGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiXEDlrovkvZMiOw0KCXBhbm9zZS0xOjIgMSA2IDAg MyAxIDEgMSAxIDE7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5N c29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4w MDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseTrlrovkvZM7fQ0KYTpsaW5r LCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1 ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBl cmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0K CXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTcNCgl7bXNvLXN0 eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2Vy aWY7DQoJY29sb3I6IzFGNDk3RDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpl eHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtz aXplOjYxMi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzIuMHB0IDkwLjBwdCA3Mi4wcHQgOTAuMHB0 O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48 IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNw aWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHht bD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBk YXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0K PGJvZHkgbGFuZz0iWkgtQ04iIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFz cz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDoyMS4wcHQ7bXNvLXBhcmEtbWFyZ2luLWxlZnQ6MS43NWdkIj48Yj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDvlvq7ova/pm4Xpu5EmcXVvdDssc2Fucy1z ZXJpZiI+5Y+R5Lu25Lq6PHNwYW4gbGFuZz0iRU4tVVMiPjo8L3NwYW4+PC9zcGFuPjwvYj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 5b6u6L2v6ZuF6buRJnF1b3Q7LHNhbnMtc2VyaWYiPiBLZW50DQogV2F0c2VuIFttYWlsdG86a2Vu dCYjNDM7aWV0ZkB3YXRzZW4ubmV0XSA8YnI+DQo8L3NwYW4+PGI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q75b6u6L2v6ZuF6buRJnF1b3Q7LHNhbnMtc2Vy aWYiPuWPkemAgeaXtumXtDxzcGFuIGxhbmc9IkVOLVVTIj46PC9zcGFuPjwvc3Bhbj48L2I+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O+W+rui9r+mbhem7kSZxdW90OyxzYW5zLXNlcmlmIj4gMjAyMTwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDvlvq7ova/pm4Xpu5EmcXVvdDssc2Fu cy1zZXJpZiI+5bm0PHNwYW4gbGFuZz0iRU4tVVMiPjY8L3NwYW4+5pyIPHNwYW4gbGFuZz0iRU4t VVMiPjE1PC9zcGFuPuaXpTxzcGFuIGxhbmc9IkVOLVVTIj4NCiAwOjIyPGJyPg0KPC9zcGFuPjxi PuaUtuS7tuS6ujxzcGFuIGxhbmc9IkVOLVVTIj46PC9zcGFuPjwvYj48c3BhbiBsYW5nPSJFTi1V UyI+IFFpbiBXdSAmbHQ7YmlsbC53dUBodWF3ZWkuY29tJmd0OzsgdG9tIHBldGNoICZsdDtpZXRm Y0BidGNvbm5lY3QuY29tJmd0OzsgUGVyIEFuZGVyc3NvbiAocGVyYW5kZXIpICZsdDtwZXJhbmRl ckBjaXNjby5jb20mZ3Q7PGJyPg0KPC9zcGFuPjxiPuaKhOmAgTxzcGFuIGxhbmc9IkVOLVVTIj46 PC9zcGFuPjwvYj48c3BhbiBsYW5nPSJFTi1VUyI+IG5ldGNvbmZAaWV0Zi5vcmc8YnI+DQo8L3Nw YW4+PGI+5Li76aKYPHNwYW4gbGFuZz0iRU4tVVMiPjo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVO LVVTIj4gUmU6IFtuZXRjb25mXSBDcmVhdGUgSUFOQS1kZWZpbmVkIG1vZHVsZXM/PG86cD48L286 cD48L3NwYW4+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDoyMS4wcHQ7bXNvLXBhcmEtbWFyZ2luLWxlZnQ6MS43NWdkIj48c3BhbiBsYW5nPSJFTi1V UyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoyMS4wcHQ7bXNvLXBhcmEtbWFyZ2luLWxlZnQ6MS43NWdk Ij48c3BhbiBsYW5nPSJFTi1VUyI+VGhhbmsgeW91IFFpbiwgVG9tLCBhbmQgUGVyIGZvciB0aGUg cmVzcG9uc2VzIHRvIG15IGxhc3QgcG9zdOKApnRoaXMgbWVzc2FnZSBhZGRyZXNzZXMgdGhlbSBh bGwuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjIxLjBwdDttc28tcGFyYS1tYXJnaW4tbGVmdDoxLjc1Z2QiPjxz cGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MjEuMHB0O21zby1w YXJhLW1hcmdpbi1sZWZ0OjEuNzVnZCI+PHNwYW4gbGFuZz0iRU4tVVMiPlNpbmNlIHRoZSBkaXNj dXNzaW9uIGhhcyBiZWVuIG1vc3RseSBhYm91dCAqaG93KiB0byBjcmVhdGUgdGhlIElBTkEtZGVm aW5lZCBtb2R1bGUgKG5vdCAqaWYqIHdlIHNob3VsZCwgZS5nLiwgZHJvcHBpbmcgdGhlIHdvcmsg Zm9yIHNvbWUgZnV0dXJlIGVmZm9ydCB0byBwaWNrdXApLA0KIEkgdGFrZSBpdCB0aGF0IGZvbGtz IGJlbGlldmUgaGF2aW5nIHRoZSBhYmlsaXR5IGZvciBjb25maWd1cmUgc3VwcG9ydGVkLWFsZ29y aXRobXMgaXMgbmVlZGVkIG5vdy4gJm5ic3A7QXMgbm8gb25lIG9mZmVyZWQgdG8gaGVscCAoOnNp Z2g6LCBhbmQgcGVvcGxlIHdvbmRlciB3aHkgdGhpcyB3b3JrIHRha2VzIHNvIGxvbmcpLCBJIHdy b3RlIHRoZSBhdHRhY2hlZCBzY3JpcHQgdGhhdCBjcmVhdGVzIHRoZSBhdHRhY2hlZCBtb2R1bGUg ZGlyZWN0bHkgZnJvbQ0KIHRoZSBkYXRhIG9idGFpbmVkIGZyb20gdGhlIElBTkEtbWFpbnRhaW5l ZCAmcXVvdDtUTFMgQ2lwaGVyIFN1aXRlcyZxdW90OyBzdWItcmVnaXN0cnkgb2YgdGhlJm5ic3A7 PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj4mcXVvdDtUcmFuc3BvcnQgTGF5ZXIgU2VjdXJpdHkg KFRMUykgUGFyYW1ldGVyc+KAnSZuYnNwO3JlZ2lzdHJ5IGhlcmU6Jm5ic3A7PC9zcGFuPjxhIGhy ZWY9Imh0dHBzOi8vd3d3LmlhbmEub3JnL2Fzc2lnbm1lbnRzL3Rscy1wYXJhbWV0ZXJzL3Rscy0i Pmh0dHBzOi8vd3d3LmlhbmEub3JnL2Fzc2lnbm1lbnRzL3Rscy1wYXJhbWV0ZXJzL3Rscy08L2E+ cGFyYW1ldGVycy54aHRtbC4NCiAmbmJzcDtUaGUgcmVzdWx0aW5nIG1vZHVsZSBpcyBhbHNvIGF0 dGFjaGVkLiAmbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MjEuMHB0Ij48Yj48aT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvaT48L2I+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjIxLjBwdCI+PGI+PGk+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5bUWluIFd1XSAmbmJz cDtUaGUgcHJvcG9zZWQgbW9kdWxlIGxvb2tzIGdvb2QgdG8gbWUsIEkgYXNzdW1lIHRoZXNlIGNp cGhlci1zdWl0ZSBpZGVudGl0aWVzIGFyZSBub3Qgc3BlY2lmaWMgdG8gcGFydGljdWxhcg0KIHZl cnNpb24gb2YgVExTLCBlLmcuLCBUTFMxLjMuPC9zcGFuPjwvaT48L2I+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MjEuMHB0 O21zby1wYXJhLW1hcmdpbi1sZWZ0OjEuNzVnZCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDoyMS4wcHQ7bXNvLXBhcmEtbWFyZ2luLWxlZnQ6MS43NWdkIj48 c3BhbiBsYW5nPSJFTi1VUyI+VG9tLCB5b3Ugd2lsbCBiZSBoYXBweSB0byBrbm93IHRoYXQgdGhl IGFsbCB0aGUgaWRlbnRpdHkgbmFtZXMgYmVnaW4gd2l0aCDigJx0bHPigJ0gJm5ic3A7OikgJm5i c3A7ICZuYnNwO0Fsc28sIHRoZXJlIGFyZSBubyDigJxmZWF0dXJl4oCdIHN0YXRlbWVudHMsIHNp bmNlIHRoZXJlIGlzIG5vdGhpbmcgaW4gdGhlIHNvdXJjZQ0KIHJlZ2lzdHJ5IHRoYXQgY2FuIGJl IHVzZWQgdG8gZ2VuZXJhdGUg4oCcaWYtZmVhdHVyZeKAnSBzdGF0ZW1lbnRzLiAmbmJzcDtPdXQg b2YgdGhlIDM0NyBhbGdvcml0aG1zIGxpc3RlZCBpbiB0aGUgcmVnaXN0cnksJm5ic3A7PHNwYW4g c3R5bGU9ImNvbG9yOmJsYWNrIj4mbmJzcDszMTAgYWxnb3JpdGhtcyBhcmUgbWFya2VkIOKAnHN0 YXR1cyBkZXByZWNhdGVk4oCdIChkcml2ZW4gYnkgdGhlJm5ic3A74oCccmVjb21tZW5kZWTigJ0g Y29sdW1uIGhhdmluZyB2YWx1ZSZuYnNwO+KAmU7igJkpLCBhbmQmbmJzcDs8L3NwYW4+NyBhbGdv cml0aG1zDQogYXJlIG1hcmtlZCDigJxzdGF0dXMgb2Jzb2xldGXigJ0gKGRyaXZlbiBieSB0aGUg JnF1b3Q7U0MtdGxzLWRlcy1pZGVhLWNpcGhlcnMtdG8taGlzdG9yaWPigJ0gcmVmZXJlbmNlKS48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MjEuMHB0O21zby1wYXJhLW1hcmdpbi1sZWZ0OjEuNzVnZCI+ PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoyMS4wcHQ7bXNv LXBhcmEtbWFyZ2luLWxlZnQ6MS43NWdkIj48c3BhbiBsYW5nPSJFTi1VUyI+UmVnYXJkaW5nIGlm IHRvIHVzZSBhJm5ic3A7PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj4mbmJzcDvigJxjb25maWcg ZmFsc2XigJ0gdHJlZSBvciBhbiBSUEMsIFBlciBtYWtlcyBhbiBpbnRlcmVzdGluZyBwb2ludCBh Ym91dCZuYnNwO+KAnG11c3QmcXVvdDsgYW5kJm5ic3A74oCcd2hlbuKAnSZuYnNwO2V4cHJlc3Np b25zLCB0aG91Z2ggSSBkbyB3b25kZXINCiBob3cgdGhhdCB3b3VsZCBwbGF5IG91dCBpbiBwcmFj dGljZSwgYXMmbmJzcDtzYWlkIGV4cHJlc3Npb25zIHdvdWxkIChwcmVzdW1hYmx5KSBiZSBkZWZp bmVkIHVuZGVyIOKAnGNvbmZpZyB0cnVl4oCdIG5vZGVzIGFuZCBoZW5jZSBjb3VsZG4ndCByZWZl cmVuY2UgdGhlJm5ic3A74oCcY29uZmlnIGZhbHNl4oCdIHZhbHVlcz8gJm5ic3A7TWF5YmUgUGVy IGNvdWxkIHNheSBzb21lIG1vcmUgYWJvdXQgdGhlIHVzZS1jYXNlIGluIG1pbmQuPC9zcGFuPjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDoyMS4wcHQ7bXNvLXBhcmEtbWFyZ2luLWxlZnQ6MS43NWdkIj48 c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjIxLjBwdDttc28t cGFyYS1tYXJnaW4tbGVmdDoxLjc1Z2QiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6 YmxhY2siPk5vIG9uZSByZXNwb25kZWQgcmVnYXJkaW5nIGlmIHdlIHNob3VsZCB1c2UgaWRlbnRp dGllcyBvciBlbnVtZXJhdGlvbnMuICZuYnNwO1RoZSBhdHRhY2hlZCBzYW1wbGUgbW9kdWxlIHVz ZXMmbmJzcDtpZGVudGl0aWVzLCBidXQgaXQgd291bGQgYmUgYW4gZWFzeSB0aGluZw0KIHRvIGNo YW5nZSB0aGUgc2NyaXB0IHRvIGdlbmVyYXRlZCBlbnVtZXJhdGlvbnMgLSZuYnNwO3Rob3VnaHRz Pzwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoy MS4wcHQ7bXNvLXBhcmEtbWFyZ2luLWxlZnQ6MS43NWdkIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImNvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MjEuMHB0O21zby1w YXJhLW1hcmdpbi1sZWZ0OjEuNzVnZCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjpi bGFjayI+QWdhaW46IGlmIOKAnGlkZW50aXR54oCdIHN0YXRlbWVudHMgYXJlIHVzZWQsIGFuZCB0 aGUgbW9kdWxlIGlzICppbXBsZW1lbnRlZCosIGl0IHdvdWxkIE5PVCBtZWFuIHRoZSBzZXJ2ZXIg c3VwcG9ydHMgYWxsIChvciBldmVuIGFueSkgb2YgdGhlIGFsZ29yaXRobXMuDQogVGhpcyB3b3Vs ZCBvbmx5IGJlIGtub3duIGlmIHRoZSBhbGdvcml0aG0gYXBwZWFycyBpbiB0aGUg4oCcc3VwcG9y dGVkIGFsZ29yaXRobXPigJ0gJnF1b3Q7Y29uZmlnIGZhbHNl4oCdIGxpc3QuICZuYnNwO0RvZXMg YW55b25lIGZlZWwgdGhpcyBpcyBhIG1pc3VzZSBvZiBZQU5HPyAmbmJzcDtJTU8sIFlBTkcgaWRl bnRpdGllcyBuZWVkaW5nIHRvIGJlIGltcGxlbWVudGVkIGlzIG5vdCB2ZXJ5IHVzZWZ1bCBpbiBw cmFjdGljZSwgYW5kIHNvIEkgZG9u4oCZdCB2aWV3IHRoYXQgYXMgYSBuZWdhdGl2ZQ0KIGluIHRo ZSBzbGlnaHRlc3QuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MjEuMHB0O21zby1wYXJh LW1hcmdpbi1sZWZ0OjEuNzVnZCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMUY0 OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6MjEuMHB0Ij48Yj48aT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOiMxRjQ5N0QiPltRaW4gV3VdIEkgYWdyZWUgd2l0aCBQZXIgdGhhdCBpdCBzZWVt cyBpZGVudGl0aWVzIGFyZSBiZXR0ZXIgY2hvaWNlLjwvc3Bhbj48L2k+PC9iPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjIx LjBwdDttc28tcGFyYS1tYXJnaW4tbGVmdDoxLjc1Z2QiPjxzcGFuIGxhbmc9IkVOLVVTIj5LLjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDoyMS4wcHQ7bXNvLXBhcmEtbWFyZ2luLWxlZnQ6MS43NWdkIj48 c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjIxLjBwdDttc28t cGFyYS1tYXJnaW4tbGVmdDoxLjc1Z2QiPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MjEuMHB0O21zby1wYXJhLW1hcmdpbi1sZWZ0 OjEuNzVnZCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoy MS4wcHQ7bXNvLXBhcmEtbWFyZ2luLWxlZnQ6MS43NWdkIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5 Pg0KPC9odG1sPg0K --_000_48e9f39ba2df45bd96c1dcc400765c14huaweicom_-- From nobody Tue Jun 15 04:32:28 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6CC673A2C14 for ; Tue, 15 Jun 2021 04:32:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=btconnect.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gDTKb1YOHVvb for ; Tue, 15 Jun 2021 04:32:21 -0700 (PDT) Received: from EUR02-HE1-obe.outbound.protection.outlook.com (mail-eopbgr10129.outbound.protection.outlook.com [40.107.1.129]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9772F3A2C11 for ; Tue, 15 Jun 2021 04:32:21 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=JQvrJ8/tan0xWk9v++ZJJlVZ0ZJ5fQabBpC79i+uqCSn7zjx0vYl143aPBDQHrpcW3fBPJEXbbHrJDwICfP3GJ9OLMumHwdvmnRATukT0xTk51kt1NKSNPlD8xw0mypl6t9C2o0RmCq7mFd5fM/lpO+rR2EHYAdLUMnEc73DWyk81788iddWHWZKsjj8RE7YkyERnijLvGmMLcfIDyJUaAQj6A36c8oKkeTkuist7c/tdJ5kAslzlZB0eNXhPVGM12wjmMxjqzZrbWT4uqemj1NqS2ZVSlbDbbhg5bmiTBIUYkGRrs/zupvaK7VY0Y5fVfpnXiYSml1hG9UsiR6byw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=QiYN1uCNRG6YSYMet68PoriZU8sCt1sfbef1tvkerhE=; b=Gk1XVvsrCS160o+6f60/uU7q58Y2Y729lVfJEelJNljcFU/6WGyMKzqyxte6Iu43Cmg0qedi6B6VwMmpS5VcCic1kqQagsDyFpWyTRgVh5W5+kYV4/+rj3eynBapi9zmBA21yM3ckr4sc2ZnN18Q5Ehrf7lcqngVylWH/vUVJMErbkAQ5vpnG8zzjeVGqbO2NjHz7mCC6xs5/Egi9nsHaW7oiQRO2xVRP9kx4rpUjufXKawUoq/wQfX6KZd8vB2BO6vupwtuldZ6PUK5LyPuBNaheEWnQ5YoEm+UItFccUO22HNOX74UzAbmSbDwn36UmGwcMM+zMeMsuM14ItYMVA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=btconnect.com; dmarc=pass action=none header.from=btconnect.com; dkim=pass header.d=btconnect.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btconnect.onmicrosoft.com; s=selector2-btconnect-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=QiYN1uCNRG6YSYMet68PoriZU8sCt1sfbef1tvkerhE=; b=sN9jIrfBCLvR6lrMpI+gP69ya3bkcgBwl6wXxdbMKa/Mim6bmCI2Kcon0gLEiSguVgaHl4wcwsPRiVLB8PwKwHZcxf38jvn6ubUoSIJ8dxNxWTfq7kWN2WfeU91ThCnidsyJM+iGOkyZagwqJmCOyn7vuM3CwoivWu9fx6R/IrE= Received: from AM7PR07MB6248.eurprd07.prod.outlook.com (2603:10a6:20b:134::11) by AM7PR07MB6771.eurprd07.prod.outlook.com (2603:10a6:20b:1bd::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4242.10; Tue, 15 Jun 2021 11:32:18 +0000 Received: from AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::a05a:a474:bf78:f0a9]) by AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::a05a:a474:bf78:f0a9%7]) with mapi id 15.20.4242.016; Tue, 15 Jun 2021 11:32:18 +0000 From: tom petch To: Qin Wu , Kent Watsen , "Per Andersson (perander)" CC: "netconf@ietf.org" Thread-Topic: [netconf] Create IANA-defined modules? Thread-Index: AddhqjRkR+YrczgKwUaLplcUh/rY0AALjxgL Date: Tue, 15 Jun 2021 11:32:18 +0000 Message-ID: References: <48e9f39ba2df45bd96c1dcc400765c14@huawei.com> In-Reply-To: <48e9f39ba2df45bd96c1dcc400765c14@huawei.com> Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: huawei.com; dkim=none (message not signed) header.d=none;huawei.com; dmarc=none action=none header.from=btconnect.com; x-originating-ip: [86.143.250.86] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: a548feae-68db-4c13-8ba9-08d92ff13bc0 x-ms-traffictypediagnostic: AM7PR07MB6771: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM7PR07MB6248.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(39860400002)(366004)(136003)(346002)(376002)(396003)(122000001)(91956017)(26005)(8676002)(66946007)(4326008)(8936002)(110136005)(186003)(6506007)(55016002)(316002)(76116006)(2906002)(9686003)(38100700002)(7696005)(52536014)(66556008)(66476007)(478600001)(83380400001)(64756008)(5660300002)(966005)(66446008)(86362001)(33656002)(71200400001); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?Windows-1252?Q?CC1o6+cfM8oEUz00guLDDAUpLVr53WOGsr84nQ/3bfRqUUa9yrdqqd6J?= =?Windows-1252?Q?2plwqeUgcMota6oVVTqOLgsk2bWPSiQfznPKkXrEIGFIq4EguNtW8l/q?= =?Windows-1252?Q?eVkz739mRu39dlVRNpvP3EcOsRz7CbB+PiIgTNKoJhw1JHGLgml13srL?= =?Windows-1252?Q?tMEeQ+ATKANTURkOKVETyfDPZMZwTEwXNH9MhzNcnTMzaJTkCmUVBLw4?= =?Windows-1252?Q?CeuLPhcUIZJYDEua6fLr2pnmMx1RFQ100S32xoMQI//ZwrQ3N8uKwC/o?= =?Windows-1252?Q?edBq60fnKHB11u8MrLFiK8A0diAvZHZBzK5uH8o4V61D+9txl6zt0SgC?= =?Windows-1252?Q?XwqefBrt9YV9/ZozP5X611BkE6IYaM5aeHtsuGaFOmQ3UA4VvvLbM5jk?= =?Windows-1252?Q?8ixqwim/RxyD+4Uf0orHrQ/zGji3L6Yo70mFxsW0k31XTY3pbILeDZSp?= =?Windows-1252?Q?QB+98S7raaRC17ioexu7yDvpleJo1SDRS9DJvyeoEvkJUtNr8iY2sFx4?= =?Windows-1252?Q?bctaE7Dz5VAVVdXba+gGhmcMczCaK9ywFgXSW+5k/ZMq03KwEkIoF8X+?= =?Windows-1252?Q?Rj00LCz+Ooo1Qp0zerooqtdWWtX/T26rISP1TmDv+ZouXkY2nNpH1KMD?= =?Windows-1252?Q?AdmMiQOpx34i7iUc2rkHh65U6z/Ae1b6hCLZdMba3HO/oD4WUz2hj9dE?= =?Windows-1252?Q?5X/tSYo/MTFUZ4IJVCWN+Q6//WhJEOLp4Acc1oxzYHrWbYn2UVmtwRbc?= =?Windows-1252?Q?tHDCDB5kueLVLTCR40QWn0Kw0GGqdW7JVROIhscfit+6PkGKITH7rZ6A?= =?Windows-1252?Q?SBX7ZW/C8exOz4hMfhT1UwdHkgx+BdXyd/ANpxF8VCxiwch14dZGB+nv?= =?Windows-1252?Q?LPJA0/+UIPdpLlsUosrh+tKH0x/6oCpt2xHu/jKa8ei4WRYdYJNc8aiy?= =?Windows-1252?Q?PL78RVco5UA07XYvYMmibTsLR6WzXI6URFafj7mJJgb+aHgrPvB1M7oA?= =?Windows-1252?Q?uDDA76B2EZoIoO+I9nFXqFtxgLD7VdKIR3sDshGHpkC3mwCbzldl8Njo?= =?Windows-1252?Q?b++wG/tuSSQIrvFQRRCahsJo9juFXg0nYFvzhPwMScIto7xQlN+7gq3u?= =?Windows-1252?Q?EToEBP4W1ZFeyVzAOkj08ZpmuUP7ZnlHnyArkhiDlItT1EpstmqMUwoo?= =?Windows-1252?Q?hVMWHjtEXU5AtXPKl3vTYf3bCSbYjzyebOLyKfOOy6luM4U1HJfTRn1A?= =?Windows-1252?Q?c2PaHPev9CkaHtZNVABU0uOt+c2l7MoCXiX+E8vW6PgmbXIMarlcx3k0?= =?Windows-1252?Q?VKRs8xmDKUDAjA0bLYLt23IEkMiFtPE2Nhf/kXI6F6dogcd531HsgRj9?= =?Windows-1252?Q?YuFZF5nQynk1KgfW5AEUppNXffV2vjbg8u0=3D?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: btconnect.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AM7PR07MB6248.eurprd07.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: a548feae-68db-4c13-8ba9-08d92ff13bc0 X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Jun 2021 11:32:18.4618 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: cf8853ed-96e5-465b-9185-806bfe185e30 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: ORM8VMyi+CWOODOCVQ5L6PUtmc6mHvF8KJPWgjyVDlxMTXBGR04LWCWYwSUOTvcDO5aO7j4MMk2bAOne7xlJCg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM7PR07MB6771 Archived-At: Subject: Re: [netconf] Create IANA-defined modules? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Jun 2021 11:32:27 -0000 From: Qin Wu =0A= Sent: 15 June 2021 06:54=0A= =0A= Kent Watsen [mailto:kent+ietf@watsen.net]=0A= 2021 6 5 0:22=0A= =0A= Thank you Qin, Tom, and Per for the responses to my last post=85this messag= e addresses them all.=0A= =0A= Since the discussion has been mostly about *how* to create the IANA-defined= module (not *if* we should, e.g., dropping the work for some future effort= to pickup), I take it that folks believe having the ability for configure = supported-algorithms is needed now. As no one offered to help (:sigh:, and= people wonder why this work takes so long), I wrote the attached script th= at creates the attached module directly from the data obtained from the IAN= A-maintained "TLS Cipher Suites" sub-registry of the "Transport Layer Secur= ity (TLS) Parameters=94 registry here: https://www.iana.org/assignments/tls= -parameters/tls-parameters.xhtml. The resulting module is also attached.= =0A= =0A= [Qin Wu] The proposed module looks good to me, I assume these cipher-suite= identities are not specific to particular version of TLS, e.g., TLS1.3.=0A= =0A= =0A= No, the exact opposite. AFAIK there is no recommended ciphersuite that is = common to TLS1.2 and TLS1.3 (or indeed one that is not recommended). TLS1.= 3 is very different!=0A= =0A= =0A= Tom, you will be happy to know that the all the identity names begin with = =93tls=94 :) Also, there are no =93feature=94 statements, since there i= s nothing in the source registry that can be used to generate =93if-feature= =94 statements. Out of the 347 algorithms listed in the registry, 310 alg= orithms are marked =93status deprecated=94 (driven by the =93recommended=94= column having value =92N=92), and 7 algorithms are marked =93status obsole= te=94 (driven by the "SC-tls-des-idea-ciphers-to-historic=94 reference).=0A= =0A= Regarding if to use a =93config false=94 tree or an RPC, Per makes an inte= resting point about =93must" and =93when=94 expressions, though I do wonder= how that would play out in practice, as said expressions would (presumably= ) be defined under =93config true=94 nodes and hence couldn't reference the= =93config false=94 values? Maybe Per could say some more about the use-ca= se in mind.=0A= =0A= No one responded regarding if we should use identities or enumerations. Th= e attached sample module uses identities, but it would be an easy thing to = change the script to generated enumerations - thoughts?=0A= =0A= Again: if =93identity=94 statements are used, and the module is *implemente= d*, it would NOT mean the server supports all (or even any) of the algorith= ms. This would only be known if the algorithm appears in the =93supported a= lgorithms=94 "config false=94 list. Does anyone feel this is a misuse of Y= ANG? IMO, YANG identities needing to be implemented is not very useful in = practice, and so I don=92t view that as a negative in the slightest.=0A= =0A= [Qin Wu] I agree with Per that it seems identities are better choice.=0A= =0A= =0A= They differ in how easy they are to extend, to modify; identity easy, enume= ration less so. Either way I am sceptical that YANG has the capabilities t= o model the flexibility that is needed here. IANA/TLS WG provide the base = capabilities - identifier, TLS/DTLS, recommended or not, 1.3 or earlier - f= rom which a YANG module provides a subset from which an implementation spec= ifies which it supports. And the list keeps changing from the work of the = TLS WG and other bodies.=0A= =0A= Tom Petch=0A= =0A= Tom Petch=0A= K.=0A= =0A= =0A= =0A= =0A= From nobody Tue Jun 15 04:36:39 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 97E3C3A2C31 for ; Tue, 15 Jun 2021 04:36:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=btconnect.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R5Z_1hh4AwuI for ; Tue, 15 Jun 2021 04:36:32 -0700 (PDT) Received: from EUR03-VE1-obe.outbound.protection.outlook.com (mail-eopbgr50096.outbound.protection.outlook.com [40.107.5.96]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B10913A2C30 for ; Tue, 15 Jun 2021 04:36:32 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=XThEjM4AffeoZdBDSy0b7mbFM4SSAglL/PNxxArQTvKdVER4pAlQidZrNy/gX60Us5YvS4g2kJK0f4cjOSBTm+eTCz6FlIxgVyHIP16Iw9cuEn3srplxs1KFxpi0nj4lJRwok+z1RiXtep7xe1KSSclG5W9K+2ym6f9IxrwxfMhCshcTfulevFCmO2KSnV1ACcVX6VvBFjwZFj9EY1PDrxHgadilPvjTOfCJOXYwoLQ0KOqx8BPDI9A0LThHt2vuOwCW4WYTAk1JZ4+QuVEFOToVFSlSBII27a06ZideThaHQIyQvMFWKyImaaNb54uLYRzWqZjXKW4xqSxiBweEcg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=CyrS8nzfwu/7csr8VzxGW7x1myznoIO9+e2N+YBiRxc=; b=ls+vKyB0Relvsnw9Ue6yMqojUx+Gdr84YYbZIukfgs8SyqY4XLajwC1snTiFf+OlCSerXgI9xC+cxE/Lnue1qe099T/bCLscamgWLgp9K7WuyyjjYf9Hxy66BUWNytLQ5PR8pr30JL6TFt01VaYcF3NHUHUjR7K6eNHEUsOntLIVVljz8ZqPdTveQbeu41N2uRHJgw7bkKhsXPjfDlt+RdNNuk7W8D4cQDeoKKf7bA3svoEEpFuTSDIGoTynfPyOxs5p52DZQ6XJZ+mIciVv3u/Sd32ctiVN4S6DIOfnlwGRDVZrqxAQ3Xm0WdYCgc7FOdi1J4Do0CNWWRQlxs6oEw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=btconnect.com; dmarc=pass action=none header.from=btconnect.com; dkim=pass header.d=btconnect.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btconnect.onmicrosoft.com; s=selector2-btconnect-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=CyrS8nzfwu/7csr8VzxGW7x1myznoIO9+e2N+YBiRxc=; b=F/IkAk1XUtreMk2o2aPIMresXd87ZSwlg8U80DXqvcf1jKCoHqHPsePd4QgFkMDkNcmL6QW+VGVQxvDVUKmhosQH9xTHGpB6OsAtyDeR4Fim1IpwGB63BaUn4kt0Ub+7JvNbCtnxkpW3pLq1H3cE3tYttl5/7gObViCc4ItaqWs= Received: from AM7PR07MB6248.eurprd07.prod.outlook.com (2603:10a6:20b:134::11) by AM6PR07MB5190.eurprd07.prod.outlook.com (2603:10a6:20b:66::27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4242.9; Tue, 15 Jun 2021 11:36:29 +0000 Received: from AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::a05a:a474:bf78:f0a9]) by AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::a05a:a474:bf78:f0a9%7]) with mapi id 15.20.4242.016; Tue, 15 Jun 2021 11:36:29 +0000 From: tom petch To: Kent Watsen CC: "netconf@ietf.org" , Henk Birkholz , "garywu@cisco.com" Thread-Topic: More complications Thread-Index: AQHXYSl46ebcY/ZiP0e+CTU8u5WUB6sU8i3z Date: Tue, 15 Jun 2021 11:36:29 +0000 Message-ID: References: <0100017980c49236-7975b99d-b591-4da2-a118-f6598517c4e5-000000@email.amazonses.com> <010001798c0d947e-4d2d14f5-9f0e-450d-ac99-e18c260f0c2b-000000@email.amazonses.com> <01000179a0aa5d37-4810234e-8db2-434d-b8fa-780c1648955a-000000@email.amazonses.com> <01000179a5bdc371-b665451f-61d4-4364-9d55-e9369f3adc8e-000000@email.amazonses.com> , <0100017a0aebfbf3-9e9c22e8-da12-4364-a572-8ce7fd43bf0f-000000@email.amazonses.com> In-Reply-To: <0100017a0aebfbf3-9e9c22e8-da12-4364-a572-8ce7fd43bf0f-000000@email.amazonses.com> Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: watsen.net; dkim=none (message not signed) header.d=none;watsen.net; dmarc=none action=none header.from=btconnect.com; x-originating-ip: [86.143.250.86] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: c3d8981e-1cce-4598-047d-08d92ff1d180 x-ms-traffictypediagnostic: AM6PR07MB5190: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM7PR07MB6248.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(396003)(376002)(39860400002)(366004)(346002)(136003)(54906003)(38100700002)(9686003)(3480700007)(186003)(26005)(478600001)(8676002)(52536014)(7116003)(316002)(122000001)(8936002)(5660300002)(71200400001)(33656002)(76116006)(86362001)(4326008)(66476007)(66946007)(91956017)(2906002)(55016002)(66556008)(7696005)(6506007)(66446008)(64756008)(83380400001); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?Windows-1252?Q?zI9gjdKldRK7gXjGt0E6aKRd2rChnCUAJw9c1hIZETlbC88h2gagvubw?= =?Windows-1252?Q?2MME1Mm2Y9zI0crehrZ+bSpWgIAiY4szgbR7IG2oAUgRiNLOpQPKBCZK?= =?Windows-1252?Q?4yvUHjVdPfgqwZhRvCcQ49d/aajL8nC+SFaUuMjk6WNgRWA7A0cozzsl?= =?Windows-1252?Q?zY0ZrhVGNmdpyE5ixVDiW0+8zFXDuAcg4CC1mk2f35D6n7Wr/rMc5IY5?= =?Windows-1252?Q?xfxLaQK09H1U+Fup46i6Svz46hfSifOkf0K7UMnBF/RsIohlyWjM1yMU?= =?Windows-1252?Q?bBQwynV2B0P6fy5dworf6Q8KXxMOJD/mnum6zrXxg+h9UsNE2WYtQd0Z?= =?Windows-1252?Q?3G0eOlF6FHA0CeNb+vn1/JGKln2sGEN34R9ZuPnSgHj+ZuaOBqP9l4hD?= =?Windows-1252?Q?BEJQlWdHjKJ/dJqf35isuTeJgm5bfCskfytI25DZNx0ZpLsTIw2hhICo?= =?Windows-1252?Q?L0J65yePohhNaLBbo+aeuEBvvXwZZbB+pBNJGU8vzLIFuPUvQTXYXtzi?= =?Windows-1252?Q?QeFFDqfngyfvGP/0P3It143g8YQVpptrbtQIpYsRp7hqG//Bjlcfb1O5?= =?Windows-1252?Q?/U6LdMV7wuC5GFwFfaCp/v4nSMfX/mZnW1DCF0zQ0zbmzIL9nNtnk/7N?= =?Windows-1252?Q?hp5tbRVsGStUC0vgDmnNcnGr3EhLfDSK/DQCyDoAy8LeXeJJY8uqy+TI?= =?Windows-1252?Q?R+O4dhq9KgK/mmEHKzLpzKujr6qjO0SMyyH90D/YwN/PE7/q0rZReoFj?= =?Windows-1252?Q?3+0ZLaAVMwSGkxgfDQZZ30z4McplNaNKQ3whBDvlismTTTzzZqgAeEVK?= =?Windows-1252?Q?yhx1mCOWgBmXyqeg945LXzZRyljX9gz+6kcVZ4NXM2iRaB3SpnwuI+Bs?= =?Windows-1252?Q?xTw1krwGduWclHwZwL1n4Rhq7c1r5tbl70ChvXBYU0MU95rKqAMxjvEc?= =?Windows-1252?Q?AASugv1VSTQ3M9yibN1K7RF9rDuxPBoCp+VZGHfw3WmewvVsbCJ0eKQp?= =?Windows-1252?Q?L3/GdvEEkQDU39By+sx75WMsStJCqSGdNYz72EIwRiDh3JWOu4/35ZxZ?= =?Windows-1252?Q?s4nXbfIeKAsprvlr3UYlztm3ivnXFLhqh/XRKdxXuOlodWGjT2nl5y2A?= =?Windows-1252?Q?IyX2wDjIm9EvVgxC1FKQsyFVNG+9siV4EfV9Ban7qx/y2SiSmpen/80b?= =?Windows-1252?Q?qK9npfEIe5dIghkIVeurshAqKEP9isr+MeBFbxlTuUPfp1B32MiN/rnH?= =?Windows-1252?Q?LynOkyFla2o1nSTt05kGWky0bYtyoBcOgIw8GJjc1WqYu3lYv2PvSKQN?= =?Windows-1252?Q?EhZzIZ+qFcVbCPq9dD8jPQYMlOXDoCxQu/xbGlc0XyF15vvQadRfeS6K?= =?Windows-1252?Q?OqEWl3o+LW7jAyJ+eDtZm73qw42vvxoBmWc=3D?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: btconnect.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AM7PR07MB6248.eurprd07.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: c3d8981e-1cce-4598-047d-08d92ff1d180 X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Jun 2021 11:36:29.6932 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: cf8853ed-96e5-465b-9185-806bfe185e30 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 7VUQNJrcXNw8PdnKjnkm66YUbf8jLkYACAf+jXxNOG29cCamd8IeQK3rLDMW3stzx1iPIQMD41Jd+2By13jnlA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR07MB5190 Archived-At: Subject: Re: [netconf] More complications X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Jun 2021 11:36:38 -0000 From: Kent Watsen =0A= Sent: 14 June 2021 15:27=0A= =0A= [CC-ing Henk, to whom a question is directed to below]=0A= =0A= =0A= Hi Tom,=0A= =0A= > Top posting a new and different issue.=0A= =0A= Thanks for updating the subject line.=0A= =0A= =0A= > server case psk references ServerKeyExchange and psk-identity-hint neithe= r of which exist in TLS1.3. The client sends an extension PreSharedKeyExte= nsion which contains a list of identities from which the server selects one= as selected-identity for which the identifier is uint16 indexing into the = client's list. RFC8446 s.4.2.11.=0A= >=0A= > The client description also needs amending.=0A= >=0A= > TLS1.2 was extended to use tickets in this area to aid session resumption= ; these have now gone and been replaced by this extension. I would not sug= gest adding support for tickets.=0A= >=0A= > As I may have said before, TLS 1.3 is different.=0A= =0A= Henk, could you help with these edits? Support for PSK and raw public key= were added to draft-ietf-netconf-tls-client-server per your request and, i= f memory serves me, didn=92t you help me with the YANG update too? I supp= ose what is needed is a either a =93choice=94 statement (with cases for 1.2= and 1.3) *or* sibling-container statements (in case it=92s necessary both = are configured in case, e.g., the client sends one or the other)...=0A= =0A= =0A= Or else drop support for PSK with TLS1.3 at this time because too little is= known about it outside the use for HTTP. I am starting to see I-D about h= ow to use TLS1.3 with application X, even for HTTP, and I think that such = an I-D will be needed for many applications with or without PSK.=0A= =0A= Tom Petch=0A= =0A= > Tom Petch=0A= =0A= Kent=0A= =0A= From nobody Tue Jun 15 04:53:17 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4C05D3A2CC4 for ; Tue, 15 Jun 2021 04:53:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5w59szqY8Rz1 for ; Tue, 15 Jun 2021 04:53:10 -0700 (PDT) Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BCF383A2CC0 for ; Tue, 15 Jun 2021 04:53:10 -0700 (PDT) Received: from fraeml707-chm.china.huawei.com (unknown [172.18.147.207]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4G46334MWcz6G7Y8 for ; Tue, 15 Jun 2021 19:46:07 +0800 (CST) Received: from dggeml704-chm.china.huawei.com (10.3.17.142) by fraeml707-chm.china.huawei.com (10.206.15.35) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.1.2176.2; Tue, 15 Jun 2021 13:53:06 +0200 Received: from dggeml753-chm.china.huawei.com (10.1.199.152) by dggeml704-chm.china.huawei.com (10.3.17.142) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2176.2; Tue, 15 Jun 2021 19:53:04 +0800 Received: from dggeml753-chm.china.huawei.com ([10.1.199.152]) by dggeml753-chm.china.huawei.com ([10.1.199.152]) with mapi id 15.01.2176.012; Tue, 15 Jun 2021 19:53:04 +0800 From: Qin Wu To: tom petch , Kent Watsen , "Per Andersson (perander)" CC: "netconf@ietf.org" Thread-Topic: [netconf] Create IANA-defined modules? Thread-Index: Addh3KUhR+YrczgKwUaLplcUh/rY0A== Date: Tue, 15 Jun 2021 11:53:04 +0000 Message-ID: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.136.123.117] Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [netconf] Create IANA-defined modules? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Jun 2021 11:53:16 -0000 LS0tLS3Tyrz+1K28/i0tLS0tDQo+PreivP7IyzogdG9tIHBldGNoIFttYWlsdG86aWV0ZmNAYnRj b25uZWN0LmNvbV0gDQo+Preiy83KsbzkOiAyMDIxxOo21MIxNcjVIDE5OjMyDQo+PsrVvP7Iyzog UWluIFd1IDxiaWxsLnd1QGh1YXdlaS5jb20+OyBLZW50IFdhdHNlbiA8a2VudCtpZXRmQHdhdHNl bi5uZXQ+OyBQZXIgQW5kZXJzc29uIChwZXJhbmRlcikgPHBlcmFuZGVyQGNpc2NvLmNvbT4NCj4+ s63LzTogbmV0Y29uZkBpZXRmLm9yZw0KPj7W98ziOiBSZTogW25ldGNvbmZdIENyZWF0ZSBJQU5B LWRlZmluZWQgbW9kdWxlcz8NCg0KPj5Gcm9tOiBRaW4gV3UgPGJpbGwud3VAaHVhd2VpLmNvbT4N Cj4+U2VudDogMTUgSnVuZSAyMDIxIDA2OjU0DQoNCj4+IEtlbnQgV2F0c2VuIFttYWlsdG86a2Vu dCtpZXRmQHdhdHNlbi5uZXRdDQogMjAyMSA2IDUgMDoyMg0KDQo+PlRoYW5rIHlvdSBRaW4sIFRv bSwgYW5kIFBlciBmb3IgdGhlIHJlc3BvbnNlcyB0byBteSBsYXN0IHBvc3ShrXRoaXMgbWVzc2Fn ZSBhZGRyZXNzZXMgdGhlbSBhbGwuDQoNCj4+U2luY2UgdGhlIGRpc2N1c3Npb24gaGFzIGJlZW4g bW9zdGx5IGFib3V0ICpob3cqIHRvIGNyZWF0ZSB0aGUgSUFOQS1kZWZpbmVkIG1vZHVsZSAobm90 ICppZiogd2Ugc2hvdWxkLCBlLmcuLCBkcm9wcGluZyB0aGUgd29yayBmb3Igc29tZSBmdXR1cmUg ZWZmb3J0IHRvIHBpY2t1cCksIEkgdGFrZSBpdCB0aGF0IGZvbGtzIGJlbGlldmUgaGF2aW5nIHRo ZSBhYmlsaXR5IGZvciBjb25maWd1cmUgc3VwcG9ydGVkLWFsZ29yaXRobXMgaXMgbmVlZGVkIG5v dy4gIA0KPj5ubyBvbmUgb2ZmZXJlZCB0byBoZWxwICg6c2lnaDosIGFuZCBwZW9wbGUgd29uZGVy IHdoeSB0aGlzIHdvcmsgdGFrZXMgc28gbG9uZyksIEkgd3JvdGUgdGhlIGF0dGFjaGVkIHNjcmlw dCB0aGF0IGNyZWF0ZXMgdGhlIGF0dGFjaGVkIG1vZHVsZSBkaXJlY3RseSBmcm9tIHRoZSBkYXRh IG9idGFpbmVkIGZyb20gdGhlIElBTkEtbWFpbnRhaW5lZCAiVExTIENpcGhlciBTdWl0ZXMiIHN1 Yi1yZWdpc3RyeSBvZiB0aGUgIlRyYW5zcG9ydCBMYXllciANCj4+U2VjdXJpdHkgKFRMUykgUGFy YW1ldGVyc6GxIHJlZ2lzdHJ5IGhlcmU6IGh0dHBzOi8vd3d3LmlhbmEub3JnL2Fzc2lnbm1lbnRz L3Rscy1wYXJhbWV0ZXJzL3Rscy1wYXJhbWV0ZXJzLnhodG1sLiAgVGhlIHJlc3VsdGluZyBtb2R1 bGUgaXMgYWxzbyBhdHRhY2hlZC4NCg0KPltRaW4gV3VdICBUaGUgcHJvcG9zZWQgbW9kdWxlIGxv b2tzIGdvb2QgdG8gbWUsIEkgYXNzdW1lIHRoZXNlIGNpcGhlci1zdWl0ZSBpZGVudGl0aWVzIGFy ZSBub3Qgc3BlY2lmaWMgdG8gcGFydGljdWxhciB2ZXJzaW9uIG9mIFRMUywgZS5nLiwgVExTMS4z Lg0KDQo+PHRwPg0KPk5vLCB0aGUgZXhhY3Qgb3Bwb3NpdGUuICBBRkFJSyB0aGVyZSBpcyBubyBy ZWNvbW1lbmRlZCBjaXBoZXJzdWl0ZSB0aGF0IGlzIGNvbW1vbiB0byBUTFMxLjIgYW5kIFRMUzEu MyAob3IgaW5kZWVkIG9uZSB0aGF0IGlzIG5vdCByZWNvbW1lbmRlZCkuICBUTFMxLjMgaXMgdmVy eSBkaWZmZXJlbnQhDQoNCltRaW4gV3VdIFRoYW5rcyBmb3IgeW91ciBjbGFyaWZpY2F0aW9uLCB0 aGlzIGFsaWducyB3aXRoIHdoYXQgSSB1bmRlcnN0YW5kLg0K From nobody Tue Jun 15 04:53:39 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 278BC3A2CDB for ; Tue, 15 Jun 2021 04:53:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.698 X-Spam-Level: X-Spam-Status: No, score=-1.698 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, MSGID_FROM_MTA_HEADER=0.001, NICE_REPLY_A=-0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=fraunhofer.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W82Vdu8HTLKu for ; Tue, 15 Jun 2021 04:53:31 -0700 (PDT) Received: from mail-edgeKA27.fraunhofer.de (mail-edgeka27.fraunhofer.de [153.96.1.27]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C38193A2CD3 for ; Tue, 15 Jun 2021 04:53:29 -0700 (PDT) IronPort-SDR: eetWd2spWAqYm6eIjf+gP+baGfuGStubowqT3m48OUOno+eVbg8DLO5CCsqknX7+88cb4ldsjp VH7XuVVSFrzrEAT04Wb8Ee6CVjvl4eauVxLuXnQjSt/0oC+pfLfFflwe5QIfTYvY5m9bDty3/8 hKaS1aq2Z8pxeU2yvQOlynCr035xMepbyeHj7b7pnosUHI6ycro6ebYHWvXL/TSvi7CPpt4oqo dvKlLNY8pfrRh+IhaiuH0qtYMRb8Dhps3D9bsumEldtPDyryXL1YB/yJtOJOMIrGXZOcsLcUXu qoQ= IronPort-PHdr: =?us-ascii?q?A9a23=3Ayg+YgRLO6RUWsuSPJ9mcuYEyDhhOgF28FgUU8?= =?us-ascii?q?ZEgzblJd/fr85fjORnZ4vNgxB/MUJ7A4v1Jw+zRr+j7WGMG7JrA1RJKcJFFW?= =?us-ascii?q?xIfz8lDmQsmDZ2OCFbwK7jhaClpVMhHXUVuqne8N0UdEc3iZlrU93u16zN3e?= =?us-ascii?q?F3/OAN5K/6zFJTVipGs1vz09YfafgNIgzSwe/V+IUbekA=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2FTDADqk8hg/xwBYJlRCYEJgyopKH6?= =?us-ascii?q?BQguHP0cBAYU5iFItA5oYglMDVAsBAQEBAQEBAQEIAT8CBAEBAwOESgI1gjU?= =?us-ascii?q?BJTgTAgQBAQESAQEGAQEBAQEGBAICgQCFaA2DVoEIAQEBAQEBAQEBAQEBAQE?= =?us-ascii?q?BAQEBAQEBAQEBAQEBAQEBAQEBAQEBBQKBCD0BAQEBAxIgAQUIAQE3AQ8LFQE?= =?us-ascii?q?CLjIlBgEMAQUCAQEegk8BglUDLgIDnFcBgToCih94gTSBAYIHAQEGBASCTYJ?= =?us-ascii?q?bGFiBWQkJAYEwgnuGdYN6JxCBVUSBPA+CbT6EGBQGhg2DGUQqUiFGd1MJAwe?= =?us-ascii?q?MLK9GLAeBeoElgSYGC5VshkEGEyaDXpEaBpBolVSCGJ1BhFsCBAIEBQIOAQE?= =?us-ascii?q?GgWuBfk0kT4JpUBcCDo4rFoECAQuCQIpgcTgCBgEJAQEDCVshh1QBMV8BAQ?= X-IPAS-Result: =?us-ascii?q?A2FTDADqk8hg/xwBYJlRCYEJgyopKH6BQguHP0cBAYU5i?= =?us-ascii?q?FItA5oYglMDVAsBAQEBAQEBAQEIAT8CBAEBAwOESgI1gjUBJTgTAgQBAQESA?= =?us-ascii?q?QEGAQEBAQEGBAICgQCFaA2DVoEIAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBBQKBCD0BAQEBAxIgAQUIAQE3AQ8LFQECLjIlBgEMAQUCA?= =?us-ascii?q?QEegk8BglUDLgIDnFcBgToCih94gTSBAYIHAQEGBASCTYJbGFiBWQkJAYEwg?= =?us-ascii?q?nuGdYN6JxCBVUSBPA+CbT6EGBQGhg2DGUQqUiFGd1MJAweMLK9GLAeBeoElg?= =?us-ascii?q?SYGC5VshkEGEyaDXpEaBpBolVSCGJ1BhFsCBAIEBQIOAQEGgWuBfk0kT4JpU?= =?us-ascii?q?BcCDo4rFoECAQuCQIpgcTgCBgEJAQEDCVshh1QBMV8BAQ?= X-IronPort-AV: E=Sophos;i="5.83,275,1616454000"; d="scan'208";a="33644461" Received: from mail-mtaka28.fraunhofer.de ([153.96.1.28]) by mail-edgeKA27.fraunhofer.de with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 15 Jun 2021 13:53:26 +0200 IronPort-SDR: c56M5J3J+nTa2Vvb1JdFYi8muYhcH7pzynZVB6ZCYdDzxVZQMPI44Zoq8bmcIfhTlQTTjgWWLn g6ift45EBcK/L5xuypzeHQ5pswHRFibWclaIQhJf5qq8DqT4TZGLFpx2nKhRZZyNPqfF+Dvb00 6752yEOHGqgQYkS3LfboJF4Ipu0y4lqX3Er+ksxVBRlQqO1qx6q1ytBl/BqhjtkdugJ0hO31Yn FvX96dVSjcbjjt97WV4K9862VLSzuBCgJQtMtK+VEwgE+5C2ktWqlE4WiBr0VjA4jEfM7cSOsG Q7Ztv7e2pIfWQJ3UmibvFoIV IronPort-PHdr: =?us-ascii?q?A9a23=3A5vlHqh+nEswx5P9uWMXoyV9kXcBvk771JQUSr?= =?us-ascii?q?JEgjuEGfqei+sHkO0rSrbVogUTSVIrWo/RDl6LNsq/mVGBBhPTJsH0LfJFWE?= =?us-ascii?q?RNQj8IQkl8rAdWODgvwK/u5JyA/Fd5JAVli+XzzOENJGcH4MlvVpHDXj3YSF?= =?us-ascii?q?xzzOBAzKP7yH9vJjtjx2fq75pvTZAtFnnyxbOAaEQ=3D=3D?= IronPort-HdrOrdr: =?us-ascii?q?A9a23=3A/enrx61T59heaqLs+Nn/egqjBH4kLtp133?= =?us-ascii?q?Aq2lEZdPUMSL3iqyncpoVg6faUskdhZJhOo6HmBEDtexPhHNtOkPEs1NSZLX?= =?us-ascii?q?nbUQmTXedfBOLZqlWKdkGQmI9gPOVbAtFD4bbLfDpHZLPBkW2F+qEbsby6Gc?= =?us-ascii?q?6T9ITjJy0Ed3AXV0gq1XYFNu/SKDwIeCB2Qb4CPN6nxvMvnVCdkRh7VLXJOp?= =?us-ascii?q?AqZZm8m+H2?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BZNADCk8hg/z6wYZlRCYEJCYMhKSg?= =?us-ascii?q?HTCtaaAuHP0cBAYU5hl+CIAM4AZlfglMDVAsBAwEBAQEBCAEEOgECBAEBhFA?= =?us-ascii?q?CNYIyAiY4EwIEAQEBEgEBBQEBAQIBBgRxE4VoDYZFAQEBBBIgAQUIAQEUIwE?= =?us-ascii?q?PCxUBAi4yBx4GAQwBBQIBAR6CTwGCVQMuAgOcVgGBOgKKH3iBNIEBggcBAQY?= =?us-ascii?q?EBIJNglsYWIFZCQkBgTCCe4Z1g3o3gVVEgTwPgm0+hBgUBoYNgxlEKlIhRnd?= =?us-ascii?q?TCQMHjCyvRiwHgXqBJYEmBguVbIZBBhMmg16RGgaQaJVUghidQYRbAgQCBAU?= =?us-ascii?q?CDgEBBoFrJIFZTSRPgmlQFwIOjisWgQIBC4JAimBxOAIGAQkBAQMJWQEBIYd?= =?us-ascii?q?UATFfAQE?= X-IronPort-AV: E=Sophos;i="5.83,275,1616454000"; d="scan'208";a="59398250" Received: from 153-97-176-62.vm.c.fraunhofer.de (HELO mobile.exch.fraunhofer.de) ([153.97.176.62]) by mail-mtaKA28.fraunhofer.de with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 15 Jun 2021 13:53:23 +0200 Received: from XCH-HYBRID-01.ads.fraunhofer.de (10.225.8.57) by XCH-HYBRID-01.ads.fraunhofer.de (10.225.8.57) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.858.12; Tue, 15 Jun 2021 13:53:22 +0200 Received: from EUR02-VE1-obe.outbound.protection.outlook.com (10.225.8.37) by XCH-HYBRID-01.ads.fraunhofer.de (10.225.8.57) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.858.12 via Frontend Transport; Tue, 15 Jun 2021 13:53:22 +0200 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=U/Jm+B4DPzIwAEEB0xggmtBVz9YKpY/DwiOaQRnl/PEv65Ywr04mnD5lxuS5X2pkFyvAYZea1iOqxtUGfboqZ9y/ONkaxSCwb1LMXBIZcUUkoa2RxR02Wdyyr0LchRhUv7V06fBKWN4P5l+FjUd3DYkgTbkassbC8ZlO7dtB7DBJrhBtP022iFbOljH/y4uCWhNhwlyeyQs4QTcZTp7Dm19qfwnlxVN2soeGWGCMubcLXIuV4pwLRN4DbF8jXj/VwYhi17KSInTzq19W4GPH0yZTZLnpKYkqeyoawRBYthMJjTpEiHI4NWyijZravfS7q9xu7bQ22SSDB/xFqCdndw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=OqnAf3ejMArC8h/Kwfn1DFmK7YD2RREAPt9yokOv+fg=; b=e2COs3yb2sPLwE/5NkOcNOSQXBA854MCK6It5qrynCw03yhy2jq7qT9rtN2BMZ+z6kToKxIje8491ulnM85anWh2VD/Bl8gMI6GMcQqVjbBQ2RF5aHl0bTItwMtoRf6CgzzfNEcc4Y072et3a9HkF++OwuRiWHUDYHAmJD4Z95faKKzadtIV4P15LhSTyot3KeA61dqPRVcIn845PVz1Oz2hhpmCAyekzWmw7NjUrWVoS+xoujAXfjVXdZyqgCGpyuSpot0vk/kxKFormsK+XktTEjzUkRWKFH2xJ5Fc0PFXwO/uTolKafUeWDCLRSpL4JOlvi79J18lmIDmXkZVng== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=sit.fraunhofer.de; dmarc=pass action=none header.from=sit.fraunhofer.de; dkim=pass header.d=sit.fraunhofer.de; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fraunhofer.onmicrosoft.com; s=selector2-fraunhofer-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=OqnAf3ejMArC8h/Kwfn1DFmK7YD2RREAPt9yokOv+fg=; b=fLtdRCtzoSlcrW+hi+RLKw2nlcQytLVno5+q+j407o9MeakHqAcLn5R7WCqk6W6/GM92VT+79XyJkMYFHu8EG0ftYM+ex1NmKveqv929chYiRwxbGVd7dpN3WMJ19PnmiTIJ2LzMn9/fmW/3csfS5YwFR7LAR/RrpDIxGQnQcao= Authentication-Results: cisco.com; dkim=none (message not signed) header.d=none;cisco.com; dmarc=none action=none header.from=sit.fraunhofer.de; Received: from DU2P194MB1709.EURP194.PROD.OUTLOOK.COM (2603:10a6:10:276::9) by DBBP194MB0970.EURP194.PROD.OUTLOOK.COM (2603:10a6:10:1ef::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4219.24; Tue, 15 Jun 2021 11:53:21 +0000 Received: from DU2P194MB1709.EURP194.PROD.OUTLOOK.COM ([fe80::ac4d:c6fc:9d66:ba8f]) by DU2P194MB1709.EURP194.PROD.OUTLOOK.COM ([fe80::ac4d:c6fc:9d66:ba8f%7]) with mapi id 15.20.4219.025; Tue, 15 Jun 2021 11:53:21 +0000 To: tom petch , Kent Watsen CC: "netconf@ietf.org" , "garywu@cisco.com" References: <0100017980c49236-7975b99d-b591-4da2-a118-f6598517c4e5-000000@email.amazonses.com> <010001798c0d947e-4d2d14f5-9f0e-450d-ac99-e18c260f0c2b-000000@email.amazonses.com> <01000179a0aa5d37-4810234e-8db2-434d-b8fa-780c1648955a-000000@email.amazonses.com> <01000179a5bdc371-b665451f-61d4-4364-9d55-e9369f3adc8e-000000@email.amazonses.com> <0100017a0aebfbf3-9e9c22e8-da12-4364-a572-8ce7fd43bf0f-000000@email.amazonses.com> From: Henk Birkholz Message-ID: <540b31e5-10a6-495f-cf44-820adb6213b3@sit.fraunhofer.de> Date: Tue, 15 Jun 2021 13:53:19 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.206.151.153] X-ClientProxiedBy: AM3PR07CA0100.eurprd07.prod.outlook.com (2603:10a6:207:6::34) To DU2P194MB1709.EURP194.PROD.OUTLOOK.COM (2603:10a6:10:276::9) MIME-Version: 1.0 X-MS-Exchange-MessageSentRepresentingType: 1 Received: from [192.168.16.50] (79.206.151.153) by AM3PR07CA0100.eurprd07.prod.outlook.com (2603:10a6:207:6::34) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4242.9 via Frontend Transport; Tue, 15 Jun 2021 11:53:20 +0000 X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: aa0f27a1-007d-46c9-c589-08d92ff42c50 X-MS-TrafficTypeDiagnostic: DBBP194MB0970: X-Microsoft-Antispam-PRVS: X-MS-Oob-TLC-OOBClassifiers: OLM:8882; X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DU2P194MB1709.EURP194.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(4636009)(39860400002)(376002)(366004)(136003)(396003)(346002)(956004)(2616005)(478600001)(44832011)(8936002)(2906002)(66476007)(16526019)(52116002)(186003)(54906003)(110136005)(16576012)(7116003)(316002)(53546011)(86362001)(26005)(4326008)(31686004)(8676002)(5660300002)(6486002)(83380400001)(3480700007)(38350700002)(31696002)(38100700002)(66946007)(66556008)(45980500001)(43740500002); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?Windows-1252?Q?kwz/zCmEqemEn2TfhaTNgi8XFwz21/fQ9fiPXBQ1TDwWnCFIqaHb7NsK?= =?Windows-1252?Q?EhwHvmEY1W3BO0U7ks3dIZ7J7kurA0cZUQ8oKIOPAIujWZR15VWWETT1?= =?Windows-1252?Q?hGCmCaRiVpjOK0IX4BDzk5rzephQZIDfUjukFJKeAoU/tT/PcEM830Ce?= =?Windows-1252?Q?u8OVkbzTD2emFNdzvpRe4iHthC2ufLSXwt4xFM0RQPux9speBWxR37Hu?= =?Windows-1252?Q?H2MitsU/HicKSOaVLKA0FZguGmHWm6AzP9RFPzAzCHVlBMb94Dm9F+3h?= =?Windows-1252?Q?tfMANzuNGQT0l7Z8HB/quEngGJMx2pyK0UB6TYI9dnD3T6RFKE0YQeZR?= =?Windows-1252?Q?p1ulEpp7p0SKgugiC2ZrvzEjz0UCb9czm79DZLO/pm3lFbJv5zFJtR4p?= =?Windows-1252?Q?fA9rLGLfbXeRWi6t0mEKe8mcwyIuQGgOPT4phUVFJvv3IjsKL2a3K2BI?= =?Windows-1252?Q?TWDGu9RrPvp3j9S7A6OEP3PfGr/agEuMBQqcS4IJVedfv1KUJ3CY4lqM?= =?Windows-1252?Q?uScfcYz9PJSq1QwNgF+jo6ukyXSgbFZrku4r0nsJraoN9rkfZbOEm5E7?= =?Windows-1252?Q?XOBzerRRJE/FfSwybhP6xT1yqOtOFqsf0vuLzGaGBSzgdho/+C4gxxlk?= =?Windows-1252?Q?RZbjl2HP2UsxGKj95EeK5mtEQSwDW04YrbiYvWm0ZTtJBpULIChrzXmf?= =?Windows-1252?Q?nIolDL7/YkuuCFhMLU8TiMguIC8HeqFr7oc49AHr9Q6Ow/RIktMbpWKA?= =?Windows-1252?Q?NcYgMHKBjLJwaFG8uWaOXO6JFfqpAKyAnsdzUAR9reE9iKJGQrKCJYe1?= =?Windows-1252?Q?2DW95F+CrPaZM1u2UUKXOV6B87TeAVpv3RfhO8qUqOcaykBD8C6koPfA?= =?Windows-1252?Q?PICvoR+jOu/hOAtTgKmduRigGmURS5OLthLlosi20jW607opgJHsEPhM?= =?Windows-1252?Q?QSd4oILP6oiNIkp6IIu4rE2lqBSpO0T85WyPba/C8WAEY70hGOVoyPgo?= =?Windows-1252?Q?3W5aFbccxLjwatwjYLtrUiX7rf3ISqfHcHXtpEBbtgzkkcNS+HOstuaW?= =?Windows-1252?Q?0BUT50nEnrOVJPtd86OeCxw0TyCBDJov7kP8YZUShAxrR9pGxNENXiIT?= =?Windows-1252?Q?tQfiQMDPfhsjLKhGPVRl4Q3ClAFT+bFHtavyECyRP7iuOLHC+dQLU4bS?= =?Windows-1252?Q?tS1Vf8Mx1TMeNdLxbvqyE9/dcoYIKOhK2Q6Xor8vV/q2sHwk2YQ4eVUD?= =?Windows-1252?Q?Nw1nqGw+vhubSPWswmhaUBS4JoinYUAZyLQenTUBJxw0FUn3oT9PRYRc?= =?Windows-1252?Q?TEtxQbIN3l2UOt5D/zDFaEZ3wGuIpwQafDy0F8Xjb4DQ4pyy9Vfp6xfI?= =?Windows-1252?Q?PxVu2lzmsLGpKkHqSZzyImOqFoZqPOXOo4LxIXpsV8Yg3Q7PykKAJc5o?= X-MS-Exchange-CrossTenant-Network-Message-Id: aa0f27a1-007d-46c9-c589-08d92ff42c50 X-MS-Exchange-CrossTenant-AuthSource: DU2P194MB1709.EURP194.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 Jun 2021 11:53:21.2946 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: f930300c-c97d-4019-be03-add650a171c4 X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: PVfA+WxKCSnUg0/FQoCApOlcFIBa8fb79wxsYIwnBRSDIWzZU6+iMwrxjJswDZ49hKjwwbcKBReL5y8IOdzkeJcgDWDlSXzpwPPjBFcQrsI= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DBBP194MB0970 X-OriginatorOrg: sit.fraunhofer.de Archived-At: Subject: Re: [netconf] More complications X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Jun 2021 11:53:37 -0000 Hi all, a fellow IETF'ler poked me to pay attention to this thread. Sorry for the latency. Hm - dropping PSK support for TLS 1.3 seems to be leaving a bunch of implementations in the IoT space behind that are inching towards migration, currently. How urgent is this? I can certainly massage the current YANG module, but (in theory) I am occupied by another SDO meeting this week. Viele Grüße, Henk On 15.06.21 13:36, tom petch wrote: > From: Kent Watsen > Sent: 14 June 2021 15:27 > > [CC-ing Henk, to whom a question is directed to below] > > > Hi Tom, > >> Top posting a new and different issue. > > Thanks for updating the subject line. > > >> server case psk references ServerKeyExchange and psk-identity-hint neither of which exist in TLS1.3. The client sends an extension PreSharedKeyExtension which contains a list of identities from which the server selects one as selected-identity for which the identifier is uint16 indexing into the client's list. RFC8446 s.4.2.11. >> >> The client description also needs amending. >> >> TLS1.2 was extended to use tickets in this area to aid session resumption; these have now gone and been replaced by this extension. I would not suggest adding support for tickets. >> >> As I may have said before, TLS 1.3 is different. > > Henk, could you help with these edits? Support for PSK and raw public key were added to draft-ietf-netconf-tls-client-server per your request and, if memory serves me, didn’t you help me with the YANG update too? I suppose what is needed is a either a “choice” statement (with cases for 1.2 and 1.3) *or* sibling-container statements (in case it’s necessary both are configured in case, e.g., the client sends one or the other)... > > > Or else drop support for PSK with TLS1.3 at this time because too little is known about it outside the use for HTTP. I am starting to see I-D about how to use TLS1.3 with application X, even for HTTP, and I think that such an I-D will be needed for many applications with or without PSK. > > Tom Petch > >> Tom Petch > > Kent > From nobody Tue Jun 15 05:18:18 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 91F6E3A2D9A for ; Tue, 15 Jun 2021 05:18:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, MSGID_FROM_MTA_HEADER=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=jacobsuniversity.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nMDBKjSu0uWn for ; Tue, 15 Jun 2021 05:18:12 -0700 (PDT) Received: from EUR05-VI1-obe.outbound.protection.outlook.com (mail-vi1eur05on2067.outbound.protection.outlook.com [40.107.21.67]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B3B553A2D99 for ; Tue, 15 Jun 2021 05:18:11 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ZGYVhK2TD2cws2+G7GZYHfUeTL9zre7EjnIt5UmsmvlpJIa+5Nz5HogbCxNVBi+GTfsMtkGwqF1vvuJU99tLf1KKx13dJHwbZYPyWglD4l03apvytSvGXsOB4fipa3UfBxnDYYdMe/ahCPamG0Hs4Oos44mttATzhDPjSiT4+n/D9e5IVv34tYLKRMyl432DqEfqXKm1fJdQuQR7RE3Ms1jBovZFlGKCjRCMooasFNhgUY98+1IF+M11POgcpvr14oySREutXFNiWYxfiehuj7vFxIepS7z2rJyNMkXyPdefvxgbbs6krCPdX9E44AoSIXnxy+dGGY9W/W6/dTt38g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=hiUo+gf1P3fO6QSTEDnBo2gP/mI4rnrYZiJl1yr537k=; b=Ln3+ax5n1hWjovdYGmmgYvZ1bsXTITcqmpUrfaFF/Irh2TX99ZhTuuUAYakpYFUj7vENJAyiyJbqHPDKxEKmoplmC+qB5O/pkPdXe+Pl49MtVQOiSucRPWLUcKU8Scqx1GEvERUQNTYGyactHDwlBA4zoYsrIugsS7iIron4Arzf+7KqubPl5LY1Di3AyWGkbyjXmSaS1dHvWNUmmd8SH5979CfOrvcxFVKDIow7MV9Dm8bUz7d5yjNT1EEYSeY1VBtPX5x/fURlc4RStkZmRMC4Cyw5fFodB7NtZEcvhh3v0jahU32i2xhuYuVXZf0OIrg0s4awhwT5ZCUUE9vOPQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=jacobs-university.de; dmarc=pass action=none header.from=jacobs-university.de; dkim=pass header.d=jacobs-university.de; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jacobsuniversity.onmicrosoft.com; s=selector2-jacobsuniversity-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=hiUo+gf1P3fO6QSTEDnBo2gP/mI4rnrYZiJl1yr537k=; b=BlZYCPKevr5UXvWB+QvQF6/sVmVKKSyZE+z5rmUgXLdetMLjvnLi4fa3CNRjWMjoWFEv1Mw92C0gImyz5a5Crq/6pRQZVfW7rDSUY6gZNe+9+xdP1q6HJRUc309kylnDdHdxkujLH7xgRBTd/64g8RYhmNT9fC2nYsp8oceuick= Authentication-Results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=jacobs-university.de; Received: from AM0P190MB0641.EURP190.PROD.OUTLOOK.COM (2603:10a6:208:194::23) by AM0P190MB0659.EURP190.PROD.OUTLOOK.COM (2603:10a6:208:198::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4242.16; Tue, 15 Jun 2021 12:18:06 +0000 Received: from AM0P190MB0641.EURP190.PROD.OUTLOOK.COM ([fe80::fd93:9b33:ac92:ea58]) by AM0P190MB0641.EURP190.PROD.OUTLOOK.COM ([fe80::fd93:9b33:ac92:ea58%8]) with mapi id 15.20.4219.025; Tue, 15 Jun 2021 12:18:06 +0000 Date: Tue, 15 Jun 2021 14:18:04 +0200 From: Juergen Schoenwaelder To: "netconf@ietf.org" Message-ID: <20210615121804.weihro7eusvnfym6@anna.jacobs.jacobs-university.de> Reply-To: Juergen Schoenwaelder Mail-Followup-To: "netconf@ietf.org" References: <010001798c0d947e-4d2d14f5-9f0e-450d-ac99-e18c260f0c2b-000000@email.amazonses.com> <01000179a0aa5d37-4810234e-8db2-434d-b8fa-780c1648955a-000000@email.amazonses.com> <01000179a5bdc371-b665451f-61d4-4364-9d55-e9369f3adc8e-000000@email.amazonses.com> <0100017a0aebfbf3-9e9c22e8-da12-4364-a572-8ce7fd43bf0f-000000@email.amazonses.com> <540b31e5-10a6-495f-cf44-820adb6213b3@sit.fraunhofer.de> Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <540b31e5-10a6-495f-cf44-820adb6213b3@sit.fraunhofer.de> X-Originating-IP: [212.201.44.244] X-ClientProxiedBy: PR0P264CA0151.FRAP264.PROD.OUTLOOK.COM (2603:10a6:100:1b::19) To AM0P190MB0641.EURP190.PROD.OUTLOOK.COM (2603:10a6:208:194::23) MIME-Version: 1.0 X-MS-Exchange-MessageSentRepresentingType: 1 Received: from localhost (212.201.44.244) by PR0P264CA0151.FRAP264.PROD.OUTLOOK.COM (2603:10a6:100:1b::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4219.21 via Frontend Transport; Tue, 15 Jun 2021 12:18:05 +0000 X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: b148544b-f03b-48c9-0161-08d92ff7a136 X-MS-TrafficTypeDiagnostic: AM0P190MB0659: X-MS-Exchange-Transport-Forked: True X-Microsoft-Antispam-PRVS: X-MS-Oob-TLC-OOBClassifiers: OLM:9508; X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0P190MB0641.EURP190.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(366004)(6486002)(38100700002)(38350700002)(186003)(66946007)(498600001)(6496006)(966005)(2906002)(53546011)(16526019)(83380400001)(8676002)(3450700001)(956004)(5660300002)(6916009)(86362001)(1076003)(52116002)(66556008)(66476007)(8936002)(26005); DIR:OUT; SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?ZWQ4cXAydGZCN29ocnUxQ2gyTS8xZVIzdTI3WEgzZ2RKR1dibEtBUmpKb0tI?= =?utf-8?B?ZHRqOHBCTkpjZThLaHhWVjJTMjBXT2dkQWRBaGoyclJTK3FUNjdwU3RRY2Yx?= =?utf-8?B?eVVYc0dmRkw1M1RoQi9HS2tINHpLUFVYNFl0N0dxTVd2ckdEMGNVU21PczYv?= =?utf-8?B?SEdrcFdrZGMxYUxkQll0TzhsWkxtaW4xMFFhUlQ5NGMyenZpdG1aY24wQ0Jm?= =?utf-8?B?TU5ZR1c1WHRubjdGZVFPT3ZSOXJ3TFpiMHRXQmdGVWsxZFdlT3FXYVJhbXdC?= =?utf-8?B?Y2xlL1RITG54cFRTTjkzNGc2M2hLc09zQ1h5WlFNTEpOZ0tzVjBWRDN1NUsx?= =?utf-8?B?OEw4T055emwzYldZbzNEekp6cmh5WnZsSlNRdWI4UjBHNUVlOHVCenZDTGFO?= =?utf-8?B?M21LQ1JhemhCdTZBcitjSndiS0VCKzJ3U043YzJLejB0TVY3K2Z6KzJHV3F6?= =?utf-8?B?TVhRMXdVUjBjRzBzMW9CY1A0MEVabXpPc0F4YWx4MnhjRTFhL2p3U0lXYXJM?= =?utf-8?B?RjQzRmtmWEFwVzBkVW9sYUpIcnV5MXFaOHhkZ3ZYL29nQjRER3NIaWZmNzU0?= =?utf-8?B?cSs2M1lqckkzeDVwODRnOHI2eXZFYUVMSWJPWlJvekxxakJ3Q3lJWjFZWVRI?= =?utf-8?B?T2p5M3ZHQmxFOGhHU1ZFOUlaT2UrcHRBSUpNYW44NmVjVUdCRUo0US9PNkk3?= =?utf-8?B?THZ6dXUxbDRwTndYeGVOL2U5RmhSSVRYMkZlTjAyVEdVakt4ZmV3UGVYZ0xV?= =?utf-8?B?MFVhSkFyWS8rYmlvV2tlZmQxUTJGTm5xS0tnaHY2NUkwZlZJT21LRmcxRlo2?= =?utf-8?B?TUZCTkNEdWY1UktkRXVRcnd1bG4zNzlmL09abElVdFVwM1JxOFBLUGRITXpP?= =?utf-8?B?TFF2R2dCOUowaWEzSlF6OTNuQ1lhT2hPOG03UFY1aTc5RkJmT3NrVGFOTDhC?= =?utf-8?B?Vy8xbm1aK2xTc0dMeVpaMzVwVTNrTEVuVDViOWo2NDdpMllyVDZaRHlrQmNM?= =?utf-8?B?ZkZZRS8veEZSZGl4eUlNSFZGTjd6V2JzY2VPNlNvamcvT0pQN2cwbXBMRzNM?= =?utf-8?B?UVc4ekpaTTZqdy9LQ1d4UFMwZHhld2g1anhFWHNWWkhWNlNMZG5mWFcrSCt3?= =?utf-8?B?aW1CNVZGNWQxQkpYQmE3ZHBpb0lkZEgreTU0emQ0UWtRc1hjUmYzUUdpck1G?= =?utf-8?B?Wm45QTd5RFE3OElJcDVTdlVmbC9HUlRhdTZLd1ZTdmppUjc3STNZUDJVL0Zm?= =?utf-8?B?MXNFaTdQa284SzhzOW1JRkEzd1ZieUc4QzNjK0tIaVNQbTlkd3pmUGZHazlF?= =?utf-8?B?S09PSmVXa3NKMHdCa2xsRXBHdmZ0ZHZsU2J6MHhic0JoNXZSWFYwT1E1M2Zn?= =?utf-8?B?bngyQlIwYVE0Mm5LczdGQzhNN3ptd09Sc0pqejBNU3hET1hLS1lVd2RDL21G?= =?utf-8?B?NC9Md2NrVUJoeXlaWHVPQzNnZnpBZ0QrSHhZZEtHOUVwTndtOUt0OTRFVkZK?= =?utf-8?B?dnB1MHlaZzBLdlhueUo1UGpaTWVBTy9aSExLbDFQczdLOUdrYTlBTis1Sndp?= =?utf-8?B?aFFiMGkreHVhbGNrT3FJTFROM05KSExtSU5OVnJSa091amZmQnVOVlBwdWFK?= =?utf-8?B?ODJTQWtIRVErNW9vY1gzWGFqVmluN2FIdTZwb1JRblBpeVpSNUZmZlJFbmtQ?= =?utf-8?B?UzRaQWpSajE3YzRLUU9QSnhiZTlXeThsWkwzbTJaWFUrUEFCZHhVbXBqbHJq?= =?utf-8?Q?YVz/Q4Ukb6phDTK7rEpxAribnSzO069NitNIiWD?= X-OriginatorOrg: jacobs-university.de X-MS-Exchange-CrossTenant-Network-Message-Id: b148544b-f03b-48c9-0161-08d92ff7a136 X-MS-Exchange-CrossTenant-AuthSource: AM0P190MB0641.EURP190.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 Jun 2021 12:18:06.0751 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: f78e973e-5c0b-4ab8-bbd7-9887c95a8ebd X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: Bkr6RTjPMi7A4vgfc6yUq0g7MeHIISsboymLicygQDB5+3Ny8xnAfmop9J9tVP4N0o871o+PiZdSWn77tKVtU1nmTKulhUe5fVojqYWj6Pc= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0P190MB0659 Archived-At: Subject: Re: [netconf] More complications X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Jun 2021 12:18:17 -0000 The way TLS is used with NETCONF is defined in RFC 7589. If any of that needs clarification to properly support TLS 1.3, then we need to revise RFC 7589. Defining the proper configuration knobs should follow from that. And as Kent reminds us, the scope of the TLS configuration draft is much wider than just NETCONF over TLS. Hence, dropping support for certain TLS 1.3 features, that may be essential in some use cases, should be done with great care. (And lets keep in mind that dropping standard configuration knobs just means that there are no standard configuration knobs, it does not mean that a certain protocol feature won't be used, it will just be configured using other non-standard means). /js On Tue, Jun 15, 2021 at 01:53:19PM +0200, Henk Birkholz wrote: > Hi all, > > a fellow IETF'ler poked me to pay attention to this thread. Sorry for the > latency. > > Hm - dropping PSK support for TLS 1.3 seems to be leaving a bunch of > implementations in the IoT space behind that are inching towards migration, > currently. > > How urgent is this? I can certainly massage the current YANG module, but (in > theory) I am occupied by another SDO meeting this week. > > Viele Grüße, > > Henk > > > On 15.06.21 13:36, tom petch wrote: > > From: Kent Watsen > > Sent: 14 June 2021 15:27 > > > > [CC-ing Henk, to whom a question is directed to below] > > > > > > Hi Tom, > > > > > Top posting a new and different issue. > > > > Thanks for updating the subject line. > > > > > > > server case psk references ServerKeyExchange and psk-identity-hint neither of which exist in TLS1.3. The client sends an extension PreSharedKeyExtension which contains a list of identities from which the server selects one as selected-identity for which the identifier is uint16 indexing into the client's list. RFC8446 s.4.2.11. > > > > > > The client description also needs amending. > > > > > > TLS1.2 was extended to use tickets in this area to aid session resumption; these have now gone and been replaced by this extension. I would not suggest adding support for tickets. > > > > > > As I may have said before, TLS 1.3 is different. > > > > Henk, could you help with these edits? Support for PSK and raw public key were added to draft-ietf-netconf-tls-client-server per your request and, if memory serves me, didn’t you help me with the YANG update too? I suppose what is needed is a either a “choice†statement (with cases for 1.2 and 1.3) *or* sibling-container statements (in case it’s necessary both are configured in case, e.g., the client sends one or the other)... > > > > > > Or else drop support for PSK with TLS1.3 at this time because too little is known about it outside the use for HTTP. I am starting to see I-D about how to use TLS1.3 with application X, even for HTTP, and I think that such an I-D will be needed for many applications with or without PSK. > > > > Tom Petch > > > > > Tom Petch > > > > Kent > > > > _______________________________________________ > netconf mailing list > netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1 | 28759 Bremen | Germany Fax: +49 421 200 3103 From nobody Tue Jun 15 05:27:52 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 326BB3A2DE4 for ; Tue, 15 Jun 2021 05:27:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.888 X-Spam-Level: X-Spam-Status: No, score=-1.888 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_MIME_MALF=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ypqHPT9sbdZ6 for ; Tue, 15 Jun 2021 05:27:46 -0700 (PDT) Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 487593A2DE1 for ; Tue, 15 Jun 2021 05:27:46 -0700 (PDT) Received: from fraeml714-chm.china.huawei.com (unknown [172.18.147.201]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4G46gy5tqhz6H8XR for ; Tue, 15 Jun 2021 20:14:38 +0800 (CST) Received: from dggeme768-chm.china.huawei.com (10.3.19.114) by fraeml714-chm.china.huawei.com (10.206.15.33) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.1.2176.2; Tue, 15 Jun 2021 14:27:42 +0200 Received: from dggeml753-chm.china.huawei.com (10.1.199.152) by dggeme768-chm.china.huawei.com (10.3.19.114) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2176.2; Tue, 15 Jun 2021 20:27:40 +0800 Received: from dggeml753-chm.china.huawei.com ([10.1.199.152]) by dggeml753-chm.china.huawei.com ([10.1.199.152]) with mapi id 15.01.2176.012; Tue, 15 Jun 2021 20:27:40 +0800 From: Qin Wu To: Kent Watsen , "maqiufang (A)" , Zmail CC: "netconf@ietf.org" Thread-Topic: [netconf] Capability-fetching mechanisms Thread-Index: Addh4dN4MmAPJjV0Sjy0XXGIk3+1WQ== Date: Tue, 15 Jun 2021 12:27:40 +0000 Message-ID: <7527caa444da49d5bce2608512c668df@huawei.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.136.123.117] Content-Type: multipart/alternative; boundary="_000_7527caa444da49d5bce2608512c668dfhuaweicom_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [netconf] Capability-fetching mechanisms X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Jun 2021 12:27:51 -0000 --_000_7527caa444da49d5bce2608512c668dfhuaweicom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 5Y+R5Lu25Lq6OiBLZW50IFdhdHNlbiBbbWFpbHRvOmtlbnQraWV0ZkB3YXRzZW4ubmV0XQ0K5Y+R 6YCB5pe26Ze0OiAyMDIx5bm0NuaciDE15pelIDU6NTYNCuaUtuS7tuS6ujogbWFxaXVmYW5nIChB KSA8bWFxaXVmYW5nMUBodWF3ZWkuY29tPjsgUWluIFd1IDxiaWxsLnd1QGh1YXdlaS5jb20+OyBa bWFpbCA8YWxleC5odWFuZy1mZW5nQGluc2EtbHlvbi5mcj4NCuaKhOmAgTogbmV0Y29uZkBpZXRm Lm9yZw0K5Li76aKYOiBSZTogW25ldGNvbmZdIENhcGFiaWxpdHktZmV0Y2hpbmcgbWVjaGFuaXNt cw0KDQpIaSBRaW4sIEFsZXgsIFFpdWZhbmcsDQoNCg0KDQpBcyBJIHVuZGVyc3Rvb2QgaW4gdGhl IHByZWNlZGVudCBtYWlscywgUWluIGlzIGxvb2tpbmcgZm9yIGEgY29tbW9uIHByb3RvY29sIHRv IGV4Y2hhbmdlIHRoZXNlIGNhcGFiaWxpdGllcyBvdmVyIGFsbCBub3RpZmljYXRpb25zIGRyYWZ0 cy4NCg0KW1Fpbl06IFNlZSBhYm92ZSwgYXMgSSBjbGFyaWZpZWQsIEkgdGhpbmsgd2UgY2FuIGZv Y3VzIG9uIGNvbW1vbiBkYXRhIG1vZGVsIGZvciBkYXRhIGV4cG9ydCBmZWF0dXJlcyBpbnN0ZWFk IG9mIGNvbW1vbiBwcm90b2NvbCwgIHdlIHdpbGwgbGVhdmUgcHJvdG9jb2wgZXh0ZW5zaW9uIHRv IGVhY2ggdHJhbnNwb3J0IHNwZWNpZmljIG5vdGlmIGRyYWZ0LCBkb2VzIHRoaXMgbWFrZSBzZW5z ZT8NCg0KW1FpdWZhbmcgTWFdIFRoZXJlIGlzIG9uZSBtb3JlIHBvaW50IHRoYXQgSSB3b3VsZCBs aWtlIHRvIGFkZCBoZXJlLCBwbGVhc2Ugbm90ZSB0aGF0IHRoZSBjYXBhYmlsaXR5IGV4cG9zdXJl IG1lY2hhbmlzbSBkZWZpbmVkIGluIGRhdGEtZXhwb3J0LWNhcGFiaWxpdHkgZHJhZnQgaXMgbGV2 ZXJhZ2VkIGJ5IFlBTkcgaW5zdGFuY2UgZmlsZS4NCiBUaGF0J3MgdG8gc2F5LCB0aGUgY2FwYWJp bGl0aWVzIGFyZSBkb2N1bWVudGVkIGluIGEgc3RhbmRhcmQtZm9ybWF0IGZpbGUgd2hpY2ggY291 bGQgYmUgYWNjZXNzZWQgYnkgYW55IGZpbGUgYWNjZXNzIG1ldGhvZCBhbmQgcHJvdG9jb2wuDQoN Ck1heWJlIGl0IGlzIGJldHRlciB0byBkZWZpbmUgdGhpcyBjYXBhYmlsaXRpZXMgZXhwb3J0IHRy YW5zcG9ydCBkZXBlbmRlbnQgcHJvdG9jb2wgb24gYW5vdGhlciBkcmFmdCA/IE9yIG9uIHRoZSBk YXRhLWV4cG9ydC1jYXBhYmlsaXRpZXMgZHJhZnQsIGJ1dCBpdCBpcyBkZWZpbmVkIGFzIHRyYW5z cG9ydCBhZ25vc3RpY+KApg0KDQpbUWluXTogQWdyZWUuIFNlZSBtb3JlIGNsYXJpZmljYXRpb24g YWJvdmUuDQpBbnkgdGhvdWdodHMgPw0KDQoNCk1haGVzaCBhbmQgSSBnZW5lcmFsbHkgYWdyZWUg d2l0aCB0aGUgaWRlYSBvZiBhIGNvbW1vbiByZXNwb25zZSBwYXlsb2FkIGZvcm1hdCB0aGF0IGNv dWxkIGJlIGNvbnZleWVkIHZpYSBkcmFmdC1zcGVjaWZpYyB0cmFuc3BvcnRzLiAgV2UgZnVydGhl ciB1bmRlcnN0YW5kIHRoYXQgdGhlcmUgaXMgYSBwcm9wb3NhbCB0byB1c2UgdGhlIFlBTkcgSW5z dGFuY2UgRmlsZSBGb3JtYXQgYXMgdGhlIGNvbW1vbiBmb3JtYXQuICBIb3dldmVyLCB3ZSBkbyBu b3QgeWV0IGZ1bGx5IHVuZGVyc3RhbmQgd2hhdCB0aGUgcmVzcG9uc2UgbWlnaHQgbG9vayBsaWtl IGZvciB0aGUg4oCcaHR0cHMtbm90aWbigJ0gZHJhZnQgd2VyZSBpdCB0byB1c2UgdGhlIFlBTkcg SW5zdGFuY2UgRmlsZSBGb3JtYXQuICAgQ291bGQgb25lIG9mIHlvdSBzZW5kIGFuIGV4YW1wbGUg b2Ygd2hhdCB0aGF0IHJlc3BvbnNlIG1pZ2h0IGxvb2sgbGlrZSBtYXRjaGluZyB0aGUgY29udGVu dHMgb2YgdGhlIGV4YW1wbGUgZm91bmQgaW4gU2VjdGlvbiAzLjQgaW4gdGhlICJodHRwcy1ub3Rp ZuKAnSBkcmFmdD8NCltRaW4gV3VdIEhlcmUgaXMgdGhlIGV4YW1wbGU6DQogICBUaGUgcHVibGlz aGVyIGNhbiBzZW5kIHRoZSBmb2xsb3dpbmcgcmVxdWVzdCB0byBsZWFybiB0aGUgcmVjZWl2ZXIN CiAgIGNhcGFiaWxpdGllcy4NCg0KICAgR0VUIEhUVFAgMS4xIC9zb21lL3BhdGgvY2FwYWJpbGl0 aWVzL2FjbWUtcmVjZWl2ZXItY2FwYWJpbGl0aWVzLmpzb24NCiAgIEhvc3Q6IGV4YW1wbGUuY29t DQogICBBY2NlcHQ6IGFwcGxpY2F0aW9uL3htbCwgYXBwbGljYXRpb24vanNvbg0KDQogICBJZiB0 aGUgcmVjZWl2ZXIgaXMgdW5hYmxlIHRvIHJlcGx5IHVzaW5nICJhcHBsaWNhdGlvbi94bWwiLA0K DQp0aGUgcmVzcG9uc2UgbWlnaHQgbG9vayBsaWtlIHRoaXM6DQoNCiAgIEhUVFAvMS4xIDIwMCBP Sw0KDQogICBEYXRlOiBXZWQsIDI2IEZlYiAyMDIwIDIwOjMzOjMwIEdNVA0KDQogICBTZXJ2ZXI6 IGV4YW1wbGUtc2VydmVyDQoNCiAgIENhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQoNCiAgIENvbnRl bnQtVHlwZTogYXBwbGljYXRpb24vanNvbg0KDQogICBDb250ZW50LUxlbmd0aDogbm5uDQoNCg0K DQogICB7DQoNCiAgICAgImlldGYteWFuZy1pbnN0YW5jZS1kYXRhOmluc3RhbmNlLWRhdGEtc2V0 Ijogew0KDQogICAgICAgIm5hbWUiOiAiYWNtZS1yZWNlaXZlci1jYXBhYmlsaXRpZXMiLA0KDQog ICAgICAgImNvbnRlbnQtc2NoZW1hIjogew0KDQogICAgICAgICAibW9kdWxlIjogImlldGYtZGF0 YS1leHBvcnQtY2FwYWJpbGl0aWVzIg0KDQogICAgICAgfSwNCg0KICAgICAgICJ0aW1lc3RhbXAi OiAiMjAxOC0wMS0yNVQxNzowMDozOFoiLA0KDQogICAgICAgImRlc2NyaXB0aW9uIjogWw0KDQog ICAgICAgICAiUmVjZWl2ZXIgY2FwYWJpbGl0eSINCg0KICAgICAgIF0sDQoNCiAgICAgICAiY29u dGVudC1kYXRhIjogew0KDQogICAgICAgICAic3lzdGVtLWNhcGFiaWxpdGllcyI6IHsNCg0KICAg ICAgICAgICAiaWV0Zi1kYXRhLWV4cG9ydC1jYXBhYmlsaXRpZXM6ZGF0YS1leHBvcnQtY2FwYWJp bGl0aWVzIjogWw0KDQogICAgICAgICAgICAgew0KDQogICAgICAgICAgICAgICAidHJhbnNwb3J0 LXByb3RvY29sIjogImh0dHAtbm90aWYiLA0KDQogICAgICAgICAgICAgICAiZW5jb2RpbmctZm9y bWF0IjogWw0KDQogICAgICAgICAgICAgICAgICJqc29uIiwNCg0KICAgICAgICAgICAgICAgICAi eG1sIiwNCg0KICAgICAgICAgICAgICAgICAicmZjODYzOS1lbmFibGVkIg0KDQogICAgICAgICAg ICAgICBdDQoNCiAgICAgICAgICAgICB9LA0KDQogICAgICAgICAgICAgew0KDQogICAgICAgICAg ICAgICAidHJhbnNwb3J0LXByb3RvY29sIjogInVkcC1ub3RpZiIsDQoNCiAgICAgICAgICAgICAg ICJlbmNvZGluZy1mb3JtYXQiOiBbDQoNCiAgICAgICAgICAgICAgICAgImJpbmFyeSINCg0KICAg ICAgICAgICAgICAgXQ0KDQogICAgICAgICAgICAgfQ0KDQogICAgICAgICAgIF0NCg0KICAgICAg ICAgfQ0KDQogICAgICAgfQ0KDQogICAgIH0NCg0KfQ0KDQo= --_000_7527caa444da49d5bce2608512c668dfhuaweicom_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 5a6L5L2TOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtm b250LWZhbWlseTrlrovkvZM7DQoJcGFub3NlLTE6MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQpAZm9u dC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQg MyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTrlvq7ova/pm4Xpu5E7DQoJcGFub3Nl LTE6MiAxMSA1IDMgMiAyIDQgMiAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiXEDl vq7ova/pm4Xpu5EiOw0KCXBhbm9zZS0xOjIgMTEgNSAzIDIgMiA0IDIgMiA0O30NCkBmb250LWZh Y2UNCgl7Zm9udC1mYW1pbHk6IlxA5a6L5L2TIjsNCglwYW5vc2UtMToyIDEgNiAwIDMgMSAxIDEg MSAxO30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFs LCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0K CWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk65a6L5L2TO30NCmE6bGluaywgc3Bhbi5N c29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJ dGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5r Rm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4 dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwcmUNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0K CW1zby1zdHlsZS1saW5rOiJIVE1MIOmihOiuvuagvOW8jyBDaGFyIjsNCgltYXJnaW46MGNtOw0K CW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5 OuWui+S9kzt9DQpzcGFuLmFwcGxlLWNvbnZlcnRlZC1zcGFjZQ0KCXttc28tc3R5bGUtbmFtZTph cHBsZS1jb252ZXJ0ZWQtc3BhY2U7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5 cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJ Y29sb3I6IzFGNDk3RDt9DQpzcGFuLkhUTUxDaGFyDQoJe21zby1zdHlsZS1uYW1lOiJIVE1MIOmi hOiuvuagvOW8jyBDaGFyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxp bms6IkhUTUwg6aKE6K6+5qC85byPIjsNCglmb250LWZhbWlseTrlrovkvZM7fQ0KLk1zb0NocERl ZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9 DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo2MTIuMHB0IDc5Mi4wcHQ7DQoJbWFyZ2luOjcy LjBwdCA5MC4wcHQgNzIuMHB0IDkwLjBwdDt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29y ZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFw ZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZd LS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+ DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3ht bD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IlpILUNOIiBsaW5rPSIjMDU2M0Mx IiB2bGluaz0iIzk1NEY3MiI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjIxLjBwdDttc28tcGFyYS1tYXJnaW4tbGVm dDoxLjc1Z2QiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O+W+rui9r+mbhem7kSZxdW90OyxzYW5zLXNlcmlmIj7lj5Hku7bkuro8c3BhbiBsYW5nPSJF Ti1VUyI+Ojwvc3Bhbj48L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDvlvq7ova/pm4Xpu5EmcXVvdDssc2Fucy1zZXJp ZiI+IEtlbnQNCiBXYXRzZW4gW21haWx0bzprZW50JiM0MztpZXRmQHdhdHNlbi5uZXRdIDxicj4N Cjwvc3Bhbj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDvlvq7ova/pm4Xpu5EmcXVvdDssc2Fucy1zZXJpZiI+5Y+R6YCB5pe26Ze0PHNwYW4gbGFuZz0i RU4tVVMiPjo8L3NwYW4+PC9zcGFuPjwvYj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q75b6u6L2v6ZuF6buRJnF1b3Q7LHNhbnMtc2Vy aWYiPiAyMDIxPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O+W+rui9r+mbhem7kSZxdW90OyxzYW5zLXNlcmlmIj7lubQ8c3BhbiBsYW5nPSJFTi1V UyI+Njwvc3Bhbj7mnIg8c3BhbiBsYW5nPSJFTi1VUyI+MTU8L3NwYW4+5pelPHNwYW4gbGFuZz0i RU4tVVMiPg0KIDU6NTY8YnI+DQo8L3NwYW4+PGI+5pS25Lu25Lq6PHNwYW4gbGFuZz0iRU4tVVMi Pjo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIj4gbWFxaXVmYW5nIChBKSAmbHQ7bWFxaXVm YW5nMUBodWF3ZWkuY29tJmd0OzsgUWluIFd1ICZsdDtiaWxsLnd1QGh1YXdlaS5jb20mZ3Q7OyBa bWFpbCAmbHQ7YWxleC5odWFuZy1mZW5nQGluc2EtbHlvbi5mciZndDs8YnI+DQo8L3NwYW4+PGI+ 5oqE6YCBPHNwYW4gbGFuZz0iRU4tVVMiPjo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIj4g bmV0Y29uZkBpZXRmLm9yZzxicj4NCjwvc3Bhbj48Yj7kuLvpopg8c3BhbiBsYW5nPSJFTi1VUyI+ Ojwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiPiBSZTogW25ldGNvbmZdIENhcGFiaWxpdHkt ZmV0Y2hpbmcgbWVjaGFuaXNtczxvOnA+PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MjEuMHB0O21zby1wYXJhLW1hcmdpbi1s ZWZ0OjEuNzVnZCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoyMS4wcHQ7bXNvLXBh cmEtbWFyZ2luLWxlZnQ6MS43NWdkIj48c3BhbiBsYW5nPSJFTi1VUyI+SGkgUWluLCZuYnNwOzxz cGFuIHN0eWxlPSJjb2xvcjpibGFjayI+QWxleCwmbmJzcDtRaXVmYW5nLDwvc3Bhbj48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjIxLjBwdDttc28tcGFyYS1tYXJnaW4tbGVmdDoxLjc1Z2QiPjxzcGFuIGxhbmc9IkVO LVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjIxLjBwdDttc28tcGFyYS1tYXJnaW4tbGVmdDoxLjc1 Z2QiPjxzcGFuIGxhbmc9IkVOLVVTIj48YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0 Ij4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjIxLjBwdDttc28tcGFyYS1tYXJnaW4tbGVmdDox Ljc1Z2QiPjxzcGFuIGxhbmc9IkVOLVVTIj5BcyBJIHVuZGVyc3Rvb2QgaW4gdGhlIHByZWNlZGVu dCBtYWlscywgUWluIGlzIGxvb2tpbmcgZm9yIGEgY29tbW9uIHByb3RvY29sIHRvIGV4Y2hhbmdl IHRoZXNlIGNhcGFiaWxpdGllcyBvdmVyIGFsbCBub3RpZmljYXRpb25zIGRyYWZ0cy4mbmJzcDs8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2 LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MjEuMHB0O21z by1wYXJhLW1hcmdpbi1sZWZ0OjEuNzVnZCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtj b2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoyMS4wcHQ7bXNvLXBhcmEtbWFy Z2luLWxlZnQ6MS43NWdkIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41 cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5 N0QiPltRaW5dOiBTZWUgYWJvdmUsIGFzIEkgY2xhcmlmaWVkLCBJIHRoaW5rIHdlIGNhbiBmb2N1 cyBvbiBjb21tb24gZGF0YSBtb2RlbCBmb3IgZGF0YSBleHBvcnQNCiBmZWF0dXJlcyBpbnN0ZWFk IG9mIGNvbW1vbiBwcm90b2NvbCwgJm5ic3A7d2Ugd2lsbCBsZWF2ZSBwcm90b2NvbCBleHRlbnNp b24gdG8gZWFjaCB0cmFuc3BvcnQgc3BlY2lmaWMgbm90aWYgZHJhZnQsIGRvZXMgdGhpcyBtYWtl IHNlbnNlPzwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjIx LjBwdDttc28tcGFyYS1tYXJnaW4tbGVmdDoxLjc1Z2QiPjxiPjxpPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjwvaT48L2I+PHNwYW4gbGFu Zz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoyMS4wcHQ7bXNvLXBhcmEtbWFyZ2luLWxl ZnQ6MS43NWdkIj48Yj48aT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5 N0QiPltRaXVmYW5nIE1hXSBUaGVyZSBpcyBvbmUgbW9yZSBwb2ludCB0aGF0IEkgd291bGQgbGlr ZSB0byBhZGQgaGVyZSwgcGxlYXNlIG5vdGUgdGhhdA0KIHRoZSBjYXBhYmlsaXR5IGV4cG9zdXJl IG1lY2hhbmlzbSBkZWZpbmVkIGluIGRhdGEtZXhwb3J0LWNhcGFiaWxpdHkgZHJhZnQgaXMgbGV2 ZXJhZ2VkIGJ5IFlBTkcgaW5zdGFuY2UgZmlsZS48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVk LXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjwvaT48L2I+PHNwYW4gbGFuZz0iRU4tVVMiPjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDoyMS4wcHQ7bXNvLXBhcmEtbWFyZ2luLWxlZnQ6MS43NWdkIj48 Yj48aT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPiZuYnNwO1Ro YXQncyB0byBzYXksIHRoZSBjYXBhYmlsaXRpZXMgYXJlIGRvY3VtZW50ZWQgaW4gYSBzdGFuZGFy ZC1mb3JtYXQgZmlsZSB3aGljaCBjb3VsZA0KIGJlIGFjY2Vzc2VkIGJ5IGFueSBmaWxlIGFjY2Vz cyBtZXRob2QgYW5kIHByb3RvY29sLjwvc3Bhbj48L2k+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIj48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2 LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MjEuMHB0O21z by1wYXJhLW1hcmdpbi1sZWZ0OjEuNzVnZCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtj b2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoyMS4wcHQ7bXNvLXBhcmEtbWFy Z2luLWxlZnQ6MS43NWdkIj48c3BhbiBsYW5nPSJFTi1VUyI+TWF5YmUgaXQgaXMgYmV0dGVyJm5i c3A7dG8gZGVmaW5lIHRoaXMgY2FwYWJpbGl0aWVzIGV4cG9ydCB0cmFuc3BvcnQgZGVwZW5kZW50 IHByb3RvY29sIG9uIGFub3RoZXIgZHJhZnQgPyBPciBvbiB0aGUmbmJzcDtkYXRhLWV4cG9ydC1j YXBhYmlsaXRpZXMgZHJhZnQsIGJ1dCBpdCBpcyBkZWZpbmVkDQogYXMgdHJhbnNwb3J0IGFnbm9z dGljPC9zcGFuPuKApjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MjEuMHB0O21zby1wYXJhLW1h cmdpbi1sZWZ0OjEuNzVnZCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMUY0OTdE Ij4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoyMS4wcHQ7bXNvLXBhcmEtbWFyZ2luLWxlZnQ6MS43 NWdkIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPltRaW5dOiBB Z3JlZS4gU2VlIG1vcmUgY2xhcmlmaWNhdGlvbiBhYm92ZS48L3NwYW4+PHNwYW4gbGFuZz0iRU4t VVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBz dHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDoyMS4wcHQ7bXNvLXBhcmEtbWFyZ2luLWxlZnQ6MS43NWdkIj48c3BhbiBsYW5n PSJFTi1VUyI+QW55IHRob3VnaHRzID88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDoyMS4wcHQ7bXNvLXBhcmEtbWFyZ2luLWxlZnQ6MS43NWdkIj48c3BhbiBsYW5n PSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjIxLjBwdDttc28tcGFyYS1tYXJn aW4tbGVmdDoxLjc1Z2QiPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6MjEuMHB0O21zby1wYXJhLW1hcmdpbi1sZWZ0OjEuNzVnZCI+PHNwYW4gbGFuZz0iRU4t VVMiPk1haGVzaCBhbmQgSSBnZW5lcmFsbHkgYWdyZWUgd2l0aCB0aGUgaWRlYSBvZiBhIGNvbW1v biByZXNwb25zZSBwYXlsb2FkIGZvcm1hdCB0aGF0IGNvdWxkIGJlIGNvbnZleWVkIHZpYSBkcmFm dC1zcGVjaWZpYyB0cmFuc3BvcnRzLiAmbmJzcDtXZSBmdXJ0aGVyIHVuZGVyc3RhbmQgdGhhdCB0 aGVyZQ0KIGlzIGEgcHJvcG9zYWwgdG8gdXNlIHRoZSBZQU5HIEluc3RhbmNlIEZpbGUgRm9ybWF0 IGFzIHRoZSBjb21tb24gZm9ybWF0LiAmbmJzcDtIb3dldmVyLCB3ZSBkbyBub3QgeWV0IGZ1bGx5 IHVuZGVyc3RhbmQgd2hhdCB0aGUgcmVzcG9uc2UgbWlnaHQgbG9vayBsaWtlIGZvciB0aGUg4oCc aHR0cHMtbm90aWbigJ0gZHJhZnQgd2VyZSBpdCB0byB1c2UgdGhlIFlBTkcgSW5zdGFuY2UgRmls ZSBGb3JtYXQuICZuYnNwOyBDb3VsZCBvbmUgb2YgeW91IHNlbmQgYW4gZXhhbXBsZQ0KIG9mIHdo YXQgdGhhdCByZXNwb25zZSBtaWdodCBsb29rIGxpa2UgbWF0Y2hpbmcgdGhlIGNvbnRlbnRzIG9m IHRoZSBleGFtcGxlIGZvdW5kIGluIFNlY3Rpb24gMy40IGluIHRoZSAmcXVvdDtodHRwcy1ub3Rp ZuKAnSBkcmFmdD88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6MjEuMHB0Ij48Yj48aT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOiMxRjQ5N0QiPltRaW4gV3VdDQo8L3NwYW4+PC9pPjwvYj48Yj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPkhlcmUgaXMgdGhlIGV4YW1wbGU6PG86 cD48L286cD48L3NwYW4+PC9iPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7IFRoZSBwdWJs aXNoZXIgY2FuIHNlbmQgdGhlIGZvbGxvd2luZyByZXF1ZXN0IHRvIGxlYXJuIHRoZSByZWNlaXZl cjxvOnA+PC9vOnA+PC9zcGFuPjwvYj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyBjYXBh YmlsaXRpZXMuPG86cD48L286cD48L3NwYW4+PC9iPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9iPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7IEdFVCBIVFRQ IDEuMSAvc29tZS9wYXRoL2NhcGFiaWxpdGllcy9hY21lLXJlY2VpdmVyLWNhcGFiaWxpdGllcy5q c29uPG86cD48L286cD48L3NwYW4+PC9iPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7IEhv c3Q6IGV4YW1wbGUuY29tPG86cD48L286cD48L3NwYW4+PC9iPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoyMS4wcHQiPjxiPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7IEFjY2VwdDogYXBwbGljYXRpb24v eG1sLCBhcHBsaWNhdGlvbi9qc29uPG86cD48L286cD48L3NwYW4+PC9iPjwvcD4NCjxwcmU+PGI+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsg SWYgdGhlIHJlY2VpdmVyIGlzIHVuYWJsZSB0byByZXBseSB1c2luZyAmcXVvdDthcHBsaWNhdGlv bi94bWwmcXVvdDssIDxvOnA+PC9vOnA+PC9zcGFuPjwvYj48L3ByZT4NCjxwcmUgc3R5bGU9InRl eHQtaW5kZW50OjE1LjhwdCI+PGI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjoj MUY0OTdEIj50aGUgcmVzcG9uc2UgbWlnaHQgbG9vayBsaWtlIHRoaXM6PG86cD48L286cD48L3Nw YW4+PC9iPjwvcHJlPg0KPHByZT48Yj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6 ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9y OiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyBIVFRQLzEuMSAyMDAgT0s8bzpwPjwvbzpwPjwvc3Bhbj48 L2I+PC9wcmU+DQo8cHJlPjxiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEw LjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFG NDk3RCI+Jm5ic3A7Jm5ic3A7IERhdGU6IFdlZCwgMjYgRmViIDIwMjAgMjA6MzM6MzAgR01UPG86 cD48L286cD48L3NwYW4+PC9iPjwvcHJlPg0KPHByZT48Yj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyBTZXJ2ZXI6IGV4YW1wbGUtc2VydmVy PG86cD48L286cD48L3NwYW4+PC9iPjwvcHJlPg0KPHByZT48Yj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz YW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyBDYWNoZS1Db250cm9sOiBuby1j YWNoZTxvOnA+PC9vOnA+PC9zcGFuPjwvYj48L3ByZT4NCjxwcmU+PGI+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsgQ29udGVudC1UeXBlOiBh cHBsaWNhdGlvbi9qc29uPG86cD48L286cD48L3NwYW4+PC9iPjwvcHJlPg0KPHByZT48Yj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyBDb250 ZW50LUxlbmd0aDogbm5uPG86cD48L286cD48L3NwYW4+PC9iPjwvcHJlPg0KPHByZT48Yj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvYj48L3ByZT4NCjxwcmU+PGI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtj b2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsgezxvOnA+PC9vOnA+PC9zcGFuPjwvYj48L3ByZT4N CjxwcmU+PGI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsgJnF1b3Q7aWV0Zi15YW5nLWluc3RhbmNlLWRhdGE6aW5zdGFu Y2UtZGF0YS1zZXQmcXVvdDs6IHs8bzpwPjwvbzpwPjwvc3Bhbj48L2I+PC9wcmU+DQo8cHJlPjxi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7ICZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZxdW90O25hbWUmcXVvdDs6ICZxdW90O2FjbWUtcmVj ZWl2ZXItY2FwYWJpbGl0aWVzJnF1b3Q7LDxvOnA+PC9vOnA+PC9zcGFuPjwvYj48L3ByZT4NCjxw cmU+PGI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJnF1b3Q7Y29udGVudC1zY2hlbWEmcXVvdDs6 IHs8bzpwPjwvbzpwPjwvc3Bhbj48L2I+PC9wcmU+DQo8cHJlPjxiPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZxdW90O21vZHVsZSZxdW90OzogJnF1b3Q7aWV0Zi1kYXRhLWV4 cG9ydC1jYXBhYmlsaXRpZXMmcXVvdDs8bzpwPjwvbzpwPjwvc3Bhbj48L2I+PC9wcmU+DQo8cHJl PjxiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IH0sPG86cD48L286cD48L3NwYW4+PC9iPjwvcHJl Pg0KPHByZT48Yj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmcXVvdDt0aW1lc3RhbXAmcXVvdDs6 ICZxdW90OzIwMTgtMDEtMjVUMTc6MDA6MzhaJnF1b3Q7LDxvOnA+PC9vOnA+PC9zcGFuPjwvYj48 L3ByZT4NCjxwcmU+PGI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdE Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJnF1b3Q7ZGVzY3JpcHRpb24m cXVvdDs6IFs8bzpwPjwvbzpwPjwvc3Bhbj48L2I+PC9wcmU+DQo8cHJlPjxiPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZxdW90O1JlY2VpdmVyIGNhcGFiaWxpdHkmcXVvdDs8 bzpwPjwvbzpwPjwvc3Bhbj48L2I+PC9wcmU+DQo8cHJlPjxiPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7IF0sPG86cD48L286cD48L3NwYW4+PC9iPjwvcHJlPg0KPHByZT48Yj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyAmcXVvdDtjb250ZW50LWRhdGEmcXVvdDs6IHs8bzpwPjwvbzpwPjwvc3Bhbj48 L2I+PC9wcmU+DQo8cHJlPjxiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEw LjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFG NDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZx dW90O3N5c3RlbS1jYXBhYmlsaXRpZXMmcXVvdDs6IHs8bzpwPjwvbzpwPjwvc3Bhbj48L2I+PC9w cmU+DQo8cHJlPjxiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+ Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7ICZxdW90O2lldGYtZGF0YS1leHBvcnQtY2FwYWJpbGl0aWVzOmRhdGEtZXhwb3J0LWNhcGFi aWxpdGllcyZxdW90OzogWzxvOnA+PC9vOnA+PC9zcGFuPjwvYj48L3ByZT4NCjxwcmU+PGI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsg ezxvOnA+PC9vOnA+PC9zcGFuPjwvYj48L3ByZT4NCjxwcmU+PGI+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJnF1 b3Q7dHJhbnNwb3J0LXByb3RvY29sJnF1b3Q7OiAmcXVvdDtodHRwLW5vdGlmJnF1b3Q7LDxvOnA+ PC9vOnA+PC9zcGFuPjwvYj48L3ByZT4NCjxwcmU+PGI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z ZXJpZjtjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJnF1b3Q7ZW5j b2RpbmctZm9ybWF0JnF1b3Q7OiBbPG86cD48L286cD48L3NwYW4+PC9iPjwvcHJlPg0KPHByZT48 Yj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmcXVvdDtqc29uJnF1b3Q7LDxvOnA+PC9vOnA+ PC9zcGFuPjwvYj48L3ByZT4NCjxwcmU+PGI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtj b2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJm5ic3A7Jm5ic3A7JnF1 b3Q7eG1sJnF1b3Q7LDxvOnA+PC9vOnA+PC9zcGFuPjwvYj48L3ByZT4NCjxwcmU+PGI+PHNwYW4g bGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsgJnF1b3Q7cmZjODYzOS1lbmFibGVkJnF1b3Q7PG86cD48L286 cD48L3NwYW4+PC9iPjwvcHJlPg0KPHByZT48Yj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBdPG86cD48L286cD48 L3NwYW4+PC9iPjwvcHJlPg0KPHByZT48Yj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2Nv bG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB9LDxvOnA+PC9vOnA+PC9zcGFuPjwvYj48L3By ZT4NCjxwcmU+PGI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4m bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgezxvOnA+PC9vOnA+PC9zcGFuPjwvYj48L3ByZT4NCjxwcmU+PGI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgJnF1b3Q7dHJhbnNwb3J0LXByb3RvY29sJnF1b3Q7OiAmcXVvdDt1ZHAtbm90 aWYmcXVvdDssPG86cD48L286cD48L3NwYW4+PC9iPjwvcHJlPg0KPHByZT48Yj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyAmcXVvdDtlbmNvZGluZy1mb3JtYXQmcXVvdDs6IFs8bzpwPjwvbzpwPjwvc3Bhbj48L2I+ PC9wcmU+DQo8cHJlPjxiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3 RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZxdW90O2JpbmFyeSZx dW90OzxvOnA+PC9vOnA+PC9zcGFuPjwvYj48L3ByZT4NCjxwcmU+PGI+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsg XTxvOnA+PC9vOnA+PC9zcGFuPjwvYj48L3ByZT4NCjxwcmU+PGI+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfTxvOnA+PC9vOnA+PC9z cGFuPjwvYj48L3ByZT4NCjxwcmU+PGI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xv cjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgXTxvOnA+PC9vOnA+PC9zcGFuPjwvYj48L3ByZT4NCjxwcmU+PGI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsgJm5ic3A7Jm5ic3A7fTxvOnA+PC9vOnA+PC9zcGFuPjwvYj48 L3ByZT4NCjxwcmU+PGI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdE Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfTxvOnA+PC9vOnA+PC9zcGFu PjwvYj48L3ByZT4NCjxwcmU+PGI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjoj MUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfTxvOnA+PC9vOnA+PC9zcGFuPjwvYj48 L3ByZT4NCjxwcmUgc3R5bGU9InRleHQtaW5kZW50OjE1LjhwdCI+PGI+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj59PG86cD48L286cD48L3NwYW4+PC9iPjwvcHJl Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 OjIxLjBwdDttc28tcGFyYS1tYXJnaW4tbGVmdDoxLjc1Z2QiPjxzcGFuIGxhbmc9IkVOLVVTIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_7527caa444da49d5bce2608512c668dfhuaweicom_-- From nobody Tue Jun 15 06:13:22 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6B58F3A2FEB for ; Tue, 15 Jun 2021 06:13:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gRQa6mVExBCK for ; Tue, 15 Jun 2021 06:13:15 -0700 (PDT) Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C9E9B3A2FE5 for ; Tue, 15 Jun 2021 06:13:14 -0700 (PDT) Received: from fraeml703-chm.china.huawei.com (unknown [172.18.147.226]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4G47hQ63lyz6H8YW for ; Tue, 15 Jun 2021 21:00:06 +0800 (CST) Received: from dggeme719-chm.china.huawei.com (10.1.199.115) by fraeml703-chm.china.huawei.com (10.206.15.52) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2176.2; Tue, 15 Jun 2021 15:13:10 +0200 Received: from dggeme770-chm.china.huawei.com (10.3.19.116) by dggeme719-chm.china.huawei.com (10.1.199.115) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2176.2; Tue, 15 Jun 2021 21:13:08 +0800 Received: from dggeme770-chm.china.huawei.com ([10.8.68.58]) by dggeme770-chm.china.huawei.com ([10.8.68.58]) with mapi id 15.01.2176.012; Tue, 15 Jun 2021 21:13:08 +0800 From: "maqiufang (A)" To: "netconf@ietf.org" Thread-Topic: [netconf] New Version Notification for draft-tao-netconf-data-export-capabilities-04.txt Thread-Index: Addh5hpYB9cAkXpBSGqChUKhieeVTg== Date: Tue, 15 Jun 2021 13:13:08 +0000 Message-ID: <1bf9ef2d60fc4879af6e149476779df9@huawei.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.136.123.93] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [netconf] New Version Notification for draft-tao-netconf-data-export-capabilities-04.txt X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Jun 2021 13:13:21 -0000 SGksIGFsbDoNCnYtMDQgaXMgcG9zdGVkOiBodHRwczovL3d3dy5pZXRmLm9yZy9hcmNoaXZlL2lk L2RyYWZ0LXRhby1uZXRjb25mLWRhdGEtZXhwb3J0LWNhcGFiaWxpdGllcy0wNC50eHQgDQoNClRo ZSBtYWluIGNoYW5nZXMgYXJlIGZvbGxvd2luZ3M6DQogICBvICBBZGQgaW50ZXJmYWNlIG5hbWVz cGFjZSBpbiB0aGUgQWRhcHRpdmUgU3Vic2NyaXB0aW9uIHVzYWdlIGV4YW1wbGUuDQogICBvICBU d28gY29tcHJlc3Npb24gbW9kZSByZWxhdGVkIGlkZW50aXRpZXMgY2hhbmdlLg0KICAgbyAgIE1v dmUgbWVzc2FnZS1idW5kbGluZy1zdXBwb3J0IHBhcmFtZXRlciB0byBzeXN0ZW0gY2FwYWJpbGl0 aWVzIGxldmVsLg0KICAgbyAgIEFkZCBhbiBleGFtcGxlIHRvIGRpc2N1c3MgcmVwb3J0IHJlY2Vp dmVyIGNhcGFiaWxpdHkgZnJvbSB0aGUgY2xpZW50IHBlciB5YW5nIGluc3RhbmNlIGZpbGUgZm9y bWF0Lg0KICAgbyAgIENoYW5nZSBlbmNvZGluZyBmb3JtYXQgZnJvbSBsZWFmIHRvIGxlYWYtbGlz dCBhbmQgc3VwcG9ydCBtdWx0aXBsZSBlbmNvZGluZyBmb3JtYXRzIGZvciB0aGUgc2FtZSB0cmFu c3BvcnQtc3BlY2lmaWMgbm90aWZpY2F0aW9uLg0KDQpBbnkgY29tbWVudHMgYW5kIHN1Z2dlc3Rp b25zIHdvdWxkIGJlIG11Y2ggYXBwcmVjaWF0ZWQhDQoNCg0KQmVzdCBSZWdhcmRzLA0KUWl1ZmFu ZyBNYShPbiBiZWhhbGYgb2YgYXV0aG9ycykNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0N CkZyb206IGludGVybmV0LWRyYWZ0c0BpZXRmLm9yZyBbbWFpbHRvOmludGVybmV0LWRyYWZ0c0Bp ZXRmLm9yZ10gDQpTZW50OiBUdWVzZGF5LCBKdW5lIDE1LCAyMDIxIDg6NTYgUE0NClRvOiBQZW5n IExpdSA8bGl1cGVuZ3lqeUBjaGluYW1vYmlsZS5jb20+OyBRaW4gV3UgPGJpbGwud3VAaHVhd2Vp LmNvbT47IFFpbiBXdSA8YmlsbC53dUBodWF3ZWkuY29tPjsgbWFxaXVmYW5nIChBKSA8bWFxaXVm YW5nMUBodWF3ZWkuY29tPjsgV2VpIFdhbmcgPHdhbmd3MzZAY2hpbmF0ZWxlY29tLmNuPg0KU3Vi amVjdDogTmV3IFZlcnNpb24gTm90aWZpY2F0aW9uIGZvciBkcmFmdC10YW8tbmV0Y29uZi1kYXRh LWV4cG9ydC1jYXBhYmlsaXRpZXMtMDQudHh0DQoNCg0KQSBuZXcgdmVyc2lvbiBvZiBJLUQsIGRy YWZ0LXRhby1uZXRjb25mLWRhdGEtZXhwb3J0LWNhcGFiaWxpdGllcy0wNC50eHQNCmhhcyBiZWVu IHN1Y2Nlc3NmdWxseSBzdWJtaXR0ZWQgYnkgUWl1ZmFuZyBNYSBhbmQgcG9zdGVkIHRvIHRoZSBJ RVRGIHJlcG9zaXRvcnkuDQoNCk5hbWU6CQlkcmFmdC10YW8tbmV0Y29uZi1kYXRhLWV4cG9ydC1j YXBhYmlsaXRpZXMNClJldmlzaW9uOgkwNA0KVGl0bGU6CQlUZWxlbWV0cnkgRGF0YSBFeHBvcnQg Y2FwYWJpbGl0eQ0KRG9jdW1lbnQgZGF0ZToJMjAyMS0wNi0xNQ0KR3JvdXA6CQlJbmRpdmlkdWFs IFN1Ym1pc3Npb24NClBhZ2VzOgkJMjENClVSTDogICAgICAgICAgICBodHRwczovL3d3dy5pZXRm Lm9yZy9hcmNoaXZlL2lkL2RyYWZ0LXRhby1uZXRjb25mLWRhdGEtZXhwb3J0LWNhcGFiaWxpdGll cy0wNC50eHQNClN0YXR1czogICAgICAgICBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2Rv Yy9kcmFmdC10YW8tbmV0Y29uZi1kYXRhLWV4cG9ydC1jYXBhYmlsaXRpZXMvDQpIdG1saXplZDog ICAgICAgaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9kcmFmdC10YW8tbmV0 Y29uZi1kYXRhLWV4cG9ydC1jYXBhYmlsaXRpZXMNCkRpZmY6ICAgICAgICAgICBodHRwczovL3d3 dy5pZXRmLm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtdGFvLW5ldGNvbmYtZGF0YS1leHBvcnQtY2Fw YWJpbGl0aWVzLTA0DQoNCkFic3RyYWN0Og0KICAgVGhpcyBkb2N1bWVudCBwcm9wb3NlcyBhIFlB TkcgbW9kdWxlIGZvciB0ZWxlbWV0cnkgZGF0YSBleHBvcnQNCiAgIGNhcGFiaWxpdGllcyB3aGlj aCBhdWdtZW50cyBzeXN0ZW0gQ2FwYWJpbGl0aWVzIG1vZGVsIGFuZCBwcm92aWRlcw0KICAgYWRk aXRpb25hbCB0ZWxlbWV0cnkgZGF0YSBleHBvcnQgYXR0cmlidXRlcyBhc3NvY2lhdGVkIHdpdGgg c3lzdGVtDQogICBjYXBhYmlsaXRpZXMgZm9yIHRyYW5zcG9ydCBzcGVjaWZpYyBOb3RpZmljYXRp b24uICBUaGlzIFlBTkcgbW9kdWxlDQogICBjYW4gYmUgdXNlZCB0byBsZWFybiBjYXBhYmlsaXR5 IGluZm9ybWF0aW9uIGVpdGhlciBmcm9tIHRoZSBzZXJ2ZXIgb3INCiAgIGZyb20gdGhlIGNsaWVu dCBhdCBydW4tdGltZSBvciBpbXBsZW1lbnRhdGlvbi0gdGltZSwgcGVyIHRoZSBZQU5HDQogICBJ bnN0YW5jZSBEYXRhIEZpbGUgRm9ybWF0Lg0KDQogICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgDQoN Cg0KVGhlIElFVEYgU2VjcmV0YXJpYXQNCg0KDQo= From nobody Tue Jun 15 08:06:57 2021 Return-Path: <0100017a1035ee97-d50af178-3949-420b-b78b-571fe99b24b2-000000@amazonses.watsen.net> X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 612AD3A3343 for ; Tue, 15 Jun 2021 08:06:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.893 X-Spam-Level: X-Spam-Status: No, score=-1.893 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BEYWeWe7ebvh for ; Tue, 15 Jun 2021 08:06:49 -0700 (PDT) Received: from a48-93.smtp-out.amazonses.com (a48-93.smtp-out.amazonses.com [54.240.48.93]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 449773A3341 for ; Tue, 15 Jun 2021 08:06:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1623769608; h=From:Message-Id:Content-Type:Mime-Version:Subject:Date:In-Reply-To:Cc:To:References:Feedback-ID; bh=qqg/3GmKRgZ1fs8LLpbX4EtfuaU0u3jYPURWS+L+q4Q=; b=YPadptHt4m3EoDr+GmfvcJDIgugnF5bAUsDevfWVsPkFrROggQ0JZhR2QMdPV1/b +QtdgLzheiZ0MSuYGb/qQ6EAV13oqK5NQP8no8AMHL5w4oooile+aZoHuXT4V3R99yH s7QDZblkSO2oxz+Fr6/hsjLASSas16GLh3URazkc= From: Kent Watsen Message-ID: <0100017a1035ee97-d50af178-3949-420b-b78b-571fe99b24b2-000000@email.amazonses.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_3BA66C14-9E86-4824-AF99-DB8DE337BD11" Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.100.0.2.22\)) Date: Tue, 15 Jun 2021 15:06:47 +0000 In-Reply-To: <20210615121804.weihro7eusvnfym6@anna.jacobs.jacobs-university.de> Cc: "netconf@ietf.org" To: Henk Birkholz , tom petch , Juergen Schoenwaelder References: <010001798c0d947e-4d2d14f5-9f0e-450d-ac99-e18c260f0c2b-000000@email.amazonses.com> <01000179a0aa5d37-4810234e-8db2-434d-b8fa-780c1648955a-000000@email.amazonses.com> <01000179a5bdc371-b665451f-61d4-4364-9d55-e9369f3adc8e-000000@email.amazonses.com> <0100017a0aebfbf3-9e9c22e8-da12-4364-a572-8ce7fd43bf0f-000000@email.amazonses.com> <540b31e5-10a6-495f-cf44-820adb6213b3@sit.fraunhofer.de> <20210615121804.weihro7eusvnfym6@anna.jacobs.jacobs-university.de> X-Mailer: Apple Mail (2.3654.100.0.2.22) Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES X-SES-Outgoing: 2021.06.15-54.240.48.93 Archived-At: Subject: Re: [netconf] More complications X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Jun 2021 15:06:55 -0000 --Apple-Mail=_3BA66C14-9E86-4824-AF99-DB8DE337BD11 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Thanks Juergen and Tom. Henk, thanks for poking in on this thread. Given that it appears the = PSK/RPK support in TLS 1.3 is work-in-progress, Tom=E2=80=99s suggestion = to defer modeling the TLS 1.3 part of the model at this time makes sense = to me - do you agree? If so, then it seems that we should update the model now to have a = =E2=80=9Cchoice statement=E2=80=9D or =E2=80=9Csibling-container = statements", adding =E2=80=9Cif-feature=E2=80=9D statements as needed, = and then just define the TLS 1.2 solution, enabling the TLS 1.3 solution = to slide-in =E2=80=9Cperfectly=E2=80=9D via a future effort. =20 Could you (or maybe Tom) help us know if a =E2=80=9Cchoice statement=E2=80= =9D or =E2=80=9Csibling-container statements=E2=80=9D is needed? The = answer may vary for the TLS-client vs the TLS-server... K. > On Jun 15, 2021, at 8:18 AM, Juergen Schoenwaelder = wrote: >=20 > The way TLS is used with NETCONF is defined in RFC 7589. If any of > that needs clarification to properly support TLS 1.3, then we need to > revise RFC 7589. Defining the proper configuration knobs should follow > from that. >=20 > And as Kent reminds us, the scope of the TLS configuration draft is > much wider than just NETCONF over TLS. Hence, dropping support for > certain TLS 1.3 features, that may be essential in some use cases, > should be done with great care. (And lets keep in mind that dropping > standard configuration knobs just means that there are no standard > configuration knobs, it does not mean that a certain protocol feature > won't be used, it will just be configured using other non-standard > means). >=20 > /js >=20 > On Tue, Jun 15, 2021 at 01:53:19PM +0200, Henk Birkholz wrote: >> Hi all, >>=20 >> a fellow IETF'ler poked me to pay attention to this thread. Sorry for = the >> latency. >>=20 >> Hm - dropping PSK support for TLS 1.3 seems to be leaving a bunch of >> implementations in the IoT space behind that are inching towards = migration, >> currently. >>=20 >> How urgent is this? I can certainly massage the current YANG module, = but (in >> theory) I am occupied by another SDO meeting this week. >>=20 >> Viele Gr=C3=BC=C3=9Fe, >>=20 >> Henk >>=20 >>=20 >> On 15.06.21 13:36, tom petch wrote: >>> From: Kent Watsen >>> Sent: 14 June 2021 15:27 >>>=20 >>> [CC-ing Henk, to whom a question is directed to below] >>>=20 >>>=20 >>> Hi Tom, >>>=20 >>>> Top posting a new and different issue. >>>=20 >>> Thanks for updating the subject line. >>>=20 >>>=20 >>>> server case psk references ServerKeyExchange and psk-identity-hint = neither of which exist in TLS1.3. The client sends an extension = PreSharedKeyExtension which contains a list of identities from which the = server selects one as selected-identity for which the identifier is = uint16 indexing into the client's list. RFC8446 s.4.2.11. >>>>=20 >>>> The client description also needs amending. >>>>=20 >>>> TLS1.2 was extended to use tickets in this area to aid session = resumption; these have now gone and been replaced by this extension. I = would not suggest adding support for tickets. >>>>=20 >>>> As I may have said before, TLS 1.3 is different. >>>=20 >>> Henk, could you help with these edits? Support for PSK and raw = public key were added to draft-ietf-netconf-tls-client-server per your = request and, if memory serves me, didn=E2=80=99t you help me with the = YANG update too? I suppose what is needed is a either a =E2=80=9Cchoice=E2= =80=9D statement (with cases for 1.2 and 1.3) *or* sibling-container = statements (in case it=E2=80=99s necessary both are configured in case, = e.g., the client sends one or the other)... >>>=20 >>> >>> Or else drop support for PSK with TLS1.3 at this time because too = little is known about it outside the use for HTTP. I am starting to see = I-D about how to use TLS1.3 with application X, even for HTTP, and I = think that such an I-D will be needed for many applications with or = without PSK. >>>=20 >>> Tom Petch >>>=20 >>>> Tom Petch >>>=20 >>> Kent >>>=20 >>=20 >> _______________________________________________ >> netconf mailing list >> netconf@ietf.org >> https://www.ietf.org/mailman/listinfo/netconf >=20 > --=20 > Juergen Schoenwaelder Jacobs University Bremen gGmbH > Phone: +49 421 200 3587 Campus Ring 1 | 28759 Bremen | Germany > Fax: +49 421 200 3103 >=20 > _______________________________________________ > netconf mailing list > netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf --Apple-Mail=_3BA66C14-9E86-4824-AF99-DB8DE337BD11 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Thanks Juergen and Tom.

Henk, thanks for poking in on this = thread.  Given that it appears the PSK/RPK support in TLS 1.3 is = work-in-progress, Tom=E2=80=99s suggestion to defer modeling the TLS 1.3 = part of the model at this time makes sense to me - do you = agree?

If so, = then it seems that we should update the model now to have a =E2=80=9Cchoic= e statement=E2=80=9D or =E2=80=9Csibling-container statements", adding = =E2=80=9Cif-feature=E2=80=9D statements as needed, and then just define = the TLS 1.2 solution, enabling the TLS 1.3 solution to slide-in = =E2=80=9Cperfectly=E2=80=9D via a future effort.  

Could you (or maybe Tom) = help us know if a =E2=80=9Cchoice = statement=E2=80=9D or =E2=80=9Csibling-container statements=E2=80=9D is = needed?  The answer may vary for the TLS-client vs the = TLS-server...

K.



On Jun 15, 2021, at 8:18 AM, Juergen = Schoenwaelder <j.schoenwaelder@jacobs-university.de> wrote:

The = way TLS is used with NETCONF is defined in RFC 7589. If any of
that needs clarification to properly support TLS 1.3, then we = need to
revise RFC 7589. Defining the proper configuration = knobs should follow
from that.

And as Kent reminds us, the scope of the TLS configuration = draft is
much wider than just NETCONF over TLS. Hence, = dropping support for
certain TLS 1.3 features, that may be = essential in some use cases,
should be done with great = care. (And lets keep in mind that dropping
standard = configuration knobs just means that there are no standard
configuration knobs, it does not mean that a certain protocol = feature
won't be used, it will just be configured using = other non-standard
means).

/js

On Tue, Jun 15, 2021 at = 01:53:19PM +0200, Henk Birkholz wrote:
Hi all,

a fellow = IETF'ler poked me to pay attention to this thread. Sorry for the
latency.

Hm - dropping PSK = support for TLS 1.3 seems to be leaving a bunch of
implementations in the IoT space behind that are inching = towards migration,
currently.

How urgent is this? I can certainly massage the current YANG = module, but (in
theory) I am occupied by another SDO = meeting this week.

Viele Gr=C3=BC=C3=9Fe,

Henk


On 15.06.21 13:36, tom petch wrote:
From: Kent Watsen <kent+ietf@watsen.net>
Sent: 14 June 2021 = 15:27

[CC-ing Henk, to whom a question is = directed to below]


Hi = Tom,

Top= posting a new and different issue.

Thanks for updating the subject line.


server = case psk references ServerKeyExchange and psk-identity-hint neither of = which exist in TLS1.3.  The client sends an extension = PreSharedKeyExtension which contains a list of identities from which the = server selects one as selected-identity for which the identifier is = uint16 indexing into the client's list. RFC8446 s.4.2.11.

The client description also needs amending.

TLS1.2 was extended to use tickets in this = area to aid session resumption; these have now gone and been replaced by = this extension.  I would not suggest adding support for tickets.

As I may have said before, TLS 1.3 is = different.

Henk, could you = help with these edits?   Support for PSK and raw public key = were added to draft-ietf-netconf-tls-client-server per your request and, = if memory serves me, didn=E2=80=99t you help me with the YANG update = too?   I suppose what is needed is a either a =E2=80=9Cchoice=E2= =80=9D statement (with cases for 1.2 and 1.3) *or* sibling-container = statements (in case it=E2=80=99s necessary both are configured in case, = e.g., the client sends one or the other)...

<tp>
Or else drop support for PSK with = TLS1.3 at this time because too little is known about it outside the use = for HTTP.  I am starting to see I-D about how to use TLS1.3 with = application X, even for HTTP,  and I think that such an I-D will be = needed for many applications with or without PSK.

Tom Petch

Tom Petch

Kent


_______________________________________________
netconf mailing list
netconf@ietf.org
https://www.ietf.org/mailman/listinfo/netconf

--
Juergen = Schoenwaelder =           Jacobs = University Bremen gGmbH
Phone: +49 421 200 3587 =         Campus Ring 1 | 28759 = Bremen | Germany
Fax:   +49 421 200 3103 =         <https://www.jacobs-university.de/>

_______________________________________________
netconf mailing list
netconf@ietf.org
https://www.ietf.org/mailman/listinfo/netconf

= --Apple-Mail=_3BA66C14-9E86-4824-AF99-DB8DE337BD11-- From nobody Tue Jun 15 09:22:34 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D0E453A3572 for ; Tue, 15 Jun 2021 09:22:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=btconnect.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MXyx5e4kHtp8 for ; Tue, 15 Jun 2021 09:22:28 -0700 (PDT) Received: from EUR05-VI1-obe.outbound.protection.outlook.com (mail-vi1eur05on2139.outbound.protection.outlook.com [40.107.21.139]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9B0D03A3573 for ; Tue, 15 Jun 2021 09:22:27 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=B0/Nf/CtYgCtW2guLhdWwYEucOmaP8GbJ4oq85DWmw9hzH+0Hz3u5gf5HnCWsyi1vvQLQrpYcjxh/eVI0XkVxrzrTXRlkeHE5c4zwZ95qS7YWyljNVeAAzonXXiyow5FMsQ2h1LaEYUhZi6MzMAU1USjO42JaUjaqzc5Lc62UwqvYwnn6nErc7eEEPBBxz3Vusi3AfEPs9Cn1Plrit74eZuCPSAKUHYNkW7JdVcK+qdddA8tioBHpTK04ihV+5YnLpI8RmIzNTi5vqkcrQ98Jx3G212phn+jPA0StcDJCe78eJQQAbozm/3ViRjcmCGiPArUKntrWsrq9tDDmjzr6g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=G/IlaBiHjYbjL/lpqb+sCFVUsGswP5X1uyldpxCEEAY=; b=fGWmtCj+GxfdfjR+DVaKmopaf92WUovJA7CJdtS3yv9nO2rsGIYCX/BTmBx+4ji6d3TDsj9TPPARFAcm2llHymIRcQyxV9u03ANquABQbPv9MplQn783+9/Swz//6t2xAD5xTCAn9qEz4hvs1/0R8SflsylLs0N6c47TcVTE/4TBccxvKxQfWyNNUnazlPKRBSFrb5NMdDWgOCK9R9KYudo4/LNfRqESMuLcaZtNVxfbMLDOOX4ldD6EeNUWOqJDw1FLhmFXzd9zYD9uUPH/AQ5jNMQ+LVUygVwPVLFYgpQjdsY4ArmY1bfQs9lqAfoybdFBrmNJESte04zKVh3gCw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=btconnect.com; dmarc=pass action=none header.from=btconnect.com; dkim=pass header.d=btconnect.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btconnect.onmicrosoft.com; s=selector2-btconnect-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=G/IlaBiHjYbjL/lpqb+sCFVUsGswP5X1uyldpxCEEAY=; b=BMVR2z4DYbh7bO6Hn16CdTOqhorbcm4L0Z9M7wFarlNwHJkpbASxQHfbIKdhI3IiR+2YpMnDxse0IAb/l3VxZHWPUt80W3d2BIeQJ3rUUDqP3gm/PbAaYdxUvK53KE6NvMv6C0cB/IDZJFToXNYbqXPlVTzpbXFBjSrYkeCUXOs= Received: from AM7PR07MB6248.eurprd07.prod.outlook.com (2603:10a6:20b:134::11) by AM6PR07MB5815.eurprd07.prod.outlook.com (2603:10a6:20b:9e::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4242.9; Tue, 15 Jun 2021 16:22:24 +0000 Received: from AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::a05a:a474:bf78:f0a9]) by AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::a05a:a474:bf78:f0a9%7]) with mapi id 15.20.4242.016; Tue, 15 Jun 2021 16:22:24 +0000 From: tom petch To: "netconf@ietf.org" , Juergen Schoenwaelder Thread-Topic: [netconf] More complications Thread-Index: AQHXYSl46ebcY/ZiP0e+CTU8u5WUB6sU8i3zgAAFkYCAAAbqAIAAPxsW Date: Tue, 15 Jun 2021 16:22:24 +0000 Message-ID: References: <010001798c0d947e-4d2d14f5-9f0e-450d-ac99-e18c260f0c2b-000000@email.amazonses.com> <01000179a0aa5d37-4810234e-8db2-434d-b8fa-780c1648955a-000000@email.amazonses.com> <01000179a5bdc371-b665451f-61d4-4364-9d55-e9369f3adc8e-000000@email.amazonses.com> <0100017a0aebfbf3-9e9c22e8-da12-4364-a572-8ce7fd43bf0f-000000@email.amazonses.com> <540b31e5-10a6-495f-cf44-820adb6213b3@sit.fraunhofer.de>, <20210615121804.weihro7eusvnfym6@anna.jacobs.jacobs-university.de> In-Reply-To: <20210615121804.weihro7eusvnfym6@anna.jacobs.jacobs-university.de> Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=btconnect.com; x-originating-ip: [86.143.250.86] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 21d490af-83e2-40d7-c515-08d93019c261 x-ms-traffictypediagnostic: AM6PR07MB5815: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:5236; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM7PR07MB6248.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(346002)(136003)(376002)(396003)(366004)(39860400002)(52536014)(8676002)(66446008)(64756008)(66556008)(186003)(83380400001)(38100700002)(33656002)(86362001)(71200400001)(66946007)(76116006)(66476007)(91956017)(5660300002)(8936002)(9686003)(110136005)(26005)(966005)(55016002)(6506007)(53546011)(2906002)(7696005)(478600001)(122000001)(316002); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?Windows-1252?Q?yVz32yxlcQ4hOsF2qQucdGU8pyNpZ4dfj2j5ZM2cb2ZKdFAR3dz4Vg7t?= =?Windows-1252?Q?tw579wtJ8ncSIelkC0mf1r/DPvgZwtbbkXspg6ItgW2sszhc5eTy9Afi?= =?Windows-1252?Q?iChlNrx2Xz8PH4yH9p9qqXKqIJi94CwedbyaZDj1OyRSYM7zeRfuyol4?= =?Windows-1252?Q?kadVxJjbXs1WnLWf7KaQjrxxdVSvVpoOzhnjosl28ILwmlTp3JT5Xcnt?= =?Windows-1252?Q?4mgrqmYCn2GDmn+2nsfohgEteG9+aDBsHJsZ1C/cus+kqWyfp+OxZNAS?= =?Windows-1252?Q?SkQococG6fHsRHApp4Gq5pa/8GFZTi71qRnVfPA859kTo4TO/8c44S14?= =?Windows-1252?Q?dkl4O758RQo+SVmlL+w4EHnE9C7jvdlsrcQJZSSfLp2tN5LmviQYW4tR?= =?Windows-1252?Q?nb/yCUrFty0Flx2eSDevFbZJjZ5YTd+NpjeWmefWFJ2T+D5AiMMbJxUH?= =?Windows-1252?Q?L9AcFDvFwhT9s1kG6mpYeKf2jkcOy9seYLCmyW+BVezQ0pWXL7RE+cC8?= =?Windows-1252?Q?8DPm2xibYS6308RZF1PkxSM3apHPnSdyD4U8IQ7UcwKb96/WA/7QI/RE?= =?Windows-1252?Q?a1LJiCRDqYxOFp49wHz+SeZFdUzXYN3Xg/N2bSXd5Y07jpxlfTQV9oaV?= =?Windows-1252?Q?nQ+tXfc9nPHu/DOQMGCZ8YsOkh1IwDTI0alyZIR3YKGm3qjG3vNWD2QV?= =?Windows-1252?Q?NJ5Pz4Vw7Q/MknvIZKku210edlUj8XS6DobWAozcyicr6BVZaFslfYSG?= =?Windows-1252?Q?phFTxh5KHDaBiNsOE+FhiB+BjuB0R9su/sJGLHobqE4zwR6GLc7yLcTI?= =?Windows-1252?Q?cofS+01qb62hfoP2BeFNUKC73riOewqCXWt6rGEBxYxrw2srBNmQWa1j?= =?Windows-1252?Q?E70ZC827s4dNJBLmKtqU5RhJ43KI+untKUCx8JiG5Fgc4xJeLbK1k26B?= =?Windows-1252?Q?30c7SiLPmajcvyorEypoe091uwWGp5lumc5JPnJHGFbeGtG07rsedIUg?= =?Windows-1252?Q?JcDycAOT0D4mMJZty/wao0g88zmYqFcZNpIiBUGpd3D9AiOtRaNaKXVq?= =?Windows-1252?Q?s/SCdee3XeskH7TZn9vbDxIL19yn54QJYmIV/repMLpazhyIys4XS+Wu?= =?Windows-1252?Q?ORrdWmsYNSewdVJ1CdiGOc9CcT2f10tpSAjUc2rqC5BtQW10V990YgBM?= =?Windows-1252?Q?q43sqJXpeY0WHXGYvKIMvv/p5bKEaf6aHtgZVoZGr7mYjrZd1E6j7CM7?= =?Windows-1252?Q?EurXFkbxdYOnq7pqSnEz+3hBIza4WuNTRD9gQYYYAS4IaMYfbQlwoy96?= =?Windows-1252?Q?vFTN7ezQdrWBu5GxMKks721f7QzRK2hFlHYixn8EKGS0VnzAr/rHQbAV?= =?Windows-1252?Q?sCPuvQ6FD3AhqWm6pthNvR+9AZiZXTM7XN8=3D?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: btconnect.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AM7PR07MB6248.eurprd07.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 21d490af-83e2-40d7-c515-08d93019c261 X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Jun 2021 16:22:24.2720 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: cf8853ed-96e5-465b-9185-806bfe185e30 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: sYgLcxh3o35absba7seOXKZ+O6fvbR6joAyZ7Mm66wSwNCdiOlwOvnv51q8ZqTHLK7ajcwKxCSYlmsFOIk1onw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR07MB5815 Archived-At: Subject: Re: [netconf] More complications X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Jun 2021 16:22:33 -0000 From: netconf on behalf of Juergen Schoenwaelder= =0A= Sent: 15 June 2021 13:18=0A= =0A= The way TLS is used with NETCONF is defined in RFC 7589. If any of=0A= that needs clarification to properly support TLS 1.3, then we need to=0A= revise RFC 7589. Defining the proper configuration knobs should follow=0A= from that.=0A= =0A= =0A= You wisely pointed out this before and then and now, I re-read RFC7589 and = think that updating it will take some time and that I am unclear how much s= cope it gives us for the time being.=0A= =0A= It only mentions TLS1.2 (of course) but does not prohibit other versions so= arguably caters for some forms of TLS1.3.=0A= =0A= It is very keen on certificates but allows for other suitable mutual authen= tication which could be taken to include PSK but would appear not to cater = for deriving a username from a PSK (s.7) which suggests PSK is out of scope= . TLS regards a public key as a certificate which is fine until you need a= subjectAltName or some such from which to derive the username, which the = RFC does so that would seem to be out of scope. =0A= =0A= It does not cover TLS keepalive (which netconf-tls does).=0A= =0A= So, TLS1.3 with proper certificates would seem to be the only option.=0A= =0A= Tom Petch=0A= =0A= And as Kent reminds us, the scope of the TLS configuration draft is=0A= much wider than just NETCONF over TLS. Hence, dropping support for=0A= certain TLS 1.3 features, that may be essential in some use cases,=0A= should be done with great care. (And lets keep in mind that dropping=0A= standard configuration knobs just means that there are no standard=0A= configuration knobs, it does not mean that a certain protocol feature=0A= won't be used, it will just be configured using other non-standard=0A= means).=0A= =0A= /js=0A= =0A= On Tue, Jun 15, 2021 at 01:53:19PM +0200, Henk Birkholz wrote:=0A= > Hi all,=0A= >=0A= > a fellow IETF'ler poked me to pay attention to this thread. Sorry for the= =0A= > latency.=0A= >=0A= > Hm - dropping PSK support for TLS 1.3 seems to be leaving a bunch of=0A= > implementations in the IoT space behind that are inching towards migratio= n,=0A= > currently.=0A= >=0A= > How urgent is this? I can certainly massage the current YANG module, but = (in=0A= > theory) I am occupied by another SDO meeting this week.=0A= >=0A= > Viele Gr=FC=DFe,=0A= >=0A= > Henk=0A= >=0A= >=0A= > On 15.06.21 13:36, tom petch wrote:=0A= > > From: Kent Watsen =0A= > > Sent: 14 June 2021 15:27=0A= > >=0A= > > [CC-ing Henk, to whom a question is directed to below]=0A= > >=0A= > >=0A= > > Hi Tom,=0A= > >=0A= > > > Top posting a new and different issue.=0A= > >=0A= > > Thanks for updating the subject line.=0A= > >=0A= > >=0A= > > > server case psk references ServerKeyExchange and psk-identity-hint ne= ither of which exist in TLS1.3. The client sends an extension PreSharedKey= Extension which contains a list of identities from which the server selects= one as selected-identity for which the identifier is uint16 indexing into = the client's list. RFC8446 s.4.2.11.=0A= > > >=0A= > > > The client description also needs amending.=0A= > > >=0A= > > > TLS1.2 was extended to use tickets in this area to aid session resump= tion; these have now gone and been replaced by this extension. I would not= suggest adding support for tickets.=0A= > > >=0A= > > > As I may have said before, TLS 1.3 is different.=0A= > >=0A= > > Henk, could you help with these edits? Support for PSK and raw public= key were added to draft-ietf-netconf-tls-client-server per your request an= d, if memory serves me, didn=92t you help me with the YANG update too? I = suppose what is needed is a either a =93choice=94 statement (with cases for= 1.2 and 1.3) *or* sibling-container statements (in case it=92s necessary b= oth are configured in case, e.g., the client sends one or the other)...=0A= > >=0A= > > =0A= > > Or else drop support for PSK with TLS1.3 at this time because too littl= e is known about it outside the use for HTTP. I am starting to see I-D abo= ut how to use TLS1.3 with application X, even for HTTP, and I think that s= uch an I-D will be needed for many applications with or without PSK.=0A= > >=0A= > > Tom Petch=0A= > >=0A= > > > Tom Petch=0A= > >=0A= > > Kent=0A= > >=0A= >=0A= > _______________________________________________=0A= > netconf mailing list=0A= > netconf@ietf.org=0A= > https://www.ietf.org/mailman/listinfo/netconf=0A= =0A= --=0A= Juergen Schoenwaelder Jacobs University Bremen gGmbH=0A= Phone: +49 421 200 3587 Campus Ring 1 | 28759 Bremen | Germany=0A= Fax: +49 421 200 3103 =0A= =0A= _______________________________________________=0A= netconf mailing list=0A= netconf@ietf.org=0A= https://www.ietf.org/mailman/listinfo/netconf=0A= From nobody Tue Jun 15 13:01:08 2021 Return-Path: X-Original-To: netconf@ietf.org Delivered-To: netconf@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 190D53A3BFE; Tue, 15 Jun 2021 13:01:05 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: netconf@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.32.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: netconf@ietf.org Message-ID: <162378726503.17404.9102592743962008861@ietfa.amsl.com> Date: Tue, 15 Jun 2021 13:01:05 -0700 Archived-At: Subject: [netconf] I-D Action: draft-ietf-netconf-sztp-csr-03.txt X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Jun 2021 20:01:05 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Network Configuration WG of the IETF. Title : Conveying a Certificate Signing Request (CSR) in a Secure Zero Touch Provisioning (SZTP) Bootstrapping Request Authors : Kent Watsen Russ Housley Sean Turner Filename : draft-ietf-netconf-sztp-csr-03.txt Pages : 29 Date : 2021-06-15 Abstract: This draft extends the "get-bootstrapping-data" RPC defined in RFC 8572 to include an optional certificate signing request (CSR), enabling a bootstrapping device to additionally obtain an identity certificate (e.g., an LDevID, from IEEE 802.1AR) as part of the "onboarding information" response provided in the RPC-reply. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-netconf-sztp-csr/ There is also an HTML version available at: https://www.ietf.org/archive/id/draft-ietf-netconf-sztp-csr-03.html A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-netconf-sztp-csr-03 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Jun 15 13:06:56 2021 Return-Path: <0100017a11488ce1-1e6036ff-fd01-40fc-801d-c97b2221bb39-000000@amazonses.watsen.net> X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A041F3A3C00; Tue, 15 Jun 2021 13:06:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.894 X-Spam-Level: X-Spam-Status: No, score=-1.894 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SO8mbp6LGYnV; Tue, 15 Jun 2021 13:06:50 -0700 (PDT) Received: from a48-90.smtp-out.amazonses.com (a48-90.smtp-out.amazonses.com [54.240.48.90]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AA5A43A3C2A; Tue, 15 Jun 2021 13:06:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1623787605; h=From:Message-Id:Content-Type:Mime-Version:Subject:Date:In-Reply-To:Cc:To:References:Feedback-ID; bh=LWBW1pIQYkV+Jnzed8gY5s9wMEce8QujbKTFwppDkGc=; b=PHcJQE8rQNq3bdQlzRFMRFh8um71ZeziWkkRhtJJ8oTpwzbSy80Tg4+f1KzF3fsC wbBR6GLSk9vDs7poG8HONLYSOBR/S29TPmVg2Jl/acjR9QnuMQkMmL3uKQbrxqKe6QY qCdnxZlR/cslaHACbQXb//Quw3fusrVFm29y40OA= From: Kent Watsen Message-ID: <0100017a11488ce1-1e6036ff-fd01-40fc-801d-c97b2221bb39-000000@email.amazonses.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_147F7BA6-F190-436F-9BEA-7853EFFB9B95" Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.100.0.2.22\)) Date: Tue, 15 Jun 2021 20:06:45 +0000 In-Reply-To: <162317619873.9343.9749227005482545691@ietfa.amsl.com> Cc: YANG Doctors , last-call@ietf.org, draft-ietf-netconf-sztp-csr.all@ietf.org, "netconf@ietf.org" , Russ Housley , Sean Turner To: Joe Clarke References: <162317619873.9343.9749227005482545691@ietfa.amsl.com> X-Mailer: Apple Mail (2.3654.100.0.2.22) Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES X-SES-Outgoing: 2021.06.15-54.240.48.90 Archived-At: Subject: Re: [netconf] [yang-doctors] Yangdoctors last call review of draft-ietf-netconf-sztp-csr-02 X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Jun 2021 20:06:55 -0000 --Apple-Mail=_147F7BA6-F190-436F-9BEA-7853EFFB9B95 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 [Sean, please note the question to you below] Hi Joe, Thank you for your review! Diffs can be found here: = https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-netconf-sztp-csr-03.txt = . Please see below for comments. Kent > On Jun 8, 2021, at 2:16 PM, Joe Clarke via Datatracker = wrote: >=20 > Reviewer: Joe Clarke > Review result: Ready with Nits >=20 > I have been asked to perform a last-call review of this draft on = behalf of YANG > Doctors. This draft specifies a YANG module for conveying a CSR in a = Secure > Zero Touch Provisioning Bootstrapping Request. It augments the > "get-bootstrapping-data" RPC defined in RFC 8572. Overall, I found = the draft > (and module) ready with the following small issues/nits. Thank you. > Editorial Note: >=20 > You mention XXXX and AAAA, and you also use BBBB in the module > ietf-yang-structure-ext. I know this section will be removed, but you = may want > to mention this to make sure that substitution is done. XXXX and AAAA are both discussed in the "Editorial Note (To be removed = by RFC Editor)=E2=80=9D section found at the beginning of the document. Good catch on BBBB, but even more importantly, =E2=80=9CRFC BBBB" is now = =E2=80=9CRFC 8791=E2=80=9D, so I made that final designation instead. > =3D=3D=3D >=20 > Section 2.1 >=20 > The YANG tree here deviates from the output produced by pyang > --tree-print-structures --tree-line-length=3D69 = --tree-module-name-prefix. In > particular, the "flags" column is missing from each element under the = augment > branch (e.g., the 'w' that appears in pyang's output's flags field). True. I uncharacteristically used `yanglint` to generate that tree = diagram. I reverted back to `pyang` and now the flags appear correctly. > =3D=3D=3D >=20 > Section 2.2 >=20 > You have this text: Some implementation may choose to convey it inside = a script > (e.g., SZTP's "pre-configuration-script") >=20 > I'd like to see a reference to RFC 8572 here on where this is defined. = I > realize I'm being pedantic here, but there are a number of SZTP = documents, and > I think having a reference helps. I added the sentence "SZTP onboarding information is described in = Section 2.2 of [RFC8572].=E2=80=9D to the end of that paragraph. Is = this what you had in mind? > =3D=3D=3D >=20 > Section 2.2 >=20 > s/so that the the device/so that the device/ Fixed! > =3D=3D=3D >=20 > Module overall: >=20 > I noticed that the module itself differs in various formatting from = pyang -f > yang. There are some line and spacing differences, and I don't think = it would > hurt to canonicalize the module in the draft. Thanks - updated to better align with `pyang -f yang --keep-comments = --yang-line-length 69 ietf-sztp-csr@*.yang`. > =3D=3D=3D >=20 > Module's main description: >=20 > You mention SZTP's 'onboarding-information' response, but this isn't a = formal > YANG node. That node is conveyed-information. Is it worth clarifying = that > here in the module description like you did in draft text in section = 2.2? I > have the same comment in the description of "container csr". The = quoted and > hyphenated "onboarding-information" might make one think that there is = a node > that contains this. 'onboarding-information=E2=80=99 *is* a formal node - it is described = here: https://datatracker.ietf.org/doc/html/rfc8572#section-2.2. =20 Just the same, I converted =E2=80=9C =E2=80=98onboarding-information=E2=80= =99 =E2=80=9D to =E2=80=9Conboarding information=E2=80=9D (without the = hyphen or single quotes, as it is also defined as a term that way in RFC = 8572. The clarification "onboarding-information" (encoded inside the = "conveyed-information" node)" found in 2.2 was/is to help the reader = with the following example snippet that doesn=E2=80=99t actually show = the "onboarding-information=E2=80=9D node because it is hidden inside = the =E2=80=9Cbase64encodedvalue=3D=3D=E2=80=9C value. Makes sense? { "ietf-sztp-bootstrap-server:output" : { "reporting-level": "verbose", "conveyed-information": =E2=80=9Cbase64encodedvalue =3D=3D" } } > =3D=3D=3D >=20 > Under leaf cmc's description: >=20 > s/is the TaggedCertificationRequest and it a bodyPartId/is the > TaggedCertificationRequest and it consists of a bodyPartId/ >=20 > There are two instances of this, and I wasn't sure exactly what you = wanted to > say here. This was my attempt to make it readable. Reading the description statement for "leaf cmc=E2=80=9D shows that it = describes three structures, each for a different condition. I agree that the text for the last two structures is highly similar, = though not exactly the same. Perhaps the text could be simplified. = Sean, what do you think? (Search for =E2=80=9Cleaf cmc=E2=80=9D here: = https://datatracker.ietf.org/doc/html/draft-ietf-netconf-sztp-csr-03 = ) > =3D=3D=3D >=20 > While you indicate that the algorithm-selected node is mandatory, = should this > not be the case for the selected-algorithm container that contains it = since as > you state in the description for cert-req-info, it is an error if the > SubjectPublicKeyInfo's algorithm does not match the = selected-algorithm. Could > an implementer not return this container at all and still be compliant = to the > module while causing unexpected behavior for the client? I think it=E2=80=99s okay. I just tested and validation also fails if = the "selected-algorithm=E2=80=9D node is missing. > In leaf cert-req-info's description: >=20 > The word =E2=80=9Canother=E2=80=9D (with respect to the 400 Server = Error) doesn=E2=80=99t follow here > unless one refers to the csr-support presence container above. I = think > dropping it might make this text a bit less confusing (or copying = similar text > from the csr-support node=E2=80=99s description. Replaced =E2=80=9Canother 400 (Bad Request) response=E2=80=9D with "a = 400 (Bad Request) response containingvanother 'request-info' = structure.=E2=80=9D=20 Better? > =3D=3D=3D >=20 > Section 3.1.2: >=20 > s/In cases where it it not possible/In cases where it is not possible/ Fixed. > s/key rather then generate/key rather than generate/ Fixed. Thanks again! Kent --Apple-Mail=_147F7BA6-F190-436F-9BEA-7853EFFB9B95 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
[Sean, please note the question to you below]


Hi = Joe,

Thank you for = your review!

Diffs can be found here: https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-netconf-sztp-csr= -03.txt.

Please see below for comments.

Kent


On Jun 8, 2021, at 2:16 PM, Joe Clarke via Datatracker <noreply@ietf.org> = wrote:

Reviewer: Joe Clarke
Review result: Ready with = Nits

I have been asked to perform a = last-call review of this draft on behalf of YANG
Doctors. =  This draft specifies a YANG module for conveying a CSR in a = Secure
Zero Touch Provisioning Bootstrapping Request. =  It augments the
"get-bootstrapping-data" RPC defined = in RFC 8572.  Overall, I found the draft
(and module) = ready with the following small issues/nits.

Thank = you.


Editorial = Note:

You mention XXXX and AAAA, and you = also use BBBB in the module
ietf-yang-structure-ext. =  I know this section will be removed, but you may want
to mention this to make sure that substitution is done.

XXXX = and AAAA are both discussed in the "Editorial Note (To be removed by RFC = Editor)=E2=80=9D section found at the beginning of the = document.

Good catch on BBBB, but = even more importantly, =E2=80=9CRFC BBBB" is now =E2=80=9CRFC 8791=E2=80=9D= , so I made that final designation instead.


=3D=3D=3D

Section = 2.1

The YANG tree here deviates from the = output produced by pyang
--tree-print-structures = --tree-line-length=3D69 --tree-module-name-prefix.  In
particular, the "flags" column is missing from each element = under the augment
branch (e.g., the 'w' that appears in = pyang's output's flags field).

True. =  I uncharacteristically used `yanglint` to generate that tree = diagram.  I reverted back to `pyang` and now the flags appear = correctly.



=3D=3D=3D

Section 2.2

You have this text: Some implementation may = choose to convey it inside a script
(e.g., SZTP's = "pre-configuration-script")

I'd like to see = a reference to RFC 8572 here on where this is defined.  I
realize I'm being pedantic here, but there are a number of = SZTP documents, and
I think having a reference helps.

I = added the sentence "SZTP onboarding information is described in Section = 2.2 of [RFC8572].=E2=80=9D  to the end of that paragraph.  Is = this what you had in mind?


=3D=3D=3D

Section 2.2

s/so that the the device/so that the = device/

Fixed!


=3D=3D=3D

Module overall:

I noticed that the module itself differs in = various formatting from pyang -f
yang.  There are = some line and spacing differences, and I don't think it would
hurt to canonicalize the module in the draft.

Thanks = - updated to better align with `pyang -f yang --keep-comments = --yang-line-length 69 ietf-sztp-csr@*.yang`.



=3D=3D=3D

Module's main description:

You mention SZTP's 'onboarding-information' response, but = this isn't a formal
YANG node.  That node is = conveyed-information.  Is it worth clarifying that
here= in the module description like you did in draft text in section 2.2? =  I
have the same comment in the description of = "container csr".  The quoted and
hyphenated = "onboarding-information" might make one think that there is a node
that contains this.

'onboarding-information=E2=80=99 *is* a formal = node - it is described here: https://datatracker.ietf.org/doc/html/rfc8572#section-2.2. =  

Just the same, I converted = =E2=80=9C =E2=80=98onboarding-information=E2=80=99 =E2=80=9D to = =E2=80=9Conboarding information=E2=80=9D (without the hyphen or single = quotes, as it is also defined as a term that way in RFC = 8572.

The clarification "onboarding-information" (encoded inside the = "conveyed-information" node)" found in 2.2 was/is to help the reader = with the following example snippet that doesn=E2=80=99t actually show = the "onboarding-information=E2=80=9D = node because it is hidden inside the =E2=80=9Cbase64encodedvalue=3D=3D= =E2=80=9C value.  Makes sense?

   {
    =  "ietf-sztp-bootstrap-server:output" : {
  =      "reporting-level": "verbose",
  =      "conveyed-information": =E2=80=9Cbase64encodedvalue =3D=3D"
  =    }
   }


=3D=3D=3D

Under = leaf cmc's description:

s/is the = TaggedCertificationRequest and it a bodyPartId/is the
TaggedCertificationRequest and it consists of a = bodyPartId/

There are two instances of = this, and I wasn't sure exactly what you wanted to
say = here.  This was my attempt to make it readable.

Reading= the description statement for "leaf cmc=E2=80=9D shows that it = describes three structures, each for a different = condition.

I agree that the text for = the last two structures is highly similar, though not exactly the same. =  Perhaps the text could be simplified.  Sean, what do you = think?  (Search for =E2=80=9Cleaf cmc=E2=80=9D here: https://datatracker.ietf.org/doc/html/draft-ietf-netconf-sztp-c= sr-03)


=3D=3D=3D

While you indicate that the algorithm-selected = node is mandatory, should this
not be the case for the = selected-algorithm container that contains it since as
you = state in the description for cert-req-info, it is an error if the
SubjectPublicKeyInfo's algorithm does not match the = selected-algorithm.  Could
an implementer not return = this container at all and still be compliant to the
module = while causing unexpected behavior for the client?

I = think it=E2=80=99s okay.  I just tested and validation also fails = if the "selected-algorithm=E2=80=9D node is missing.



In leaf = cert-req-info's description:

The word = =E2=80=9Canother=E2=80=9D (with respect to the 400 Server Error) = doesn=E2=80=99t follow here
unless one refers to the = csr-support presence container above.  I think
dropping= it might make this text a bit less confusing (or copying similar = text
from the csr-support node=E2=80=99s description.

Replaced = =E2=80=9Canother 400 (Bad Request) response=E2=80=9D = with "a 400 (Bad Request) response containingvanother 'request-info' = structure.=E2=80=9D 

Better?


=3D=3D=3D

Section = 3.1.2:

s/In cases where it it not = possible/In cases where it is not possible/
Fixed.


s/key rather then = generate/key rather than generate/
Fixed.


Thanks = again!

Kent










= --Apple-Mail=_147F7BA6-F190-436F-9BEA-7853EFFB9B95-- From nobody Tue Jun 15 13:49:33 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 61FEF3A3D66; Tue, 15 Jun 2021 13:49:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.594 X-Spam-Level: X-Spam-Status: No, score=-9.594 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=Qzdec5Nf; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=CCxuTom5 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z0lcgWwjWFBz; Tue, 15 Jun 2021 13:49:26 -0700 (PDT) Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 204773A3D65; Tue, 15 Jun 2021 13:49:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=8264; q=dns/txt; s=iport; t=1623790166; x=1624999766; h=from:to:cc:subject:date:message-id:references: mime-version; bh=dQR9Hr/svxWoMbFDS7M3T0fleFTjmeSehnLQsBTg5B4=; b=Qzdec5Nfb1/X4BfI/v1Eiaadzv2QV5nIkcKmKLdTitVpNUWJNEbP3VyB DoDi4cT+oxb7KnSzDtDN8aXSVazVizlGuCIPEk//mXOSAWO+xr2zQVynt spvFV8fYOumK4jZw/LQn3MDVevebCAsMFopJ6pqIbFDjJcX/0HVbRISwD w=; X-IPAS-Result: =?us-ascii?q?A0AkAAAfEclgl5JdJa1aHQEBAQEJARIBBQUBQIFDCAELA?= =?us-ascii?q?YFSUX5aNzELiAUDhFlgiQCVG4UAgS6BJQNUCwEBAQ0BATUKAgQBAYRQAoJoA?= =?us-ascii?q?iU0CQ4CBAEBAQEDAgMBAQEBBQEBBQEBAQIBBgQUAQEBAQEBAQFohWgNhkYCB?= =?us-ascii?q?BIuAQE3AQ8CAQhGMiUCBA4NGoJPAYF+VwMvAQ6cYwGBOgKKH3iBNIEBggcBA?= =?us-ascii?q?QYEBIFIQYMqGIIxAwaBOgGCeoQMhmMnHIFJRIEVQ4FggQA+gmIBAQIBgUUaK?= =?us-ascii?q?4MgggwihAIDFBscBgJzEoENlGCIUo0ekDOBTAqDHIoQhmyNFRKDXpFNkDuXb?= =?us-ascii?q?IoAk0GEWwIEAgQFAg4BAQaBVDmBW3AVgyRQFwIOjh8MDQkVgzmFFIVKcwI2A?= =?us-ascii?q?gYKAQEDCXyHTwGBEAEB?= IronPort-PHdr: A9a23:Dk0K8RHukLc2DoyNvczoTp1Gfj4Y04WdBeZdwoUul6lDdOKl8oixd EDc5PA4iljPUM2b7v9fkOPZvujmXnBI+peOtn0OMfkuHx8IgMkbhUosVciCD0CoM/f2dCE8W sJPSAwt83SyK0MAHsH4ahXbqWGz6jhHHBL5OEJ1K+35F5SUgd6w0rW5+obYZENDgz/uCY4= IronPort-HdrOrdr: A9a23:Yt0HiqFCMTPN3UlOpLqFaJHXdLJyesId70hD6qkvc31om52j+f xGws516fatskdsZJkh8erwX5VoMkmsiqKdgLNhc4tKOTOHhILGFvAY0WKP+UyEJ8SczJ8d6U 4DSdkFNDSYNzET5qyWjHjaYrQdKZu8gd2VbIzlvhFQpHRRGtldBnBCe3+m+yNNNW17LKt8MK DZyttMpjKmd3hSRN+8HGM5U+/KoMCOvI76YDYdbiRXqDWmvHeN0vrXAhKY1hARX3dk2rE561 XIlAT/++GKr+y78BnBzGXehq4m2+cJi+EzRvBkuPJlbgkEuTzYI7iJnIfy+gzdldvfrWrCVu O8+ivIcf4Ds085NVvF3ycFkzOQoQrGrUWSkmNxRRDY0JHErPVQMbsauWsRSGqo12Mw+N57y6 5FxGSfqt5eCg7Bhj3045zSWwhtjVfcmwtprQc/tQ0WbWIlUs4bkWXfxjIjLL4QWCbhrIw3Gu hnC8/RoP5QbFOBdnjc+m1i2salUHg/FgqPBhFqgL3Y7xFG2HRii0cIzs0WmXkNsJo7Vplf/u zBdqBljqtHQMMaZb90QO0BXcy0AGrQRg+kChPeHb0mLtBPB5vpke+53FwY3pDeRHU49upFpH 2aaiIriYcbQTObNSSh5uw5zizw X-IronPort-Anti-Spam-Filtered: true X-IronPort-AV: E=Sophos;i="5.83,276,1616457600"; d="scan'208,217";a="701011768" Received: from rcdn-core-10.cisco.com ([173.37.93.146]) by alln-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 15 Jun 2021 20:49:24 +0000 Received: from mail.cisco.com (xbe-rcd-003.cisco.com [173.37.102.18]) by rcdn-core-10.cisco.com (8.15.2/8.15.2) with ESMTPS id 15FKnOe0016004 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 15 Jun 2021 20:49:24 GMT Received: from xfe-aln-001.cisco.com (173.37.135.121) by xbe-rcd-003.cisco.com (173.37.102.18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.792.15; Tue, 15 Jun 2021 15:49:24 -0500 Received: from xfe-aln-003.cisco.com (173.37.135.123) by xfe-aln-001.cisco.com (173.37.135.121) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.792.15; Tue, 15 Jun 2021 15:49:24 -0500 Received: from NAM11-CO1-obe.outbound.protection.outlook.com (173.37.151.57) by xfe-aln-003.cisco.com (173.37.135.123) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.792.15 via Frontend Transport; Tue, 15 Jun 2021 15:49:23 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ijsXUiMInW41eCLk+olTELT8bWjLWqboc9juW2nNRGgJ3DF453a0z6sSPKF2yFn5pajJlHUDv6AcYPaztH0GqYJdPJcJDFvXLQEiUaFsIn3JHUpTc4++TDYHEruCuco8sayAS1L62uCtB0LzilQ2M/Sm33naAkH7i4XZtTVLdoCLJ54UshRVOjQjn+2lmiSjeUSFmn8/S1NlUaMS9sDPeiypTX1lY54/DlRV9xXpJwU4n7qgzxr5Y+X6ASaQfv9Q/lyTvkXevSVL8x6uzczg80qkEz0BhJ7GReXotvSvP9QdS+gbF0k2bW8cXRXpgQ/JQVQilOwpPe4w0pugK/56Kg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=AaNzEempMaShpnMeFXXFDwA67bmrHj06REnFDdGoww4=; b=WQShJhWHhA0B8eNHk29SkJWA7tIkcni78yun2KjWOHc1OurCZs7cba88DxVkLlqsYJdOt/7DyjOUuY5OzWpkSq0yAXTbmMXIXSRgjoKSPL1+v33S974h1FTL2D7Yi67lAQ8AmabQpYUQYbzhINsxZESl1hIi8wd6Rj4tiWhelsqusj+N2ET+MK9gRUYV/y+oXAUAj2vyv87jSPxy0mlZjUSuwVdIzP5fws7oSvUaxCyjpFOXZB5mwH0YJ6SRKF2wI3UDdISwKsIaKbVRQmdtMzONxX7lACr1Y2sekfxrEa7d2grfSXnemLz06C/di/YTHobSbTJDUOdJRcPOJex7og== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=AaNzEempMaShpnMeFXXFDwA67bmrHj06REnFDdGoww4=; b=CCxuTom5h52V/KnOPrL1ldSb5aBfxWAAdqZpUEwmnIVB5izmTbtP36ZGJ7QfaHQVLrInCpa8p3XYntMAg/sTFBzLjJFLlayzwRkNz+F1sA+i52nBQ/sQ1yZEFljZxPISOGAm6g5aTg/VGtssiX2w6mXnWmDiICIfPpaPV+1pEas= Received: from BL3PR11MB5681.namprd11.prod.outlook.com (2603:10b6:208:33c::10) by MN2PR11MB4599.namprd11.prod.outlook.com (2603:10b6:208:26d::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4219.20; Tue, 15 Jun 2021 20:49:22 +0000 Received: from BL3PR11MB5681.namprd11.prod.outlook.com ([fe80::2099:b812:527e:8cee]) by BL3PR11MB5681.namprd11.prod.outlook.com ([fe80::2099:b812:527e:8cee%4]) with mapi id 15.20.4219.025; Tue, 15 Jun 2021 20:49:22 +0000 From: "Joe Clarke (jclarke)" To: Kent Watsen CC: YANG Doctors , "last-call@ietf.org" , "draft-ietf-netconf-sztp-csr.all@ietf.org" , "netconf@ietf.org" , Russ Housley , Sean Turner Thread-Topic: [yang-doctors] Yangdoctors last call review of draft-ietf-netconf-sztp-csr-02 Thread-Index: AQHXXJJ4aYD5+qPJy02gdeYVmGDSXQ== Date: Tue, 15 Jun 2021 20:49:22 +0000 Message-ID: References: <162317619873.9343.9749227005482545691@ietfa.amsl.com> <0100017a11488ce1-1e6036ff-fd01-40fc-801d-c97b2221bb39-000000@email.amazonses.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: watsen.net; dkim=none (message not signed) header.d=none;watsen.net; dmarc=none action=none header.from=cisco.com; x-originating-ip: [173.38.117.69] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 9129e890-8eca-4fe4-bc6a-08d9303f0e33 x-ms-traffictypediagnostic: MN2PR11MB4599: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BL3PR11MB5681.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(136003)(346002)(396003)(366004)(39860400002)(376002)(26005)(54906003)(8676002)(66446008)(186003)(66946007)(9686003)(7696005)(5660300002)(66556008)(478600001)(316002)(55016002)(64756008)(66476007)(6506007)(86362001)(71200400001)(33656002)(76116006)(38100700002)(122000001)(52536014)(6916009)(83380400001)(8936002)(4326008)(2906002)(966005)(166002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?Windows-1252?Q?UpqOU6ZTFg7X+8X8HcUgAZmYQcFOILBtNzXeKsRVvFoJ7DqWPNUv/FYE?= =?Windows-1252?Q?hbb7VzB7YQoTZfEZH8Dqi2zw5ab4ObwD9YsZqTJrKYhFGkYxDkwV446r?= =?Windows-1252?Q?qU4EzqHI4AlGU2ddF/KwD19hrCfe2TtZiWJOTCV5AXHq0Sxo4+KMAB4o?= =?Windows-1252?Q?4Gt/Rt10UX7P3YKziXHZI9e3Bx4y+jlIyQcg8tE7lJcaAb8Z4sX3ki7d?= =?Windows-1252?Q?R00RD6ehw+zK2MP9qa2T3JTfXkonFtGad9i9/Vy/3psuJU8/XWAlBDlU?= =?Windows-1252?Q?vKA5ZPjdjgD0ti5AEoriwPnG+NC1bweWt1WOUCaxZQ83FE9CdA3g/Agt?= =?Windows-1252?Q?lSr+Bx2w3u2uewO3Vgtk5yXjtSmEHriDxFKruqLx+wYn0k1ii73X1ugd?= =?Windows-1252?Q?s7gf2tnqsWQdAeTg/j5CUuigRSc9/p/H+VMLLLcsOpqh2x0GLjnozlPT?= =?Windows-1252?Q?EAMgQhvnuV2OwtYKmTK/M5DxBggTiWt3O/97gF09oUlNuvRC5m4Yx08o?= =?Windows-1252?Q?AuJ8kurpFDyp1yyl8jnzG32Wu8DedrakIdHPEPhYX1Z3by1vDgS97YV2?= =?Windows-1252?Q?g83nvh0MjWnyYSJZCCaM9f43hXqrADeFMFjsedtGkxfSoKu6z+z9fJAV?= =?Windows-1252?Q?evjy5BCzZEcoZrtFewL9bdEFdT3rQUvaI7v9/OFrgKIefQQ9EXDNu3Y0?= =?Windows-1252?Q?6uucs73fBLHnyJfu+vZazR9nMy7WLpV8wkaweFBzOP3DHwsud3/SzDp+?= =?Windows-1252?Q?exRUfq4C4n3n+IWwBJNa3QB8DHDiughQuTK7darigFhO25+40i6SbFyy?= =?Windows-1252?Q?jdREqUOoGm5euPxknEAf4sllDXfzqIixWhN2IvBupmChVLpsR92m91Co?= =?Windows-1252?Q?NXSNqoZu4Iv5sKquEX82OyFHR6zxci77kCG3PBryBBHgOAmL/3izVxNz?= =?Windows-1252?Q?xPwiI1yDH0ejO0FttQLfP0JI3tzCwAZFDh1H4nCsMpR0TYmtCFdRSsp1?= =?Windows-1252?Q?G+6FcggN612t1vlzaeY1LjjxjJ3frA1rtI+3CUkkCeuS8xvZ5CRUq5jp?= =?Windows-1252?Q?DQovzoDg/HuKJHy1vimMgZIsAq6MnvmkMS5PTZiGgahRhYG60wgDdMUZ?= =?Windows-1252?Q?7Xv6F9/XXR/2K9RTlSmNbmlD2kxgLwCptrkcjtIHqjT98Lz5t3Jn5IA8?= =?Windows-1252?Q?v6kxE/1j8JkJduqtGH+K1Q6WlVMm3u/d13vrTOzyNk5uH9gLa8vK26Fw?= =?Windows-1252?Q?SQ/WAsmqc4UqVz23XH5Zq1D3BiVCledyoZSFB8JPTI57onmA4f2q+Z4T?= =?Windows-1252?Q?aNI5ZJa31uCoUMYEw1OqpytuCS3u6MttXGsJr2Bd68xFZB6l630k58A/?= =?Windows-1252?Q?OUVZ+Je8DhF2Om7xlORGAcFeRyhVD01yqbRIxHzwSwsORVTizb3+jFN2?= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BL3PR11MB5681C842A75ADB206F76B152B8309BL3PR11MB5681namp_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BL3PR11MB5681.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 9129e890-8eca-4fe4-bc6a-08d9303f0e33 X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Jun 2021 20:49:22.7277 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: F6IBf4nPBfy3Hof1kUK9Wxqk5TBRXGXLlD7UX1+PMXj2Ai4Hp9Mttt+Jh6dQF5sLbK4HdYWGyNtsJK4m0eMdJQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB4599 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.18, xbe-rcd-003.cisco.com X-Outbound-Node: rcdn-core-10.cisco.com Archived-At: Subject: Re: [netconf] [yang-doctors] Yangdoctors last call review of draft-ietf-netconf-sztp-csr-02 X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Jun 2021 20:49:32 -0000 --_000_BL3PR11MB5681C842A75ADB206F76B152B8309BL3PR11MB5681namp_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable =3D=3D=3D Section 2.2 You have this text: Some implementation may choose to convey it inside a sc= ript (e.g., SZTP's "pre-configuration-script") I'd like to see a reference to RFC 8572 here on where this is defined. I realize I'm being pedantic here, but there are a number of SZTP documents, = and I think having a reference helps. I added the sentence "SZTP onboarding information is described in Section 2= .2 of [RFC8572].=94 to the end of that paragraph. Is this what you had in= mind? Perfect. That's exactly what I was looking for. =3D=3D=3D Module's main description: You mention SZTP's 'onboarding-information' response, but this isn't a form= al YANG node. That node is conveyed-information. Is it worth clarifying that here in the module description like you did in draft text in section 2.2? = I have the same comment in the description of "container csr". The quoted an= d hyphenated "onboarding-information" might make one think that there is a no= de that contains this. 'onboarding-information=92 *is* a formal node - it is described here: https= ://datatracker.ietf.org/doc/html/rfc8572#section-2.2. Just the same, I converted =93 =91onboarding-information=92 =94 to =93onboa= rding information=94 (without the hyphen or single quotes, as it is also de= fined as a term that way in RFC 8572. The clarification "onboarding-information" (encoded inside the "conveyed-in= formation" node)" found in 2.2 was/is to help the reader with the following= example snippet that doesn=92t actually show the "onboarding-information= =94 node because it is hidden inside the =93base64encodedvalue=3D=3D=93 val= ue. Makes sense? { "ietf-sztp-bootstrap-server:output" : { "reporting-level": "verbose", "conveyed-information": =93base64encodedvalue =3D=3D" } } Ah, I had my head buried in the YANG modules, and I didn't read the RFC8572= text closely enough. I had missed the "conveyed-info" module. Regardless= , I think the module update is fine. In leaf cert-req-info's description: The word =93another=94 (with respect to the 400 Server Error) doesn=92t fol= low here unless one refers to the csr-support presence container above. I think dropping it might make this text a bit less confusing (or copying similar t= ext from the csr-support node=92s description. Replaced =93another 400 (Bad Request) response=94 with "a 400 (Bad Request)= response containingvanother 'request-info' structure.=94 Better? Yes. Well, it's better in the diff. You have a typo above :-). Thanks! Joe --_000_BL3PR11MB5681C842A75ADB206F76B152B8309BL3PR11MB5681namp_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable
=3D=3D=3D

Section 2.2

You have this text: Some implementation may choose to convey it inside a sc= ript
(e.g., SZTP's "pre-configuration-script")

I'd like to see a reference to RFC 8572 here on where this is defined. &nbs= p;I
realize I'm being pedantic here, but there are a number of SZTP documents, = and
I think having a reference helps.

I added the sentence "SZTP onboarding information is described in= Section 2.2 of [RFC8572].=94  to the end of that paragraph.  Is = this what you had in mind?

Perfect.  That's exactly what I was looking for.

=3D=3D=3D

Module's main description:

You mention SZTP's 'onboarding-information' response, but this isn't a form= al
YANG node.  That node is conveyed-information.  Is it worth clari= fying that
here in the module description like you did in draft text in section 2.2? &= nbsp;I
have the same comment in the description of "container csr". &nbs= p;The quoted and
hyphenated "onboarding-information" might make one think that the= re is a node
that contains this.

'onboarding-information=92 *is* a formal node - it is described here:&= nbsp;https://datatracker.ietf.org/doc/html/r= fc8572#section-2.2.  

Just the same, I converted =93 =91onboarding-information=92 =94 to =93= onboarding information=94 (without the hyphen or single quotes, as it is al= so defined as a term that way in RFC 8572.

The clarification "onboarding-information" (encoded inside the "conveyed-information" node)"= ; found in 2.2 was/is to help the reader with the following example snippet that doesn=92t actually show the "= onboarding-information=94 node because it is hidden inside the =93base= 64encodedvalue=3D=3D=93 value.  Makes sense?

   {
     "ietf-sztp-bootstrap-server:output" : {
       "reporting-level": "verbose"= ,
       "conveyed-information": =93base64encodedval= ue =3D=3D"
     }
   }

Ah, I had my head buried in the YANG modules, and I didn't read the RFC8572= text closely enough.  I had missed the "conveyed-info" modu= le.  Regardless, I think the module update is fine.


In leaf cert-req-info's description:

The word =93another=94 (with respect to the 400 Server Error) doesn=92t fol= low here
unless one refers to the csr-support presence container above.  I thin= k
dropping it might make this text a bit less confusing (or copying similar t= ext
from the csr-support node=92s description.

Replaced =93another 400 (Bad Request) response=94 with "a 400 (Bad Request) response containingvanother 'request-= info' structure.=94 

Better?

Yes.  Well, it's better in the diff.  You have a typo above :-).<= br>
Thanks!

Joe

--_000_BL3PR11MB5681C842A75ADB206F76B152B8309BL3PR11MB5681namp_-- From nobody Wed Jun 16 11:06:13 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6D5003A1F3D for ; Wed, 16 Jun 2021 11:06:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.098 X-Spam-Level: X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=sn3rd.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BxXWNDx2EVP5 for ; Wed, 16 Jun 2021 11:05:57 -0700 (PDT) Received: from mail-qk1-x72b.google.com (mail-qk1-x72b.google.com [IPv6:2607:f8b0:4864:20::72b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 682923A214B for ; Wed, 16 Jun 2021 11:05:57 -0700 (PDT) Received: by mail-qk1-x72b.google.com with SMTP id c18so296572qkc.11 for ; Wed, 16 Jun 2021 11:05:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sn3rd.com; s=google; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=zTc9FJk04/BlvXLXKC3FWlX8wFpljdhmLaPmkhC82G4=; b=R+9DAMxcsLrnR2Dolqz47OQp5SdoE3QopQrS/CQnH+oKCKyvKVXg051w3HEreEVGqk 2jfreVSuLAz0XyMQhRsnxWRHea4FqSVYPjQJ4oJ6HHET6p6it8GzJeLzrOEH+Q6Sz7OK DjuE0HowdjGZ2q4JNj0dTQzQ4AwUCIdV0+HmE= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=zTc9FJk04/BlvXLXKC3FWlX8wFpljdhmLaPmkhC82G4=; b=E0KCJrKuEFt7HVk8tBmaB7dBAMY0L2bYYurKAIIneSe4fi/AYt8tklQ36Ua3Cb2yO/ ze21szE7Noxs9UaQ7k6BgL1CR9TGatcJ0jK2QMCjuvRyDdtQzdp/sdizs46yVakWD0wM S+4n9W5kc/DEzynAfxE6WCO72R040Ua7TiBkTG7Yb/JoccLIy+73P0GKA6fTVv5r2C39 qr7BNFZjFqcQNV5Mj2ZTSWGlwTzNH3KkpvzI8G26eyRTFqd+ex1Cd0BlOCfzGsi2n4br WJubv80wOL72znZ9NB6F2XO7Wk/KMAPQbeJW1rwM7UaZuIiw839haBIjYWQl67VlJl3O 7SaQ== X-Gm-Message-State: AOAM533VOJVnkqoRsE9UDXpXKPgXIwNjUum9cnmnTOurNbpFDBAMmeSu eXayBm1sjb/rFq3yK9b1gXIabQ== X-Google-Smtp-Source: ABdhPJwQmHLyJBy9mEvapRIet2EgfH/SlaOakAsP4mU/2SaovHkRejduWoXUX5YtWXQXaTbOD91+sA== X-Received: by 2002:a37:73c7:: with SMTP id o190mr1358534qkc.314.1623866755597; Wed, 16 Jun 2021 11:05:55 -0700 (PDT) Received: from smtpclient.apple (pool-71-178-177-131.washdc.fios.verizon.net. [71.178.177.131]) by smtp.gmail.com with ESMTPSA id i21sm2178852qkl.20.2021.06.16.11.05.54 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Wed, 16 Jun 2021 11:05:54 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.100.0.2.22\)) From: Sean Turner In-Reply-To: <0100017a11488ce1-1e6036ff-fd01-40fc-801d-c97b2221bb39-000000@email.amazonses.com> Date: Wed, 16 Jun 2021 14:05:53 -0400 Cc: YANG Doctors , last-call@ietf.org, draft-ietf-netconf-sztp-csr.all@ietf.org, "netconf@ietf.org" , Russ Housley Content-Transfer-Encoding: quoted-printable Message-Id: <4E98B569-2CA4-4367-A525-C8A889E07778@sn3rd.com> References: <162317619873.9343.9749227005482545691@ietfa.amsl.com> <0100017a11488ce1-1e6036ff-fd01-40fc-801d-c97b2221bb39-000000@email.amazonses.com> To: Kent Watsen , Joe Clarke X-Mailer: Apple Mail (2.3654.100.0.2.22) Archived-At: Subject: Re: [netconf] [yang-doctors] Yangdoctors last call review of draft-ietf-netconf-sztp-csr-02 X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Jun 2021 18:06:03 -0000 > On Jun 15, 2021, at 16:06, Kent Watsen wrote: >=20 > [Sean, please note the question to you below] >=20 >> On Jun 8, 2021, at 2:16 PM, Joe Clarke via Datatracker = wrote: >> =3D=3D=3D >>=20 >> Under leaf cmc's description: >>=20 >> s/is the TaggedCertificationRequest and it a bodyPartId/is the >> TaggedCertificationRequest and it consists of a bodyPartId/ >>=20 >> There are two instances of this, and I wasn't sure exactly what you = wanted to >> say here. This was my attempt to make it readable. >=20 > Reading the description statement for "leaf cmc=E2=80=9D shows that it = describes three structures, each for a different condition. >=20 > I agree that the text for the last two structures is highly similar, = though not exactly the same. Perhaps the text could be simplified. = Sean, what do you think? (Search for =E2=80=9Cleaf cmc=E2=80=9D here: = https://datatracker.ietf.org/doc/html/draft-ietf-netconf-sztp-csr-03) This text explains which of the CMC=E2=80=99s ASN.1 fields need to be = present (see RFC 6402 page 12 =E2=80=9CPKIData=E2=80=9D and the = subfields there). I wrote it kind of like a decision tree because there = are three options that need to be addressed. The 1st decision drives the = later choices. There is some commonality at the 2nd between the 2nd and = 3rd choice, but there=E2=80=99s multiple differences in the 1st two = choices. Basically, I couldn=E2=80=99t figure out a way to write this = without marching from the beginning to the end for each one of the three = options. spt= From nobody Fri Jun 18 10:29:44 2021 Return-Path: X-Original-To: netconf@ietf.org Delivered-To: netconf@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id D4E9C3A1B75; Fri, 18 Jun 2021 10:29:35 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: netconf@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.32.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: netconf@ietf.org Message-ID: <162403737576.13931.13971056547025744383@ietfa.amsl.com> Date: Fri, 18 Jun 2021 10:29:35 -0700 Archived-At: Subject: [netconf] I-D Action: draft-ietf-netconf-ssh-client-server-25.txt X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Jun 2021 17:29:36 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Network Configuration WG of the IETF. Title : YANG Groupings for SSH Clients and SSH Servers Author : Kent Watsen Filename : draft-ietf-netconf-ssh-client-server-25.txt Pages : 134 Date : 2021-06-18 Abstract: This document defines three YANG 1.1 modules: the first defines features and groupings common to both SSH clients and SSH servers, the second defines a grouping for a generic SSH client, and the third defines a grouping for a generic SSH server. Editorial Note (To be removed by RFC Editor) This draft contains placeholder values that need to be replaced with finalized values at the time of publication. This note summarizes all of the substitutions that are needed. No other RFC Editor instructions are specified elsewhere in this document. Artwork in this document contains shorthand references to drafts in progress. Please apply the following replacements: * "AAAA" --> the assigned RFC value for draft-ietf-netconf-crypto- types * "BBBB" --> the assigned RFC value for draft-ietf-netconf-trust- anchors * "CCCC" --> the assigned RFC value for draft-ietf-netconf-keystore * "DDDD" --> the assigned RFC value for draft-ietf-netconf-tcp- client-server * "EEEE" --> the assigned RFC value for this draft Artwork in this document contains placeholder values for the date of publication of this draft. Please apply the following replacement: * "2021-06-18" --> the publication date of this draft The following Appendix section is to be removed prior to publication: * Appendix B. Change Log The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-netconf-ssh-client-server/ There is also an HTML version available at: https://www.ietf.org/archive/id/draft-ietf-netconf-ssh-client-server-25.html A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-netconf-ssh-client-server-25 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Jun 18 10:30:49 2021 Return-Path: X-Original-To: netconf@ietf.org Delivered-To: netconf@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 229353A1B82; Fri, 18 Jun 2021 10:30:44 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: netconf@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.32.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: netconf@ietf.org Message-ID: <162403744410.12188.3728877835063968402@ietfa.amsl.com> Date: Fri, 18 Jun 2021 10:30:44 -0700 Archived-At: Subject: [netconf] I-D Action: draft-ietf-netconf-tls-client-server-25.txt X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Jun 2021 17:30:44 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Network Configuration WG of the IETF. Title : YANG Groupings for TLS Clients and TLS Servers Author : Kent Watsen Filename : draft-ietf-netconf-tls-client-server-25.txt Pages : 139 Date : 2021-06-18 Abstract: This document defines three YANG 1.1 modules: the first defines features and groupings common to both TLS clients and TLS servers, the second defines a grouping for a generic TLS client, and the third defines a grouping for a generic TLS server. Editorial Note (To be removed by RFC Editor) This draft contains placeholder values that need to be replaced with finalized values at the time of publication. This note summarizes all of the substitutions that are needed. No other RFC Editor instructions are specified elsewhere in this document. Artwork in this document contains shorthand references to drafts in progress. Please apply the following replacements: * "AAAA" --> the assigned RFC value for draft-ietf-netconf-crypto- types * "BBBB" --> the assigned RFC value for draft-ietf-netconf-trust- anchors * "CCCC" --> the assigned RFC value for draft-ietf-netconf-keystore * "DDDD" --> the assigned RFC value for draft-ietf-netconf-tcp- client-server * "FFFF" --> the assigned RFC value for this draft Artwork in this document contains placeholder values for the date of publication of this draft. Please apply the following replacement: * "2021-06-18" --> the publication date of this draft The following Appendix section is to be removed prior to publication: * Appendix B. Change Log The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-netconf-tls-client-server/ There is also an HTML version available at: https://www.ietf.org/archive/id/draft-ietf-netconf-tls-client-server-25.html A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-netconf-tls-client-server-25 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Jun 18 10:46:36 2021 Return-Path: <0100017a203b3fbe-94e25349-4cf7-4b3a-b726-9d837f4c0841-000000@amazonses.watsen.net> X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8FD613A1C20 for ; Fri, 18 Jun 2021 10:46:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l91y9oYCWysh for ; Fri, 18 Jun 2021 10:46:33 -0700 (PDT) Received: from a48-94.smtp-out.amazonses.com (a48-94.smtp-out.amazonses.com [54.240.48.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 26A863A1C1F for ; Fri, 18 Jun 2021 10:46:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1624038391; h=From:Content-Type:Content-Transfer-Encoding:Mime-Version:Subject:Message-Id:Date:To:Feedback-ID; bh=b8mYCJ2qAxSXQaoVM0y5ienpsB2hoV/1udvjJ6yy/YU=; b=VxVm1QAqYc1dp2yCb2XScMsJ45Mjzf8pMyo93HpaGp5tyZDeTtOijUtJBrBrka8g qJ/lg041GuT/xlR/F+wnn0Z17L37VlBxDH+qn7APJo1KFllDgnI0bfuqkmKCvjUqAVK KX1ZVf07UiVxfOqBwgvhzrbkWdE4j//raFGSN3jA= From: Kent Watsen Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.100.0.2.22\)) Message-ID: <0100017a203b3fbe-94e25349-4cf7-4b3a-b726-9d837f4c0841-000000@email.amazonses.com> Date: Fri, 18 Jun 2021 17:46:31 +0000 To: "netconf@ietf.org" X-Mailer: Apple Mail (2.3654.100.0.2.22) Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES X-SES-Outgoing: 2021.06.18-54.240.48.94 Archived-At: Subject: [netconf] [ssh/tls]-client-server updates X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Jun 2021 17:46:35 -0000 Detailed change logs for the just-published updates are at bottom, but = the primary update is the creation of IANA-maintained modules for = protocol-specific algorithms. Key points: 1) identities are used (not enumerations) 2) the =E2=80=9Ccontainer=E2=80=9D and =E2=80=9Clist=E2=80=9D = names are simply=20 =E2=80=9Csupported-algorithm[s]=E2=80=9D as the module=E2=80=99= s=20 namespace disambiguates them from each other. 3) deprecated and obsolete algorithms have their =E2=80=9Cstatus=E2=80=9D node set accordingly. After waiting a sufficient amount of time for WG-review, it would be = appropriate to request SecDir reviews, per Tom=E2=80=99s comment from = before. Thanks, Kent ssh-client-server: * Renamed "{ietf-ssh-client}userauth-*" to "client-ident-*" * Renamed "{ietf-ssh-server}userauth-*" to "local-user-auth-*" * Moved algorithms in ietf-ssh-common (plus more) to IANA-maintained modules * Added "config false" lists for algorithms supported by the server. * Fixed issues found during YANG Doctor review. tls-client-server: * Added TLS 1.3 references. * Clarified support for various TLS protocol versions. * Moved algorithms in ietf-tls-common (plus more) to IANA-maintained modules * Added "config false" lists for algorithms supported by the server. * Fixed issues found during YANG Doctor review. From nobody Fri Jun 18 16:13:50 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 975763A1479 for ; Fri, 18 Jun 2021 16:13:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M0v4NsanXyVV for ; Fri, 18 Jun 2021 16:13:42 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E9ECA3A1477 for ; Fri, 18 Jun 2021 16:13:42 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id 268F2F4073B; Fri, 18 Jun 2021 16:12:58 -0700 (PDT) To: kent+ietf@watsen.net, ian.farrer@telekom.de, mikael.abrahamsson@t-systems.se, warren@kumari.net, rwilton@cisco.com, kent+ietf@watsen.net, mjethanandani@gmail.com X-PHP-Originating-Script: 1005:errata_mail_lib.php From: RFC Errata System Cc: sramanathan@google.com, netconf@ietf.org, rfc-editor@rfc-editor.org Content-Type: text/plain; charset=UTF-8 Message-Id: <20210618231258.268F2F4073B@rfc-editor.org> Date: Fri, 18 Jun 2021 16:12:58 -0700 (PDT) Archived-At: Subject: [netconf] [Editorial Errata Reported] RFC8572 (6616) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Jun 2021 23:13:48 -0000 The following errata report has been submitted for RFC8572, "Secure Zero Touch Provisioning (SZTP)". -------------------------------------- You may review the report below and at: https://www.rfc-editor.org/errata/eid6616 -------------------------------------- Type: Editorial Reported by: Srihari Ramanathan Section: 4.2.3 Original Text ------------- For device-independent queries, the three bootstrapping artifacts defined in Section 3 are encoded into the SVR records as follows. Artifact to SRV Record Mapping: Conveyed Information: This artifact is not supported directly. Instead, the essence of unsigned redirect information is mapped to SVR records per [RFC2782]. Corrected Text -------------- For device-independent queries, the three bootstrapping artifacts defined in Section 3 are encoded into the SRV records as follows. Artifact to SRV Record Mapping: Conveyed Information: This artifact is not supported directly. Instead, the essence of unsigned redirect information is mapped to SRV records per [RFC2782]. Notes ----- I believe both "SVR" are typos? Instructions: ------------- This erratum is currently posted as "Reported". If necessary, please use "Reply All" to discuss whether it should be verified or rejected. When a decision is reached, the verifying party can log in to change the status and edit the report, if necessary. -------------------------------------- RFC8572 (draft-ietf-netconf-zerotouch-29) -------------------------------------- Title : Secure Zero Touch Provisioning (SZTP) Publication Date : April 2019 Author(s) : K. Watsen, I. Farrer, M. Abrahamsson Category : PROPOSED STANDARD Source : Network Configuration Area : Operations and Management Stream : IETF Verifying Party : IESG From nobody Sat Jun 19 14:29:47 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 920683A20BE; Sat, 19 Jun 2021 14:29:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.001 X-Spam-Level: X-Spam-Status: No, score=0.001 tagged_above=-999 required=5 tests=[SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jH8ATYdQnMg0; Sat, 19 Jun 2021 14:29:40 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B46EE3A0C81; Sat, 19 Jun 2021 14:29:40 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 5AE3B38C29; Sat, 19 Jun 2021 17:31:04 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id nH60W6Tk-SMF; Sat, 19 Jun 2021 17:31:02 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [209.87.249.21]) by tuna.sandelman.ca (Postfix) with ESMTP id 25F6B38B71; Sat, 19 Jun 2021 17:31:02 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id DF6F359; Sat, 19 Jun 2021 17:29:35 -0400 (EDT) From: Michael Richardson To: Kent Watsen , "Fries\, Steffen" , "Werner\, Thomas" , netconf@ietf.org, "anima\@ietf.org" In-Reply-To: <0100017a1b4d2e94-aeaaa06e-8dc0-4163-a747-692e72b0d75c-000000@email.amazonses.com> References: <3a31e33678484625b9f4f3810e673e56@siemens.com> <0100017a1b4d2e94-aeaaa06e-8dc0-4163-a747-692e72b0d75c-000000@email.amazonses.com> X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [netconf] [Anima] Reuse of SZTP-CSR YANG definition in BRSKI-AE X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 19 Jun 2021 21:29:46 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Kent Watsen wrote: > [future threads about SZTP should CC NETCONF, the WG that > published/maintains SZTP] Yes, and not netmod? sf> In one use case, the pledge has no direct connection to the registr= ar sf> and a registrar-agent communicates with the pledge. In that specific sf> case we do not have a TLS connection between the pledge and the sf> registrar-agent and protect the exchanged objects by an additional sf> signature. This is done by embedding the necessary information into= a JOSE object. ... sf> The question sf> (https://github.com/anima-wg/anima-brski-async-enroll/issues/10) now sf> is, if this construct is possible, as we are just using a subset sf> (sztp-csr:csr) of the YANG module " ietf-sztp-bootstrap-server" fr= om sf> draft-ietf-netconf-sztp-csr? kw> This is not possible. I feel that the question might have been so specific that it didn't match. My thought was to do CORECONF (possibly using CoAP over BTLE), to retrieve a CSR from a device. It seems to fit right into the ietf-sztp-bootstrap-serv= er pattern to me. So, I'm unclear why ietf-sztp-csr:csr-support couldn't be used. Is it because the module augments sztp, and we don't need it all? We really just want container csr-support, csr-generation, csr, ??? Maybe we could chat about this more. We have a regular Thursday 9:30 EST design team. >> The alternative would be to define an own module modeled in a simila= r. > You can do this. I think that we can have some common mindshare here. =2D- Michael Richardson . o O ( IPv6 I=C3=B8T consulti= ng ) Sandelman Software Works Inc, Ottawa and Worldwide --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAmDOYb8ACgkQgItw+93Q 3WX9RQf8D2t71uDwvxE3UVKN9WbXLMji5lHkUuDzej8U8ayqZPNofRIhfJ3ctAv/ FHFt0hUbT2s6s1M7M0shBxKCaXBJ7bx/h3Jk5cS25fbweXSZKcbOxkBwAeAuyMd0 DuiAHQD719JBmZzlvhWZ7WUamDSdoTKOfkdO8iw2Ei2xykMOgg6zTAETOdAsJOhS avKOV518uSj1NTXWEK67y7kMNA4vBpoESTHf0vyPIrIpjlejSyITKmxhkiG7Jiap ApCFuypS/GcfPlAA0bw9hfBFVWjKaa+4lstsAXorbv8RTrhVeBDJtrFwgy3JlaHO ctYcAhuIpVIuzUOGNhc2xTz6rwey+Q== =ySf9 -----END PGP SIGNATURE----- --=-=-=-- From nobody Mon Jun 21 01:50:34 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B2F3D3A28FC; Mon, 21 Jun 2021 01:50:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.996 X-Spam-Level: X-Spam-Status: No, score=-9.996 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=DzLhhdgL; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=W71PS7QD Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iOVBXyAdL0CX; Mon, 21 Jun 2021 01:50:28 -0700 (PDT) Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CDA843A2915; Mon, 21 Jun 2021 01:50:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4474; q=dns/txt; s=iport; t=1624265427; x=1625475027; h=from:to:cc:subject:date:message-id: content-transfer-encoding:mime-version; bh=rSCg1DwjOqAImuNJTVLTcd9pUEwD42Pfw1vgsmuE1ZA=; b=DzLhhdgL8+HFXvPfZStxsLDoFJuo7UptBigkOCl/2P41gWcRmAsqX4Xz VRshFvvrrY10ZR0KtmZutzUeyB4GFQUhAB+lXQIhpNfRldAC0FBFBIdme sSBi65YumJ43MzZ+o0nOHn6p/1I40+x31AtUZ3FxQm81ze75JRkXc/Axm Q=; IronPort-PHdr: =?us-ascii?q?A9a23=3AGWZCMR+fSmQvl/9uWDnoyV9kXcBvk7T5IgBT7?= =?us-ascii?q?YAo2PpCcaWmqpLlOkGXpfBgl0TAUoiT7fVYw/HXvKbtVS1lg96BvXkOfYYKW?= =?us-ascii?q?0oDjsMbzA0tHMDDDlf0f7bmaiUgF5FEU1lot3iwLUlSHpP4YFvf6n2/5DIfA?= =?us-ascii?q?FPxLw1wc+/0AYXVyc+w0rPaxg=3D=3D?= IronPort-HdrOrdr: =?us-ascii?q?A9a23=3AICnCuKBWCxNtxbnlHegssceALOsnbusQ8z?= =?us-ascii?q?AXPh9KKCC9I/b3qynxppsmPEfP+UsssHFJo6HmBEDyewKhyXcT2/heAV7CZn?= =?us-ascii?q?iohILMFuFfBOTZskbd8kHFh4tgPMRbAulD4b/LfCJHZK/BiWHSebtNsbr3kp?= =?us-ascii?q?xA7t2uqUuFODsaE52ImD0JczpzfHcGIDVuNN4cLt6x98BHrz2vdTA8dcKgHE?= =?us-ascii?q?QIWODFupniiI/mSQRuPW9m1CC+yReTrJLqGRmR2RkTFxlVx605zGTDmwvloo?= =?us-ascii?q?2+rvCAzAPG3WO71eUUpDKh8KoAOCW/sLlQFtzesHfuWG2nYczFgNkBmpDr1L?= =?us-ascii?q?/tqqiUn/5vBbUq15qbRBDLnfKk4Xif7N9p0Q649bdd6kGT/PAQg1kBepB8bM?= =?us-ascii?q?tiA2rkwltls9dm3K1R2WWF85JREBPbhSz4o8PFThdwiyOP0DEfeMMo/jViuL?= =?us-ascii?q?ElGfdsRE0kjTdoOYZFGDi/5JEsEeFoAs2Z7PFKcUmCZ3ScumV02tSjUnk6Ax?= =?us-ascii?q?/DGyE5y4Go+ikTmGo8w1oTxcQZkHtF/JUhS4Nc7+CBNqhzjrlBQsIfcKo4Du?= =?us-ascii?q?YcRsm8DHDLXHv3QSivyJTcZdc60lf22tLKCZkOlZOXka0zvewPcc76ISBlXE?= =?us-ascii?q?YJCjfT4OO1re12ziw=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AICQAlUtBg/5FdJa1agQmBV4FTUQd?= =?us-ascii?q?3WjcxC4gFA4U5iGqPXopCglMDVAsBAQENAQE/AgQBAYRQAoJtAiU3Bg4CBAE?= =?us-ascii?q?BARIBAQUBAQECAQYEcROFaA2GSBYoBgEBKQ4BEQE+QiYBBAENDRqCUIJVAy8?= =?us-ascii?q?BA5pcAYE6AoofeIE0gQGCBwEBBgQEhTUYgjEJgTqCe4hDgQ0keyccgUlEgRV?= =?us-ascii?q?Dh0oag0uCLoMaBQECYgQUHiB8JTYDBQsBGgEDCgIXBgk6kHurCQqDH54XEqV?= =?us-ascii?q?ylVidR4FZRwIVhEQCBAIEBQIOAQEGgWolgVlwFYMkUBcCDo4oAxaDTopeczg?= =?us-ascii?q?CBgoBAQMJfIsFAYEQAQE?= X-IronPort-AV: E=Sophos;i="5.83,289,1616457600"; d="scan'208";a="905576607" Received: from rcdn-core-9.cisco.com ([173.37.93.145]) by rcdn-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 21 Jun 2021 08:50:26 +0000 Received: from mail.cisco.com (xbe-rcd-001.cisco.com [173.37.102.16]) by rcdn-core-9.cisco.com (8.15.2/8.15.2) with ESMTPS id 15L8oQJk029952 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 21 Jun 2021 08:50:26 GMT Received: from xfe-aln-003.cisco.com (173.37.135.123) by xbe-rcd-001.cisco.com (173.37.102.16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.792.15; Mon, 21 Jun 2021 03:50:26 -0500 Received: from xfe-aln-003.cisco.com (173.37.135.123) by xfe-aln-003.cisco.com (173.37.135.123) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.792.15; Mon, 21 Jun 2021 03:50:26 -0500 Received: from NAM11-DM6-obe.outbound.protection.outlook.com (173.37.151.57) by xfe-aln-003.cisco.com (173.37.135.123) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.792.15 via Frontend Transport; Mon, 21 Jun 2021 03:50:26 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=GU0egkX4qS3Pa9uWD/qNgOIvNCQ6guLR/SDmFTco8h6hC4UJrCAe2ZwMGSgCpzPLj0SoaQjl2xQQMwtx46IQTuYJKKguCR/G+gWob9IzAKkK1L9WcJtjBaoAC0VPwHtpVnbBa6cX2/db5Lw8/em6N5Px+e6WlD3GfFcsA8Nc9Tkwq4imj2iJ9QcYKhUN9Gepes89PRK6mnLupMAsM0WsHluGGxpHOmw/kHmhLJgSIIDN3M6EloJoWbVhrwU65iI2fjl/rDh5tKVByd9gCwiWPMfy+Ky8RcrmcqsIl6ElZDuDr8gy6Ne2vbKvVhh7QgjThYKNC+kFb7xcTo5LXgBMkg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=0NHLfRjSPx8Qk4AbbKsd1bOiX0TxgAbzZ4wyyiv6lW0=; b=csuoxJMboL8unPvW6JwItSkyyJbqp8UIsRFqza4KNje5FMi/NlgGZEh83kXMTTW3fqMkKst4mwc6E8WgvLzn5gs8jyc/PXvzB1xNwaPQ2qf8f0dj78YWH+wu429jG1Y9/JY/7lYvjTm9AhMgYhTPfGmMXQ8dgJZ2vWDls+0lsdN/QnXbXnOfT9I50na1aGSg3Gj7ISHjfRsLSZSE8g68hO5DMBSPUrKADHM711FZr/OFLT5wx5V67ZJydkVsQa1U1aqe9MJtnC/N175aNt0Pe9EinNQjDEw0L7nCFpVXYexRBskrvgsFmTIKzRE7dpsNs5yNj7dpKe9NC1hAErrWRw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=0NHLfRjSPx8Qk4AbbKsd1bOiX0TxgAbzZ4wyyiv6lW0=; b=W71PS7QDBPDMHuqpTjBLMG0u6Xnz6jH+EkOvE7ix4M+WMg6bZAD7PS+EwRNkOCarZCHrCDtq1+O/oS50qmPdYIihNaeIK9qasDsDiJrgyI3nzx5DnDMk/lPz9BBbEBD3Tf7/5FLEZ/C5B7wu8eT1P7QaB8WpqslED6hnoXElw6I= Received: from DM4PR11MB5438.namprd11.prod.outlook.com (2603:10b6:5:399::21) by DM5PR11MB1819.namprd11.prod.outlook.com (2603:10b6:3:10a::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4242.23; Mon, 21 Jun 2021 08:50:25 +0000 Received: from DM4PR11MB5438.namprd11.prod.outlook.com ([fe80::e14c:8880:1101:bb0c]) by DM4PR11MB5438.namprd11.prod.outlook.com ([fe80::e14c:8880:1101:bb0c%5]) with mapi id 15.20.4242.023; Mon, 21 Jun 2021 08:50:25 +0000 From: "Rob Wilton (rwilton)" To: "netconf@ietf.org" , "draft-ietf-netconf-sztp-csr@ietf.org" CC: "netconf-chairs@ietf.org" Thread-Topic: AD review of draft-ietf-netconf-sztp-csr Thread-Index: Addmei+76OsPA+grSaqUN2qOgkG4uA== Date: Mon, 21 Jun 2021 08:50:24 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=cisco.com; x-originating-ip: [82.12.233.180] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 47264076-29b9-4e18-9f4a-08d934919c80 x-ms-traffictypediagnostic: DM5PR11MB1819: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DM4PR11MB5438.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(366004)(39860400002)(376002)(346002)(396003)(136003)(316002)(186003)(110136005)(7696005)(8676002)(26005)(71200400001)(4326008)(6506007)(8936002)(2906002)(478600001)(33656002)(450100002)(66946007)(55016002)(52536014)(122000001)(38100700002)(83380400001)(86362001)(76116006)(9686003)(66476007)(5660300002)(66556008)(64756008)(66446008); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?I/ecuGjp+qCf0fJmK3uYaPrp6FCCs8s4osY8yB8K0DWPbthImnNAx4rqgvD5?= =?us-ascii?Q?unzWN0nDgYqzf7NxFAGyKG3XEUehSyfG2auOqdCiaRNtZeuA4pNkdN1LLHwL?= =?us-ascii?Q?OkZtyo1mzlF3NStdlfzn9wu52lRmu5Qu0zPWi/GmkLdfRFlO59PW0FXrzjFY?= =?us-ascii?Q?zJn6I4qesots9GbLiaCeU8fk88fmBiExFx1PB9j7Ozq88/HzhTxaB/7+BRgE?= =?us-ascii?Q?EzQoHwHGD7oDIw4Ll6/0CQeig45O5MyZdajhMUg8pZKFpf7MFmiUngD3i6CA?= =?us-ascii?Q?wIiIv+FrilW0CKqjEdWgtsY5cOw1yJnyxpxPizBwkfIbEnP12LTuIgkXOKdy?= =?us-ascii?Q?8S8XATubtgDvQt7rHt1G3r+8bh7/VjGAsnZMLL6qwWZhDkkjUx+nW3mRvLmg?= =?us-ascii?Q?/LSemlgKP2gvAVsAt+ARLflTqSjCmHNBnfNCYWSChZRFkzLRnJ8NnlBKSbop?= =?us-ascii?Q?Q8VVzzD/GwArLeXv545aGENFi+510GKWVDAYfgXHqwMkjYPjE+1Z8nu4G6Ej?= =?us-ascii?Q?LNTaoGQxkqPC/+AWdiRU7mRZZRV3LM1hWdeWU8rv+UVsverrHmAicFPfjn4Y?= =?us-ascii?Q?2ue84WglTIK2FkHQZFUsCuRx+Dcp6djFM/4SDpeiAlFzgI404el5bqmd971p?= =?us-ascii?Q?DnqyFrb8mHeRgaBOKcObXpSyctQAI03aBB0BV5/7Ip33Ax2GWOPeihk8hQJM?= =?us-ascii?Q?Q3Y5zDpNuofI1ll/GDUBerdHuG8upon75OoBr08F9w3fFcGtGUmHj+Bl1YRB?= =?us-ascii?Q?pBqlxse1HbG6ByrxIhVC9lsqlWUP9hPmrBIE9UaUeTHquYYoHtaZwH6Yz8C0?= =?us-ascii?Q?1DmRHGCJwm3kJcQtG7WapvUip7d7N0s9J8D0QionouxU7XtUqsVNP4PPv1hW?= =?us-ascii?Q?qpOEL3qrBWzON7mXTXUTy/Sz/4STrETKu7vMIFs60tqd5YeCb9dU9iiVnnrM?= =?us-ascii?Q?KUqQu70v3E3GU6w1P0VCfpIbCCLlq9XkER+Q6LnJ27sgQY7tkWX7s7VmhSZR?= =?us-ascii?Q?0vYCeXgafzM3P68r5XJptY78X+DD1hbdbQYne2EPi8TR5nDuqfwoS+tMu27h?= =?us-ascii?Q?1t69LjGeirWcuUGpl+nZYxMh3mzpF5lIT3Fnam6rKcw3G1H3Xvhspx9RZJk1?= =?us-ascii?Q?a5c8ghT9EP+bnuEJ8t1GMis1uq0MLrJotET6XmhlvavEFpRVnbncIW3pTOE8?= =?us-ascii?Q?1BCyPBbd2211Nf13GfMUSgY/2o5XmUEd271FxFTX3UxbNuuXZDAdWfDDvfwL?= =?us-ascii?Q?2Ygfe5RE3+hZHKbaa+GgyJvrgNQ4nPj/iMHcHgpbxybjBcGVhcRYmKfsEUJ7?= =?us-ascii?Q?v/aIIkMzBbJQmN/6oA/eZpdc?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM4PR11MB5438.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 47264076-29b9-4e18-9f4a-08d934919c80 X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Jun 2021 08:50:24.9337 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: he8DxIojWPyCaG+i23p7fYAsPQ0Qtwc1NZ7qzg2jhGaVbBFls3P0piFG32zu0tQ0WWw6XaCIWk37YMd54IjB8g== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR11MB1819 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.16, xbe-rcd-001.cisco.com X-Outbound-Node: rcdn-core-9.cisco.com Archived-At: Subject: [netconf] AD review of draft-ietf-netconf-sztp-csr X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jun 2021 08:50:33 -0000 AD Review of draft-ietf-netconf-sztp-csr-03 Disclaimer, I am not a security expert and the security specific aspects (e.g., the precise details of how the CSRs are encoded) is beyond my knowle= dge. Hopefully this will be sufficiently checked by SEC DIR reviews and SEC AD, whilst also acknowledging the expertise of the authors! My main questions really relate to REST semantics. 1. It is always the case that the SZTP-client must do the handshake with the server (i.e, populating the csr-support container, then getting a 400 e= rror back, before making the actual bootstrap request), or is it acceptable for the SZ= TP-client to guess on acceptable parameters, and send a single request? Obviously, t= his cannot work in all cases, but I want to check whether it is allowed (or explicitly= disallowed) in any cases. 2. Section 2.2: Assuming the SZTP-server wishes to prompt the SZTP-client to provide a CSR, then it would respond with an HTTP 400 (Bad Request) error code: I wonder whether returning a 400 "Bad Request" error is really the best ret= urn code, i.e.,=20 it wasn't clear to me whether this requesting the capabiltiies is really an= error. Did you consider potentially using other return codes? Possibly: 300 Multiple Choices, 403 Fobidden, 406 Not Acceptable 3. Does it make sense to recommend a default certificate-request-format tha= t clients should support, or does it make sense to not prioritize any particular certificate= format, effectively requiring that a generic server needs to support them all? 4. References. RFC 3688 probably should be normative for the XML registry,= noting that RFC 6020 is normatively referenced. Nits: 5.=20 In the example data, would it helpful to add a sentence to explain "base64encodedvalue1=3D", "base64encodedvalue2=3D", "base64encodedvalue3=3D" =09 Actually, given this convention is used in various places, there is a choic= e as to whether to add a sentence to each example, or perhaps in the introduction. =09 6. 3.1.3. Replay Attack Protection This RFC enables an SZTP-client to announce an ability to generate new key to use for its CSR. =20 "a new key" 7. In Security Considerations: Generating a new key each time enables the random bytes used to create the key to serve the dual-purpose of also acting like a "nonce" used in other mechanisms to detect replay attacks. =20 I wasn't clear to me what the two purposes are here. One is acting like a "nonce", but what is the other purpose? 8. In the case the SZTP-client must choose between the asymmetric key option versus a shared secret for origin authentication, it is RECOMMENDED that the SZTP-client choose using the asymmetric key option. =20 "In the case the" =3D> "In the case that the ... Terminology: Should you add LDevID or IDevID Potential spelling warnings: descendent Grammar Warnings (from tool): Section: 2.3, draft text: This module augments an RPC defined in [RFC8572], uses a data type defined = in [I-D.ietf-netconf-crypto-types], has an normative references to [RFC2986= ] and [ITU. Warning: The plural noun "references" cannot be used with the article "an"= . Did you mean an normative reference or normative references? Suggested change: "an normative reference" Section: 3.1.4, draft text: Consistent with the recommendation presented in Section 9.6 of [RFC8572], S= ZTP-clients SHOULD NOT passed the "csr-support" input parameter to an untru= sted SZTP-server.=20 Warning: The modal verb 'SHOULD' requires the verb's base form. Suggested change: "pass" Section: 3.1.5, draft text: All of the certificate request formats defined in this document (e.g., CMC,= CMP, etc.), not including a raw PKCS#10, support origin authentication. Warning: Consider using all the. Suggested change: "All the" Section: 3.1.5, draft text: Typically only one possible origin authentication mechanism can possibly be= used but, in the case that the SZTP-client authenticates itself using both= TLS-level (e.g., IDevID) and HTTP-level credentials (e.g., Basic), as is a= llowed by Section 5.3 of [RFC8572], then the SZTP-client may need to choose= between the two options. Warning: Did you forget a comma after a conjunctive/linking adverb? Suggested change: "Typically," Thanks, Rob From nobody Mon Jun 21 05:06:39 2021 Return-Path: <0100017a2e770a87-a197ed77-0c72-444f-ae91-c66b8e91da12-000000@amazonses.watsen.net> X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8C76D3A0A7D for ; Mon, 21 Jun 2021 05:06:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.005 X-Spam-Level: X-Spam-Status: No, score=0.005 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MI7C0_qNcQii for ; Mon, 21 Jun 2021 05:06:33 -0700 (PDT) Received: from a8-96.smtp-out.amazonses.com (a8-96.smtp-out.amazonses.com [54.240.8.96]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 31F573A0A78 for ; Mon, 21 Jun 2021 05:06:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1624277191; h=Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc:Content-Transfer-Encoding:Message-Id:References:To:Feedback-ID; bh=/H7foTGD1SQW+LvWq11qWuL9FhLlpZZqu3bzOJuV3g4=; b=VkQDBgBaWu6/r8O0mE30XBZv7thzRI/v+ETlkyXXtQXGpDJCHbpGrGtrlZrnT+PJ 3Kr4I/3DJqzf7qRPL9M4T/lrs0LWnFMst5SK6Ft13zc+pbdgS/mLmyVXEiYj31WFv14 Vl7F0l5oWrS4ILQfxp2Tco01ztQV/A1tu+y49QYg= Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.100.0.2.22\)) From: Kent Watsen In-Reply-To: <20210618231258.268F2F4073B@rfc-editor.org> Date: Mon, 21 Jun 2021 12:06:31 +0000 Cc: ian.farrer@telekom.de, mikael.abrahamsson@t-systems.se, Warren Kumari , "Rob Wilton (rwilton)" , Mahesh Jethanandani , sramanathan@google.com, "netconf@ietf.org" Content-Transfer-Encoding: quoted-printable Message-ID: <0100017a2e770a87-a197ed77-0c72-444f-ae91-c66b8e91da12-000000@email.amazonses.com> References: <20210618231258.268F2F4073B@rfc-editor.org> To: RFC Errata System X-Mailer: Apple Mail (2.3654.100.0.2.22) Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES X-SES-Outgoing: 2021.06.21-54.240.8.96 Archived-At: Subject: Re: [netconf] [Editorial Errata Reported] RFC8572 (6616) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jun 2021 12:06:38 -0000 This Errata should be accepted. Obviously =E2=80=9CSVR" should=E2=80=99ve been =E2=80=9CSRV=E2=80=9D. K. > On Jun 18, 2021, at 7:12 PM, RFC Errata System = wrote: >=20 > The following errata report has been submitted for RFC8572, > "Secure Zero Touch Provisioning (SZTP)". >=20 > -------------------------------------- > You may review the report below and at: > https://www.rfc-editor.org/errata/eid6616 >=20 > -------------------------------------- > Type: Editorial > Reported by: Srihari Ramanathan >=20 > Section: 4.2.3 >=20 > Original Text > ------------- > For device-independent queries, the three bootstrapping artifacts > defined in Section 3 are encoded into the SVR records as follows. >=20 > Artifact to SRV Record Mapping: >=20 > Conveyed Information: This artifact is not supported directly. > Instead, the essence of unsigned redirect information is = mapped > to SVR records per [RFC2782]. >=20 > Corrected Text > -------------- > For device-independent queries, the three bootstrapping artifacts > defined in Section 3 are encoded into the SRV records as follows. >=20 > Artifact to SRV Record Mapping: >=20 > Conveyed Information: This artifact is not supported directly. > Instead, the essence of unsigned redirect information is = mapped > to SRV records per [RFC2782]. >=20 > Notes > ----- > I believe both "SVR" are typos? >=20 > Instructions: > ------------- > This erratum is currently posted as "Reported". If necessary, please > use "Reply All" to discuss whether it should be verified or > rejected. When a decision is reached, the verifying party =20 > can log in to change the status and edit the report, if necessary.=20 >=20 > -------------------------------------- > RFC8572 (draft-ietf-netconf-zerotouch-29) > -------------------------------------- > Title : Secure Zero Touch Provisioning (SZTP) > Publication Date : April 2019 > Author(s) : K. Watsen, I. Farrer, M. Abrahamsson > Category : PROPOSED STANDARD > Source : Network Configuration > Area : Operations and Management > Stream : IETF > Verifying Party : IESG From nobody Mon Jun 21 05:21:24 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2052E3A0B34; Mon, 21 Jun 2021 05:21:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0 X-Spam-Level: X-Spam-Status: No, score=0 tagged_above=-999 required=5 tests=[SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NiKGOsCL4YY8; Mon, 21 Jun 2021 05:21:13 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9960A3A0B20; Mon, 21 Jun 2021 05:21:13 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id 8D0B5F4075F; Mon, 21 Jun 2021 05:21:10 -0700 (PDT) To: sramanathan@google.com, kent+ietf@watsen.net, ian.farrer@telekom.de, mikael.abrahamsson@t-systems.se X-PHP-Originating-Script: 1005:errata_mail_lib.php From: RFC Errata System Cc: rwilton@cisco.com, iesg@ietf.org, netconf@ietf.org, rfc-editor@rfc-editor.org Content-Type: text/plain; charset=UTF-8 Message-Id: <20210621122110.8D0B5F4075F@rfc-editor.org> Date: Mon, 21 Jun 2021 05:21:10 -0700 (PDT) Archived-At: Subject: [netconf] [Errata Verified] RFC8572 (6616) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jun 2021 12:21:18 -0000 The following errata report has been verified for RFC8572, "Secure Zero Touch Provisioning (SZTP)". -------------------------------------- You may review the report below and at: https://www.rfc-editor.org/errata/eid6616 -------------------------------------- Status: Verified Type: Editorial Reported by: Srihari Ramanathan Date Reported: 2021-06-18 Verified by: Rob Wilton (IESG) Section: 4.2. Original Text ------------- For device-independent queries, the three bootstrapping artifacts defined in Section 3 are encoded into the SVR records as follows. Artifact to SRV Record Mapping: Conveyed Information: This artifact is not supported directly. Instead, the essence of unsigned redirect information is mapped to SVR records per [RFC2782]. Corrected Text -------------- For device-independent queries, the three bootstrapping artifacts defined in Section 3 are encoded into the SRV records as follows. Artifact to SRV Record Mapping: Conveyed Information: This artifact is not supported directly. Instead, the essence of unsigned redirect information is mapped to SRV records per [RFC2782]. Notes ----- In both places "SVR" should obviously read "SRV". -------------------------------------- RFC8572 (draft-ietf-netconf-zerotouch-29) -------------------------------------- Title : Secure Zero Touch Provisioning (SZTP) Publication Date : April 2019 Author(s) : K. Watsen, I. Farrer, M. Abrahamsson Category : PROPOSED STANDARD Source : Network Configuration Area : Operations and Management Stream : IETF Verifying Party : IESG From nobody Mon Jun 21 05:23:12 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6F15A3A0B53 for ; Mon, 21 Jun 2021 05:23:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.696 X-Spam-Level: X-Spam-Status: No, score=-7.696 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=JFBvrNJO; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=tYgb1SX8 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1GhhNACETYiu for ; Mon, 21 Jun 2021 05:23:05 -0700 (PDT) Received: from alln-iport-1.cisco.com (alln-iport-1.cisco.com [173.37.142.88]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3408A3A0B3F for ; Mon, 21 Jun 2021 05:23:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4024; q=dns/txt; s=iport; t=1624278185; x=1625487785; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=CfPsp/Fa59ax7RdJLskwDwGwo1i6wxAYANp8266YwXs=; b=JFBvrNJOLdZuG5A1w03egnq3qg7vwgPhZwwZ/flvRkA0wOmqwkFRVrr5 qTFQZBNNz9pHnfg9k96DFl/NIEoBiRH31jYg8G+sM6uuDZ4u1UfY+C+gr moCJo8bSzRrMEfQxXSf05iDAYisttzuUUpefbrYMJwQBV7QcCYOO9NhoF o=; X-IPAS-Result: =?us-ascii?q?A0ADAABxhNBgl4YNJK1aGgEBAQEBAQEBAQEDAQEBARIBA?= =?us-ascii?q?QEBAgIBAQEBQIFDBQEBAQELAYFSUX5aNzELhD2DSAOEWWCIagOKS49SgS6BJ?= =?us-ascii?q?QNUCwEBAQ0BATUKAgQBAYRQAheCVgIlNAkOAgQBAQEBAwIDAQEBAQUBAQUBA?= =?us-ascii?q?QECAQYEFAEBAQEBAQEBaIVoDYZFAQEBBBIREQwBATcBCwQCAQgRBAEBAQICJ?= =?us-ascii?q?gICAh8RFQgIAgQBDQUIGoJPAYJVAy8BAwuaJgGBOgKKH3qBMoEBggcBAQYEB?= =?us-ascii?q?IU6DQuCMQMGgRAqAYJ6hA6GYSccgUlEgRVDgmA+gQSBHIImgxU2gi6CP2FoU?= =?us-ascii?q?4EYB0wBFREUNZEnKYJQAUOLdppoWwqDH5gjhXQSg16LJ5ZtlViPR5AxhEoCB?= =?us-ascii?q?AIEBQIOAQEGgVQ5O4EgcBUagwpQFwIOjh8Zg1eFFIVKczgCBgEJAQEDCXyLB?= =?us-ascii?q?QGBEAEB?= IronPort-PHdr: A9a23:zi21bB8Aa8VMJP9uWD3oyV9kXcBvk6r9IhUY7Nwhhq4dOqig/pG3O kvZ6L0tiVLSRozU5rpCjPaeqKHvX2EMoPPj+HAPeZBBTVkJ3MMRmQFzH8eZEkD9avjnc39yE MFLTlQw+Xa9PABcE9r/YFuHpHq04HYSFxzzOBAzKP7yH9vZjt+80Ka5/JiACzg= IronPort-HdrOrdr: A9a23:yN6nz6D4W2/4TQvlHegQsceALOsnbusQ8zAXPh9KKCC9I/b3qy nxppsmPEfP+UkssHFJo6HmBEDyewKjyXcT2/hQAV7CZnimhILMFuFfBOTZskbd8kHFh4tgPO JbAtRD4b7LfBtHZKTBkXOF+r8bqbHtms3F9ISurUuFDzsaFp2IhD0JbDpzZ3cGPDWucqBJba Z0iPA3wwaISDAyVICWF3MFV+/Mq5ngj5T9eyMLABYh9U2nkS6owKSSKWnb4j4uFxd0hZsy+2 nMlAL0oo+5teug9xPa32jPq7xLhdrazMdZDsDksLlRFtyssHftWG1SYczFgNkHmpD31L/sqq iVn/4UBbU115oWRBDvnfKi4Xi77N9k0Q6S9bbRuwqSnSW+fkNmNyKE7rgpLScwLCEbzY1BOe twrhGknosSAhXakCvn4d/UExlsi0qvuHIn1fUelnpFTOIlGfJsRKEkjQho+a07bWjHAUEcYZ 9TJdCZ4OwTfUKRbnjfsGUqyNuwXm4rFhPDRkQZoMSa3zVfgXg8liIjtYMit2ZF8Ih4R4hP5u zCPKgtnLZSTtUOZaY4AOsaW8O4BmHEXBqJOmOPJlbsEr0BJhv22tLKCXUOlamXkbkzvdUPcb j6ISdlXF8JCgvT4Je1reh2Gzj2MRKAtBrWu7Nj26Q= X-IronPort-Anti-Spam-Filtered: true X-IronPort-AV: E=Sophos;i="5.83,289,1616457600"; d="scan'208";a="710249522" Received: from alln-core-12.cisco.com ([173.36.13.134]) by alln-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 21 Jun 2021 12:23:03 +0000 Received: from mail.cisco.com (xbe-aln-002.cisco.com [173.36.7.17]) by alln-core-12.cisco.com (8.15.2/8.15.2) with ESMTPS id 15LCN3Os015757 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 21 Jun 2021 12:23:03 GMT Received: from xfe-aln-004.cisco.com (173.37.135.124) by xbe-aln-002.cisco.com (173.36.7.17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.792.15; Mon, 21 Jun 2021 07:21:56 -0500 Received: from xfe-rcd-005.cisco.com (173.37.227.253) by xfe-aln-004.cisco.com (173.37.135.124) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.792.15; Mon, 21 Jun 2021 07:21:56 -0500 Received: from NAM12-DM6-obe.outbound.protection.outlook.com (72.163.14.9) by xfe-rcd-005.cisco.com (173.37.227.253) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.792.15 via Frontend Transport; Mon, 21 Jun 2021 07:21:56 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=lNObP7lRLPVuQ5FYKpRFRc0/m/BjkjPwUw4YnPbk9bDD2NXYYkhg3Rk2+4Si4znHX6hTnDVQYOaA3pKc1OYqgGAD4tTryakaayHoskl1jnnAz9UeuWdbCUC96zYKLu9eR12pcJSMlxbgKg30CmS9xq1pkxuIO9f0fw0U0gDlkMZZ4eEQy01/zbTxKeTzkyVl1Rg7F4EqC4WdRiTsw+6K3LPcQRhkvdagtJy9BwJcnzRGT89e7qXQdK+Gt9cKovQWYpMQSPKRY7I+9HOk1VYV6iL+rciuCZ/vhYUX/3BNyJeY7D5PhcbVg3dDuZ+8MHMIKhfGYGqz1wHl/h0zY7n9nQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=CfPsp/Fa59ax7RdJLskwDwGwo1i6wxAYANp8266YwXs=; b=XBx998snoB/rsvCF+P5JHErYhU5Asm9yARMnvffk+FQxJI1xJhbyNmMDX4sjm48EbHmqpMkXYKYJ1v59YDl/XAbYIjkCd83JP5LoUUpcdzhqWaw/5yNtRQK2DLyriGzDcHcQDOAW1AVr0CpoJr6s4BvWwl7SQ4uwrHJaxi6V9KmVULkK2p/kUbbt3JP+dFZxC2DG/EnyCMxuxNm6F0CG1bXfdr1C5sBIo5brWFbHnTr+cgh2drpgCnvl8PqCkcEmR4uqsqxolOB0khjWOTmH9hbWmM4c1yPuljP+fLBwgKPB4DpDW65QNJCXcMSut3Cf/46zkyr8+Uv9rzZalFSBtg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=CfPsp/Fa59ax7RdJLskwDwGwo1i6wxAYANp8266YwXs=; b=tYgb1SX8ITVuW00gAbyLSvg/6IK2n+JQ9bcJe9AExGaVfRw7dVW/o8EUm4pvloAVZJ5ZC+pwPbmLFohEnulS835s4NAVw97Do4aDBm7ujU2KmH10Ro7BeOc/J2/Xa7l5pBdBSXWX6VYcQioEKFzre72+lM2Uq/82mTMDtPeY70I= Received: from DM4PR11MB5438.namprd11.prod.outlook.com (2603:10b6:5:399::21) by DM5PR11MB1820.namprd11.prod.outlook.com (2603:10b6:3:111::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4242.23; Mon, 21 Jun 2021 12:21:55 +0000 Received: from DM4PR11MB5438.namprd11.prod.outlook.com ([fe80::e14c:8880:1101:bb0c]) by DM4PR11MB5438.namprd11.prod.outlook.com ([fe80::e14c:8880:1101:bb0c%5]) with mapi id 15.20.4242.023; Mon, 21 Jun 2021 12:21:55 +0000 From: "Rob Wilton (rwilton)" To: Kent Watsen , RFC Errata System CC: "ian.farrer@telekom.de" , "mikael.abrahamsson@t-systems.se" , "Warren Kumari" , Mahesh Jethanandani , "sramanathan@google.com" , "netconf@ietf.org" Thread-Topic: [Editorial Errata Reported] RFC8572 (6616) Thread-Index: AQHXZJefXIpjwF7lwkCYcx4ILPObpaseYo6AgAADNRA= Date: Mon, 21 Jun 2021 12:21:55 +0000 Message-ID: References: <20210618231258.268F2F4073B@rfc-editor.org> <0100017a2e770a87-a197ed77-0c72-444f-ae91-c66b8e91da12-000000@email.amazonses.com> In-Reply-To: <0100017a2e770a87-a197ed77-0c72-444f-ae91-c66b8e91da12-000000@email.amazonses.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: watsen.net; dkim=none (message not signed) header.d=none;watsen.net; dmarc=none action=none header.from=cisco.com; x-originating-ip: [82.12.233.180] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: c7471cfc-f2ad-4444-315d-08d934af286f x-ms-traffictypediagnostic: DM5PR11MB1820: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DM4PR11MB5438.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(366004)(396003)(136003)(346002)(376002)(39860400002)(8936002)(9686003)(5660300002)(186003)(122000001)(966005)(55016002)(478600001)(53546011)(86362001)(316002)(6506007)(26005)(8676002)(38100700002)(71200400001)(83380400001)(4326008)(52536014)(66556008)(76116006)(66946007)(33656002)(66476007)(64756008)(2906002)(7696005)(66446008)(54906003)(110136005); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?dEZidFEzQ3BUZ1o0clFTTTNlZkJQYk5BYmxTaDJPc1B5STFJRGxnam44bW1v?= =?utf-8?B?bTFwWkJKNzFyNkpJcnNUUExkK3BSRzBjTFhESUNXb2RPYlBCeUl2anZHT2hO?= =?utf-8?B?U20vdWNpZnlOWmFBNVFQdE1FWG5qcnl3RlArOFhPWDBZRCtIaEY5Y2VFMndB?= =?utf-8?B?S3pYTkpzWUhsZzdGYzhsU2YxZTB1THlyU1g5ZDBkcHFVMFh2cGJvM2M4eEdC?= =?utf-8?B?d1dKMEY2cjNQcUQ3YUZnM3QxRDU5alkzamFrTE5mcVNkeWdOSE5KQUxHbDBJ?= =?utf-8?B?bHlVbWFBYTBjRFpaeFR6cFZWZmNrTHpzZzcxVVJnajNDOE83dWhvTmlHdHY5?= =?utf-8?B?YVhleGlyQVg4cVZLWEVxMHgxVmlqeHM3ZnA1S2hHbEpzZWs5TTkyZ1NQbWs0?= =?utf-8?B?c1d3N3g4M1J4QTJLUnRlbFY0WGhKdFNReWpFS0tONVoxaDMrQmZiRVNSRHpP?= =?utf-8?B?R0VxZVYzbTR4THZLdTJXbTNFa1ErZW5GTmE1UFFCY3EvVUYwalJvMjczMmVt?= =?utf-8?B?ZExqeW53MVltVm92MzU4ZkdSNS9MNTZ5c093SHM3RHFRaVIrN2xZUENBaGk0?= =?utf-8?B?bm1FQ2RUVTJnR0I5TW5vVlJ0M0Y4NmUvOXo3Q0tialRKUnU5ZkJ2SGhZeis0?= =?utf-8?B?N2JXRWNTRXA0WnFhLzdvQnV4eHp2NHFjU1lYcUNIak5OYktJalFpeCsvdUFn?= =?utf-8?B?YkpLaVJQdXpPS2RBS3pvdUVhTlRzVGNwTGtSV25xWWRNZWk4aml2V3kzZUVi?= =?utf-8?B?d1F4TVp4OU5acEhHbHZPZmpDeXhYdDI1K3lsYmQwQzZRcW1RNHc0UUpkLzIx?= =?utf-8?B?dFVlTHEyMWlRVHVCbkRRWEFwWVZ6VFJoTXBCNG04MzAwYUV6UFAvYVpBL3Nx?= =?utf-8?B?Sy91YVZWN3lyNWlFZGdQN1BndHprWlhqSGRYMkNEU1hSQUI3MGNHWnJ1L2JH?= =?utf-8?B?TE9XTklBczVGblF4d3NGOW43VS8yVStwZWRQd2h6ZXRLckR3OUFXWDZxQzA1?= =?utf-8?B?YTlXOTVBQ0RhRWp4c0lxOWdqUGladmUzQXRxT2RST3l3M2ZrcEViTHpBK2xt?= =?utf-8?B?dTdyNjZ5L0JPWk1yTVFGdk9iSHVoZFFwUDAyYVZYcFZKemhGQlRBVk13d2VE?= =?utf-8?B?Smo5aVJSQ0QrT2xWUWdkellndk1vTFRBQmxQajFtQVEveXRWc3hveWs5QWFM?= =?utf-8?B?Y1Q2SE5sRElXK0E5RjJYS1RGYlFsWmNiblVFMFNZNFV3M0ZuVmkrUEJBbjQ4?= =?utf-8?B?aHFZcFViZEhTOXNubGJRbUtFUFUwZUkvR2RYbDl4WS82Q1MrY0U1U3dHd2NW?= =?utf-8?B?VFZyOWFpb0MrSEVOZjR3MDNiUEtXZ3BEVmFhRVdlKzJtZDJuaFlDRkdEQVNo?= =?utf-8?B?OVNXNEpxKzgxbVhYWk5MRWw5dHEyRVc2WG5vZ0tlTHg0SjNabzFUWE1uOEdS?= =?utf-8?B?VFhrRzRJNURqL2tERUs2dWNKZWgyMUJiR2lhdHBFV3RPc2tJUWtnem9NNEJz?= =?utf-8?B?Yk5hT2U4bUhaZHd3bkh4TUNnL3dWMDhjT01kRlFRaGdaVjVPdHdjNVVvb0xx?= =?utf-8?B?ZElSZlU0RVBxY0tmTFBtd2VURU9XRytKUHl6Y2cvb0VpWmx4TGNKSk1qY3Az?= =?utf-8?B?VFVZR0pOQk1lb2FSTGptdUh1ald3OXN0ZHdIcGk0OWY4Si9zT1VyejA1bWR0?= =?utf-8?B?L3VxejhzRjhyMEpVemprN29JQVBranViL2RHU0xaditJUlA4bW9oYmlEKzJo?= =?utf-8?Q?fnIHUkg2BbFTzCZLPqrePEBo8jc4ikY/iY53iEm?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM4PR11MB5438.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: c7471cfc-f2ad-4444-315d-08d934af286f X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Jun 2021 12:21:55.1295 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: Yjtf14Arq6sxRH5VpoSCUUM6G74a05xI7MBJ+Vqx2u3C9VhUiDybAp6ApZC/gBS/SdTQtxJdoFPrrZNUInrMSQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR11MB1820 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.17, xbe-aln-002.cisco.com X-Outbound-Node: alln-core-12.cisco.com Archived-At: Subject: Re: [netconf] [Editorial Errata Reported] RFC8572 (6616) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jun 2021 12:23:10 -0000 SGkgS2VudCwNCg0KSSBhZ3JlZS4gIEkgaGF2ZSB2ZXJpZmllZCB0aGlzIGVycmF0YS4gIFNyaWhh cmksIHRoYW5rcyBmb3IgcmFpc2luZy4NCg0KUmVnYXJkcywNClJvYg0KDQoNCj4gLS0tLS1Pcmln aW5hbCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogS2VudCBXYXRzZW4gPGtlbnQraWV0ZkB3YXRzZW4u bmV0Pg0KPiBTZW50OiAyMSBKdW5lIDIwMjEgMTM6MDcNCj4gVG86IFJGQyBFcnJhdGEgU3lzdGVt IDxyZmMtZWRpdG9yQHJmYy1lZGl0b3Iub3JnPg0KPiBDYzogaWFuLmZhcnJlckB0ZWxla29tLmRl OyBtaWthZWwuYWJyYWhhbXNzb25AdC1zeXN0ZW1zLnNlOyBXYXJyZW4NCj4gS3VtYXJpIDx3YXJy ZW5Aa3VtYXJpLm5ldD47IFJvYiBXaWx0b24gKHJ3aWx0b24pIDxyd2lsdG9uQGNpc2NvLmNvbT47 DQo+IE1haGVzaCBKZXRoYW5hbmRhbmkgPG1qZXRoYW5hbmRhbmlAZ21haWwuY29tPjsNCj4gc3Jh bWFuYXRoYW5AZ29vZ2xlLmNvbTsgbmV0Y29uZkBpZXRmLm9yZw0KPiBTdWJqZWN0OiBSZTogW0Vk aXRvcmlhbCBFcnJhdGEgUmVwb3J0ZWRdIFJGQzg1NzIgKDY2MTYpDQo+IA0KPiBUaGlzIEVycmF0 YSBzaG91bGQgYmUgYWNjZXB0ZWQuDQo+IA0KPiBPYnZpb3VzbHkg4oCcU1ZSIiBzaG91bGTigJl2 ZSBiZWVuIOKAnFNSVuKAnS4NCj4gDQo+IEsuDQo+IA0KPiANCj4gDQo+ID4gT24gSnVuIDE4LCAy MDIxLCBhdCA3OjEyIFBNLCBSRkMgRXJyYXRhIFN5c3RlbSA8cmZjLWVkaXRvckByZmMtZWRpdG9y Lm9yZz4NCj4gd3JvdGU6DQo+ID4NCj4gPiBUaGUgZm9sbG93aW5nIGVycmF0YSByZXBvcnQgaGFz IGJlZW4gc3VibWl0dGVkIGZvciBSRkM4NTcyLA0KPiA+ICJTZWN1cmUgWmVybyBUb3VjaCBQcm92 aXNpb25pbmcgKFNaVFApIi4NCj4gPg0KPiA+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tDQo+ID4gWW91IG1heSByZXZpZXcgdGhlIHJlcG9ydCBiZWxvdyBhbmQgYXQ6DQo+ ID4gaHR0cHM6Ly93d3cucmZjLWVkaXRvci5vcmcvZXJyYXRhL2VpZDY2MTYNCj4gPg0KPiA+IC0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+ID4gVHlwZTogRWRpdG9yaWFs DQo+ID4gUmVwb3J0ZWQgYnk6IFNyaWhhcmkgUmFtYW5hdGhhbiA8c3JhbWFuYXRoYW5AZ29vZ2xl LmNvbT4NCj4gPg0KPiA+IFNlY3Rpb246IDQuMi4zDQo+ID4NCj4gPiBPcmlnaW5hbCBUZXh0DQo+ ID4gLS0tLS0tLS0tLS0tLQ0KPiA+ICAgRm9yIGRldmljZS1pbmRlcGVuZGVudCBxdWVyaWVzLCB0 aGUgdGhyZWUgYm9vdHN0cmFwcGluZyBhcnRpZmFjdHMNCj4gPiAgIGRlZmluZWQgaW4gU2VjdGlv biAzIGFyZSBlbmNvZGVkIGludG8gdGhlIFNWUiByZWNvcmRzIGFzIGZvbGxvd3MuDQo+ID4NCj4g PiAgIEFydGlmYWN0IHRvIFNSViBSZWNvcmQgTWFwcGluZzoNCj4gPg0KPiA+ICAgICAgQ29udmV5 ZWQgSW5mb3JtYXRpb246ICBUaGlzIGFydGlmYWN0IGlzIG5vdCBzdXBwb3J0ZWQgZGlyZWN0bHku DQo+ID4gICAgICAgICBJbnN0ZWFkLCB0aGUgZXNzZW5jZSBvZiB1bnNpZ25lZCByZWRpcmVjdCBp bmZvcm1hdGlvbiBpcyBtYXBwZWQNCj4gPiAgICAgICAgIHRvIFNWUiByZWNvcmRzIHBlciBbUkZD Mjc4Ml0uDQo+ID4NCj4gPiBDb3JyZWN0ZWQgVGV4dA0KPiA+IC0tLS0tLS0tLS0tLS0tDQo+ID4g ICBGb3IgZGV2aWNlLWluZGVwZW5kZW50IHF1ZXJpZXMsIHRoZSB0aHJlZSBib290c3RyYXBwaW5n IGFydGlmYWN0cw0KPiA+ICAgZGVmaW5lZCBpbiBTZWN0aW9uIDMgYXJlIGVuY29kZWQgaW50byB0 aGUgU1JWIHJlY29yZHMgYXMgZm9sbG93cy4NCj4gPg0KPiA+ICAgQXJ0aWZhY3QgdG8gU1JWIFJl Y29yZCBNYXBwaW5nOg0KPiA+DQo+ID4gICAgICBDb252ZXllZCBJbmZvcm1hdGlvbjogIFRoaXMg YXJ0aWZhY3QgaXMgbm90IHN1cHBvcnRlZCBkaXJlY3RseS4NCj4gPiAgICAgICAgIEluc3RlYWQs IHRoZSBlc3NlbmNlIG9mIHVuc2lnbmVkIHJlZGlyZWN0IGluZm9ybWF0aW9uIGlzIG1hcHBlZA0K PiA+ICAgICAgICAgdG8gU1JWIHJlY29yZHMgcGVyIFtSRkMyNzgyXS4NCj4gPg0KPiA+IE5vdGVz DQo+ID4gLS0tLS0NCj4gPiBJIGJlbGlldmUgYm90aCAiU1ZSIiBhcmUgdHlwb3M/DQo+ID4NCj4g PiBJbnN0cnVjdGlvbnM6DQo+ID4gLS0tLS0tLS0tLS0tLQ0KPiA+IFRoaXMgZXJyYXR1bSBpcyBj dXJyZW50bHkgcG9zdGVkIGFzICJSZXBvcnRlZCIuIElmIG5lY2Vzc2FyeSwgcGxlYXNlDQo+ID4g dXNlICJSZXBseSBBbGwiIHRvIGRpc2N1c3Mgd2hldGhlciBpdCBzaG91bGQgYmUgdmVyaWZpZWQg b3INCj4gPiByZWplY3RlZC4gV2hlbiBhIGRlY2lzaW9uIGlzIHJlYWNoZWQsIHRoZSB2ZXJpZnlp bmcgcGFydHkNCj4gPiBjYW4gbG9nIGluIHRvIGNoYW5nZSB0aGUgc3RhdHVzIGFuZCBlZGl0IHRo ZSByZXBvcnQsIGlmIG5lY2Vzc2FyeS4NCj4gPg0KPiA+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tDQo+ID4gUkZDODU3MiAoZHJhZnQtaWV0Zi1uZXRjb25mLXplcm90b3Vj aC0yOSkNCj4gPiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPiA+IFRp dGxlICAgICAgICAgICAgICAgOiBTZWN1cmUgWmVybyBUb3VjaCBQcm92aXNpb25pbmcgKFNaVFAp DQo+ID4gUHVibGljYXRpb24gRGF0ZSAgICA6IEFwcmlsIDIwMTkNCj4gPiBBdXRob3IocykgICAg ICAgICAgIDogSy4gV2F0c2VuLCBJLiBGYXJyZXIsIE0uIEFicmFoYW1zc29uDQo+ID4gQ2F0ZWdv cnkgICAgICAgICAgICA6IFBST1BPU0VEIFNUQU5EQVJEDQo+ID4gU291cmNlICAgICAgICAgICAg ICA6IE5ldHdvcmsgQ29uZmlndXJhdGlvbg0KPiA+IEFyZWEgICAgICAgICAgICAgICAgOiBPcGVy YXRpb25zIGFuZCBNYW5hZ2VtZW50DQo+ID4gU3RyZWFtICAgICAgICAgICAgICA6IElFVEYNCj4g PiBWZXJpZnlpbmcgUGFydHkgICAgIDogSUVTRw0KDQo= From nobody Mon Jun 21 05:50:43 2021 Return-Path: <0100017a2e9f69ee-5d037ce3-62dd-4825-922c-8a08b545d166-000000@amazonses.watsen.net> X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BF2553A0CDA; Mon, 21 Jun 2021 05:50:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.004 X-Spam-Level: X-Spam-Status: No, score=0.004 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TFNIAJ0-yOPi; Mon, 21 Jun 2021 05:50:39 -0700 (PDT) Received: from a8-31.smtp-out.amazonses.com (a8-31.smtp-out.amazonses.com [54.240.8.31]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A9EFF3A0CD8; Mon, 21 Jun 2021 05:50:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1624279837; h=Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc:Content-Transfer-Encoding:Message-Id:References:To:Feedback-ID; bh=X+Xl1/q9CB2BweGXOt+LHQquwBIvoSFmhrfjw4mPxms=; b=e/gYeKsK+EPj/4kQhkr6dVNhc+DIYz29joYvfUMRa3URyFm6gDYrbKb/zilz0MmJ KfawYK2GHK/BzVCjQBLJbLQ/vY8BQkzLLFjswo8kVWhP+6nCq4b7MoIBF3m9jYvCMnx eXsOAueHZegudeEwBlaiI1AtrZduhA/dIdzmxFiA= Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.100.0.2.22\)) From: Kent Watsen In-Reply-To: <8407.1624138175@localhost> Date: Mon, 21 Jun 2021 12:50:37 +0000 Cc: "Fries, Steffen" , "Werner, Thomas" , "netconf@ietf.org" , "anima@ietf.org" Content-Transfer-Encoding: quoted-printable Message-ID: <0100017a2e9f69ee-5d037ce3-62dd-4825-922c-8a08b545d166-000000@email.amazonses.com> References: <3a31e33678484625b9f4f3810e673e56@siemens.com> <0100017a1b4d2e94-aeaaa06e-8dc0-4163-a747-692e72b0d75c-000000@email.amazonses.com> <8407.1624138175@localhost> To: Michael Richardson X-Mailer: Apple Mail (2.3654.100.0.2.22) Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES X-SES-Outgoing: 2021.06.21-54.240.8.31 Archived-At: Subject: Re: [netconf] [Anima] Reuse of SZTP-CSR YANG definition in BRSKI-AE X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jun 2021 12:50:42 -0000 Hi Michael, >> [future threads about SZTP should CC NETCONF, the WG that >> published/maintains SZTP] >=20 > Yes, and not netmod? Correct. Though questions regarding the YANG language are best post to = NETMOD. > sf> In one use case, the pledge has no direct connection to the = registrar > sf> and a registrar-agent communicates with the pledge. In that = specific > sf> case we do not have a TLS connection between the pledge and the > sf> registrar-agent and protect the exchanged objects by an = additional > sf> signature. This is done by embedding the necessary information = into a JOSE object. >=20 > ... >=20 > sf> The question > sf> = (https://github.com/anima-wg/anima-brski-async-enroll/issues/10) now > sf> is, if this construct is possible, as we are just using a = subset > sf> (sztp-csr:csr) of the YANG module " = ietf-sztp-bootstrap-server" from > sf> draft-ietf-netconf-sztp-csr? >=20 > kw> This is not possible. >=20 > I feel that the question might have been so specific that it didn't = match. >=20 > My thought was to do CORECONF (possibly using CoAP over BTLE), to = retrieve a > CSR from a device. It seems to fit right into the = ietf-sztp-bootstrap-server > pattern to me. >=20 > So, I'm unclear why ietf-sztp-csr:csr-support couldn't be used. > Is it because the module augments sztp, and we don't need it all? In part, but also because what you want is buried inside a definition = and there is no mechanism to cherry-pick inner-nodes. > We really just want container csr-support, csr-generation, csr, ??? >=20 > Maybe we could chat about this more. > We have a regular Thursday 9:30 EST design team. >=20 >>> The alternative would be to define an own module modeled in a = similar. >=20 >> You can do this. >=20 > I think that we can have some common mindshare here. One option would be to move stuff into ietf-crypto-types=E2=80=A6as that = module already defines a number of grouping statements for handy = structures. That said, these structures are not context-free=E2=80=A6they= are very much entwined in a specific dialog that is rather specific to = bootstrapping processes. [FWIW, just adding =E2=80=9Ccmc=E2=80=9D and = =E2=80=9Ccmp" typedefs to crypto-types, alongside the existing =E2=80=9Ccs= r=E2=80=9D (e.g., =E2=80=9Cp10=E2=80=9D) typedef, might be a good thing] Another option would be to move stuff into grouping statements, in the = same module, that are immediately. In theory this would have no impact = to the on-the-wire format. However, it=E2=80=99s somewhat late in the = process to entertain this, as the draft is in the AD queue (AD-review = was just posted today) and no doubt we would dicker over how many = groupings to create and whether they should be put into another draft to = whitewash out the SZTP-stint. Is it proper to reset a NETCONF = publication for another WG? Rob? K. From nobody Mon Jun 21 07:45:13 2021 Return-Path: <0100017a2f082e6a-1197e3c8-f8be-4d59-ba1c-8d39029a31fc-000000@amazonses.watsen.net> X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 012713A0874; Mon, 21 Jun 2021 07:45:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.001 X-Spam-Level: X-Spam-Status: No, score=0.001 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uaAdhLg2WKOg; Mon, 21 Jun 2021 07:45:08 -0700 (PDT) Received: from a8-33.smtp-out.amazonses.com (a8-33.smtp-out.amazonses.com [54.240.8.33]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B8B413A0870; Mon, 21 Jun 2021 07:45:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1624286703; h=Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc:Content-Transfer-Encoding:Message-Id:References:To:Feedback-ID; bh=RDylTc8hhy00nDIo2dinrS9EOrUGmfLGexideaFQclg=; b=LunkIUh8fGBqst6DuKQQLBDuc+Xk2CBu128wGiQoOLT5cMiw+JsPAm0mlXWndZF5 hcBsDY15F5RqHR/kIQMlpUAKMO2Wo9wkAwA9eniZ+TvNya1jM06OaGSghirTzwZvzEO u0fEXbdAk/zX3U9h+lBUe+obzImXhZWyfuyp7oNQ= Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.100.0.2.22\)) From: Kent Watsen In-Reply-To: Date: Mon, 21 Jun 2021 14:45:03 +0000 Cc: "netconf@ietf.org" , "draft-ietf-netconf-sztp-csr@ietf.org" , "netconf-chairs@ietf.org" Content-Transfer-Encoding: quoted-printable Message-ID: <0100017a2f082e6a-1197e3c8-f8be-4d59-ba1c-8d39029a31fc-000000@email.amazonses.com> References: To: "Rob Wilton (rwilton)" X-Mailer: Apple Mail (2.3654.100.0.2.22) Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES X-SES-Outgoing: 2021.06.21-54.240.8.33 Archived-At: Subject: Re: [netconf] AD review of draft-ietf-netconf-sztp-csr X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jun 2021 14:45:12 -0000 Hi Rob, Thank you for your review! > AD Review of draft-ietf-netconf-sztp-csr-03 >=20 > Disclaimer, I am not a security expert and the security specific = aspects > (e.g., the precise details of how the CSRs are encoded) is beyond my = knowledge. > Hopefully this will be sufficiently checked by SEC DIR reviews and SEC = AD, > whilst also acknowledging the expertise of the authors! Ack. > My main questions really relate to REST semantics. >=20 > 1. It is always the case that the SZTP-client must do the handshake = with > the server (i.e, populating the csr-support container, then getting a = 400 error back, > before making the actual bootstrap request), or is it acceptable for = the SZTP-client > to guess on acceptable parameters, and send a single request? = Obviously, this cannot > work in all cases, but I want to check whether it is allowed (or = explicitly disallowed) > in any cases. A handshake is not strictly always required, as: 1) it=E2=80=99s possible the device could automatically generate a CSR = using the same certificate information as present in its IDevID = certificate. This would allow the signature on the resulting LDevID to = be from the deployment=E2=80=99s CA infrastructure, which has value in = and of itself, but the LDevID would not contain any = new/different/interesting fields, and hence might have limited appeal. 2) it=E2=80=99s possible that the device could automatically generate = unique keys and associated p10, cmc, cmp structures (i.e., every = permutation of key-algorithm and request-structure the device supports), = but this would be expensive on the device, especially without knowledge = if the deployment=E2=80=99s infrastructure even cares to set an LDevID = on the device. For these reasons the authors felt it best to introduce the dialog = presented in the draft. > 2. Section 2.2: > Assuming the SZTP-server wishes to prompt the SZTP-client to provide > a CSR, then it would respond with an HTTP 400 (Bad Request) error > code: >=20 > I wonder whether returning a 400 "Bad Request" error is really the = best return code, i.e.,=20 > it wasn't clear to me whether this requesting the capabiltiies is = really an error. > Did you consider potentially using other return codes? Possibly: > 300 Multiple Choices, > 403 Fobidden, > 406 Not Acceptable I did before look at all the 4xx codes. I was initially drawn to 412 = Precondition Failed, but noted that it is specific to HTTP request = header fields. As for the others you mention, the semantics of 403 = Forbidden is that the request should not be repeated, which isn=E2=80=99t = out case, and 406 Not Acceptable regards the use of the HTTP = =E2=80=9CAccept=E2=80=9D headers, which aren't in play here either. = That said, 300 Multiple Choices does appear to be a better if not = perfect option, so I made that change in my local copy. > 3. Does it make sense to recommend a default = certificate-request-format that clients should > support, or does it make sense to not prioritize any particular = certificate format, effectively > requiring that a generic server needs to support them all? No default format is possible, as it=E2=80=99s completely dependent on = what CA infrastructure the particular deployment has. The impact to generic servers is minimal as, for the most part, they = simply pass the structure to the deployment=E2=80=99s CA and = subsequently relay the response structure to the device. Only if the = SZTP-server wishes to inspect that contents would it then need to step = up to understanding all the formats. > 4. References. RFC 3688 probably should be normative for the XML = registry, noting that > RFC 6020 is normatively referenced. Really? I tend to disagree as I thought the litmus test for if = something were normative was if it had to be understood in order to = implement the RFC. You raise an interesting point about RFC 6020 being Normative, as I see = that it is NOT normative in at least one of my other drafts. I think = that it is a reasonable position that, if the RFC 6020 reference is only = present in the IANA Considerations section, then it is INFORMATIVE as = far as the draft as a whole goes. Thoughts? > Nits: >=20 > 5.=20 > In the example data, would it helpful to add a sentence to explain > "base64encodedvalue1=3D", > "base64encodedvalue2=3D", > "base64encodedvalue3=3D" > =09 > Actually, given this convention is used in various places, there is a = choice as to whether > to add a sentence to each example, or perhaps in the introduction. Adding a sentence to each example would be ideal, but a ton of work, = especially considering my needing to propagate it to the suite of = client-server drafts as well. Adding something like the following to the Introduction section = wouldn=E2=80=99t be too much work: 1.3. Conventions Various examples used in this document use a placeholder value for binary data that has been base64 encoded (e.g.,=20 "base64encodeddata=3D=3D=E2=80=9C). This placeholder value is used as real base64 encoded structures are often many lines long and hence distracting to the example being presented. Thoughts? > 6. > 3.1.3. Replay Attack Protection >=20 > This RFC enables an SZTP-client to announce an ability to generate > new key to use for its CSR. >=20 > "a new key" Fixed > 7. In Security Considerations: > Generating a new key each time enables the random bytes used to > create the key to serve the dual-purpose of also acting like a > "nonce" used in other mechanisms to detect replay attacks. >=20 > I wasn't clear to me what the two purposes are here. One is acting = like > a "nonce", but what is the other purpose? :laugh: The original first purpose is, of course, to generate a new key = at all, as opposed to each time. Please provide suggested text if you = still think it can be improved. > 8. > In the case the SZTP-client must choose between the asymmetric key > option versus a shared secret for origin authentication, it is > RECOMMENDED that the SZTP-client choose using the asymmetric key > option. >=20 > "In the case the" =3D> "In the case that the ... Fixed. > Terminology: > Should you add LDevID or IDevID Maybe, but note that this draft (as with RFC 8572) carefully refers to = =E2=80=9Cidentity certificates=E2=80=9D, of which IEEE 802.1AR DevIDs = are mere examples of such, but by no means the only possibility. = It=E2=80=99s unclear if promoting such an ancillary reference to a = top-level term is appropriate. Currently, as I=E2=80=99m sure you=E2=80=99= re aware, the draft has a reference (i.e., an ) where these values = are used=E2=80=A6admitted, likely more times than necessary, such that I = wouldn=E2=80=99t be surprised if the copyeditor were to eliminate all = but the first references. Thoughts? Please advise. > Potential spelling warnings: > descendent Fixed. > Grammar Warnings (from tool): > Section: 2.3, draft text: > This module augments an RPC defined in [RFC8572], uses a data type = defined in [I-D.ietf-netconf-crypto-types], has an normative references = to [RFC2986] and [ITU. > Warning: The plural noun "references" cannot be used with the article = "an". Did you mean an normative reference or normative references? > Suggested change: "an normative reference" Fixed. > Section: 3.1.4, draft text: > Consistent with the recommendation presented in Section 9.6 of = [RFC8572], SZTP-clients SHOULD NOT passed the "csr-support" input = parameter to an untrusted SZTP-server.=20 > Warning: The modal verb 'SHOULD' requires the verb's base form. > Suggested change: "pass" Fixed. > Section: 3.1.5, draft text: > All of the certificate request formats defined in this document (e.g., = CMC, CMP, etc.), not including a raw PKCS#10, support origin = authentication. > Warning: Consider using all the. > Suggested change: "All the" Fixed=E2=80=A6and I learned something new :) > Section: 3.1.5, draft text: > Typically only one possible origin authentication mechanism can = possibly be used but, in the case that the SZTP-client authenticates = itself using both TLS-level (e.g., IDevID) and HTTP-level credentials = (e.g., Basic), as is allowed by Section 5.3 of [RFC8572], then the = SZTP-client may need to choose between the two options. > Warning: Did you forget a comma after a conjunctive/linking adverb? > Suggested change: "Typically," Fixed. > Thanks, > Rob K. From nobody Mon Jun 21 08:12:16 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 881B93A0A3E; Mon, 21 Jun 2021 08:12:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.996 X-Spam-Level: X-Spam-Status: No, score=-9.996 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=g0Idy6uM; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=fxPYsFrF Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6K5nH9OjmO9o; Mon, 21 Jun 2021 08:12:09 -0700 (PDT) Received: from alln-iport-7.cisco.com (alln-iport-7.cisco.com [173.37.142.94]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AEC0D3A0A38; Mon, 21 Jun 2021 08:12:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=14398; q=dns/txt; s=iport; t=1624288328; x=1625497928; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=URhdguD0g/EHnOTPEt+3BnN7HE5IX2zQ5JhlGQIOEts=; b=g0Idy6uMhVgB7jtFZDwZQ8DLc7rIRYtRm2jzGQWK5M0IFYwqEYOl1Bsa fdR2aCZOofRmYiN5O+BkfTJ86nBV5mfsvVXsxcnpxNq2ipWJecbOsJ9hI 3rLY506NHt4HfNSxfKNvJ3qnvYHbd+0PS+zhdshOZOTD3v+LqO22UoWr5 M=; X-IPAS-Result: =?us-ascii?q?A0DPAgDjq9Bgl4cNJK1RCYEJgVeBU1F+WjcxC4Q9g0gDh?= =?us-ascii?q?TmIbAOPW4pCgS6BJQNUCwEBAQ0BAT8CBAEBhFACF4JWAiU2Bw4CBAEBAQEDA?= =?us-ascii?q?gMBAQEBBQEBBQEBAQIBBgQUAQEBAQEBAQFohTsFKA2GRQEBAQMBEhERDAEBK?= =?us-ascii?q?Q4BCwQCAQgRBAEBAwImAgICMBUICAEBBA4FCBqCTwGCVQMOIQEDmkcBgToCi?= =?us-ascii?q?h96gTKBAYIHAQEGBASFNhiCMQmBECqCe4QOhDWBDSR7JxyBSUSBFUOBYIEAP?= =?us-ascii?q?oQOCgMRGoMVNoIugjc2ByYFAQIwMgQUHhEPMCAsHQg2AwUGBQEZAQEDCgIXB?= =?us-ascii?q?gkRKZB7CINIi3aJQJB3gQwKgx+RRIxTEoNeiyeGMZA8sx+BWToNAhWERAIEA?= =?us-ascii?q?gQFAg4BAQaBWwUtgVtwFYMkUBcCDolJhF8DDQmDTopeczgCBgEJAQEDCXyJT?= =?us-ascii?q?4E2AYEQAQE?= IronPort-PHdr: A9a23:RtMOGBYStL4bsXjqZJ83f0v/LTAxhN3EVzX9orI4gq5Vf6Ll+Zn+b wTT5vRo2VnOW4iTq/dJkPHfvK2oX2scqY2Av3YPfN0pNVcFhMwakhZmDJuDDkv2f+Hjczc3G oJEWUM2t32+OFJeTcD5YVCaq3au7DkUTxP4Mwc9Jun8FoPIycqt0OXn8JzIaAIOjz24MttP IronPort-HdrOrdr: A9a23:/j7FNKsBSmvn2J0AAjaKkjNi7skCyoMji2hC6mlwRA09TyXGra GTdaUguyMc1gx/ZJh5o6H+BEGBKUmskqKdkrNhQ4tKOzOW+FdATbsSrLcKpgeBJ8SQzJ8n6U 4NSdkaNDS0NykHsS+Y2nj6Lz9D+qj8zEnAv463pB0BIXAIGsNdBkVCe3um+yZNNW977O8CZe KhD7181kOdkBosH6CGL0hAe9KGi8zAlZrgbxJDLQUg8hOygTSh76O/OwSE3z8FOgk/g4sKwC zgqUjU96+ju/a0xlv3zGnI9albn9Pn159qGNGMsM4IMT/h4zzYIbiJGofy+AzdktvfrmrCo+ O8+ivI+P4Ds085S1vF5icFHTOQiwrGpUWSk2NwykGT0PARDAhKe/apw7gpLycwLyEbzY5BOG Uh5RPEi3MfN2KyoA3to9fPTB1kjUyyvD4rlvMSlWVWVc8EZKZWtpF3xjIZLH4sJlOw1GkcKp glMCgc3ochTXqKK3TC+mV/yt2lWXo+Wh+AX0gZo8SQlzxbhmpwwUcUzNEW2i5ozuNzd7BUo+ Dfdqh4nrBHScEbKap7GecaWMOyTmjAWwjFPm6eKUnuUKsHJ3XOoZjq56hd3pDnRHXJ9up7pH 3laiIXiYcfQTObNSS+5uwDzvmWehTJYd3E8LAo23FWgMyPeIbW X-IronPort-Anti-Spam-Filtered: true X-IronPort-AV: E=Sophos;i="5.83,289,1616457600"; d="scan'208";a="712799339" Received: from alln-core-2.cisco.com ([173.36.13.135]) by alln-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 21 Jun 2021 15:12:07 +0000 Received: from mail.cisco.com (xbe-aln-006.cisco.com [173.36.7.21]) by alln-core-2.cisco.com (8.15.2/8.15.2) with ESMTPS id 15LFC1CQ027673 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 21 Jun 2021 15:12:07 GMT Received: from xfe-aln-004.cisco.com (173.37.135.124) by xbe-aln-006.cisco.com (173.36.7.21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.792.15; Mon, 21 Jun 2021 10:12:05 -0500 Received: from xfe-aln-003.cisco.com (173.37.135.123) by xfe-aln-004.cisco.com (173.37.135.124) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.792.15; Mon, 21 Jun 2021 10:12:05 -0500 Received: from NAM11-BN8-obe.outbound.protection.outlook.com (173.37.151.57) by xfe-aln-003.cisco.com (173.37.135.123) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.792.15 via Frontend Transport; Mon, 21 Jun 2021 10:12:05 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=B8rusVp8+QxU2C+ExfafRBt5O+TMD8MeW/wPNw6cUlB1m3mUpsVZffeHkCCHm0VZdtFNQVWbZLIBIO80S/xzS0drzTxV2261dfI1ovohzsNRd3rr8EVM3uewBhDS+jxq3voIw6QxQziaK3hi5ZRBCAms8DFS4H/6hXIIliPAimkKc59S7+KncAzBdNpZVcfgdszlwmd3gjkl8g4lZuKRmDRayvBKBekPtZHPHpZAoxKCphkSYYGM+jrmEEzU1OU+bcym1FATA0fs3VGOmzhvweZtVQEu41egA6fY8CmfVxP7VZJSb2uOkwUFd8JsaJeAp3H0SNbn8c2m8WqkgqZ/jw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=URhdguD0g/EHnOTPEt+3BnN7HE5IX2zQ5JhlGQIOEts=; b=akJRaFzWcGb6n9DJ8FItRDQqekzBMl/c44eMYPZETbYrCKWfnhdfD+fi1I85SSEl3jQvuhAfSEQT2iTp60kpLqqwL+FSS30GKUsj/uXvEe/aJFSQhdG1ZnUU0Vh5GNdaqueaeDPpaYrmjLLxNXlMrVLIK4aTdYeXKv5bcQgg2d9ljLp1eowzTuS3OGWTMG2MAa5ZeQ5aWtbdKS5jzo8PQ1PS2l0AUtXfx1Qx2KkTNTCCsmCBeILCglXrs/h4IKbg1RQWfuTSZFGgrtNkDVBp2T4taUDKk0fVkqB1xoK58bc+W9aIYj318O0pSM3eQ6vjtBDUhjQ534qtBMvtYjY1Mw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=URhdguD0g/EHnOTPEt+3BnN7HE5IX2zQ5JhlGQIOEts=; b=fxPYsFrFLtTU4cA0RdkGzQxvjg9H9DdhlQLfb37tVQ7/haedBtcKCdCGXav6UsUpYNeKnO7+uXuUmZJsdT0tH+IuBeUhUticiJ5gmQqHAdOjg+uWpvBjRYC/GiAZsYMAdyGskhwHlV/6vzqkDSxufLfqVMBgKOla0Ja+UPXubAo= Received: from DM4PR11MB5438.namprd11.prod.outlook.com (2603:10b6:5:399::21) by DM4PR11MB5437.namprd11.prod.outlook.com (2603:10b6:5:398::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4242.21; Mon, 21 Jun 2021 15:12:04 +0000 Received: from DM4PR11MB5438.namprd11.prod.outlook.com ([fe80::e14c:8880:1101:bb0c]) by DM4PR11MB5438.namprd11.prod.outlook.com ([fe80::e14c:8880:1101:bb0c%5]) with mapi id 15.20.4242.023; Mon, 21 Jun 2021 15:12:04 +0000 From: "Rob Wilton (rwilton)" To: Kent Watsen CC: "netconf@ietf.org" , "draft-ietf-netconf-sztp-csr@ietf.org" , "netconf-chairs@ietf.org" Thread-Topic: AD review of draft-ietf-netconf-sztp-csr Thread-Index: Addmei+76OsPA+grSaqUN2qOgkG4uAAMdT6AAAAewWA= Date: Mon, 21 Jun 2021 15:12:04 +0000 Message-ID: References: <0100017a2f082e6a-1197e3c8-f8be-4d59-ba1c-8d39029a31fc-000000@email.amazonses.com> In-Reply-To: <0100017a2f082e6a-1197e3c8-f8be-4d59-ba1c-8d39029a31fc-000000@email.amazonses.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: watsen.net; dkim=none (message not signed) header.d=none;watsen.net; dmarc=none action=none header.from=cisco.com; x-originating-ip: [82.12.233.180] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 362c3f03-191b-4b7b-fc80-08d934c6edad x-ms-traffictypediagnostic: DM4PR11MB5437: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DM4PR11MB5438.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(346002)(376002)(136003)(396003)(39860400002)(366004)(86362001)(26005)(7696005)(53546011)(33656002)(186003)(6506007)(4326008)(478600001)(38100700002)(8676002)(5660300002)(71200400001)(66556008)(54906003)(83380400001)(316002)(66476007)(76116006)(55016002)(122000001)(64756008)(9686003)(8936002)(66446008)(2906002)(66946007)(52536014); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?bGNFMU1qd3JKMUozVVZGLzhac2pJNExQNDk4Y2lqcXkvS2djY0QyTUxtYzZT?= =?utf-8?B?a002VmlvbDRtaTgwNURZV256RFhiUzdRVVRyZlVvMG9FSU9QdHB1NG5TMk1E?= =?utf-8?B?S1BrM3NpN0Mrc3FuUENDUGoxWXgvTG9nbnc1TWxYODVmbGcvSzBnZTdiRkxO?= =?utf-8?B?QW9BcDQ4bFl3K0FSS244WW01MlZBMkt6UzdjTmt3WjFOMjJFeHB1NmxFU0xS?= =?utf-8?B?eE0vdXUxZDAzYTg4amtBYnpoZXU5eEJhWXZ4TDB0TjhHVkszVzdoYkhPQk1x?= =?utf-8?B?RHFRSDJzOG9xTndienRqOXJHK1FFcG9xYURqTVJPUFV6Q0J4alVyNE01bnp3?= =?utf-8?B?SVh1S0ltTUFrMDZDSktBOU1XQlJsSG5TY3JrUlZpQm1KYml4bWM0cndvMlkx?= =?utf-8?B?WVpFQ2NMc21MMktzdWhoWXdzVEpXZUhPVlBZaHZJOFpUTTFvVVdDVVNaMW5O?= =?utf-8?B?ME12ampqb3g1ejlKQWtJTEs0U21pZXZEYmZxbXY2WFRlMk5TaHJvVE1zd2tW?= =?utf-8?B?N0tHTXRmejRoekVLd0ZpQmUvczI2bVc1cHBCOFVhc2I1a1JCQlltcGlJOGhF?= =?utf-8?B?VHMrL0t3dEROMFF0eC9MaTE5dFJBOVJ0R1pmTlQ4TUs4d2d6T2NYSVBEbnJB?= =?utf-8?B?RG15WG5PMnFGRkloWmFXMyt3YkYvQWErV1M5VmN4cmk2ZUw2Vm5Xb0Izb2lj?= =?utf-8?B?akg3YTVYTnRwZWtWMjlldVpRMDdFK2tkSC9CWGIrVGdhYkJtd2piSGJybzFT?= =?utf-8?B?Q29EL2dzN0FJbStOOHlLUXZVaTMwOGd3SktsclFlWjJVV012N3doWm14a2hY?= =?utf-8?B?SmhLVlpjd2s1WkdDbGg4bU9ud2lsQkxMcjlqdGdkV3lFS05IMkhuak1iaWdP?= =?utf-8?B?dTJSbDRuZnZ3Nm02RSt2ZGllRVFsR29xOEZDWXhUTkJTVW5nc2tXMXpkMDUr?= =?utf-8?B?SmZlRHJ1bzYxQ0M4MHRjTDlxbi9FMDdOemRzemhGUm5CaDRzaUdRRmoyZzNN?= =?utf-8?B?R1YwN2RxcGJEM09GY29xQ3ptRm5FTW1IY0hOeWxReWYrVi9GVFYvb0dWMW1D?= =?utf-8?B?WUR4UkFsWTZhbU5wZkljRElPbWV4UEF1bGJQYmlpRlNNWmpMT0ZRRk16aVRt?= =?utf-8?B?R0dPc3NDRFF2emhremFUNk9pNVBxYWU4eGRpREVKUU9xZUdJOGNDTTU5WkxE?= =?utf-8?B?WEgyZzdpeFh3M2JSUC9TMkxsc2dNcDNlaGZDa0dqUVpyWlI0dWZZY3VXWVpV?= =?utf-8?B?dTNyR2kwR2R0d2FCaFE5NnUzNGhMUWlOUzh4ZVNOVHVGVGNvNXNJRTZocnhp?= =?utf-8?B?TjRhYjRkUTJGOEsyVWpFRTFQNC9IS2ZsMjBBbjhXaXZpY1A3VmxCNkp0NXBL?= =?utf-8?B?aFROV0pFREdqcE1oNVNLWHNSZ0Y3WmF2SVZ2a092bDlWdjRZdDN0eWtGa2do?= =?utf-8?B?M2h3KzROTXF2RFN3VHBOUkJXRS9PNnQrTjJYVS9RN0NtLzY2c1U1d09rclVq?= =?utf-8?B?ejd2YW5xWVRVVnhxaHJORlVhTnBtTXNqNjdtUFhqcXNvV3NPZXlwWHpDNW1R?= =?utf-8?B?b2UzZEl1QTRiWTBtQ0J0UjFoaTBnRDhsam9RNnVYY3RPanY0dXB1SjhGWk5I?= =?utf-8?B?YTNUTGxBd1BqU0tLNmRNZjhjUVVqY21zTHoyaG00K1hjSW8rMWYwZE9Xc0pI?= =?utf-8?B?dG02OWU4RVdjb0xZMUg0T1VMdENFVXA3a0dXczlWT1N4aDhIRW5nYTE5aDBM?= =?utf-8?Q?3xnsFpr5LpZ67lYH9WmRstfWH+5vUmJOVhKNVcV?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM4PR11MB5438.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 362c3f03-191b-4b7b-fc80-08d934c6edad X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Jun 2021 15:12:04.3854 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: cJ+e91vo//prK/c7lun9YOhIqzt0XUl1iVA+W+GDR4mTFq/y+F7qFXzs5SFFtOd5wYaC5oH9Q5TaEEOqc1tUXQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM4PR11MB5437 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.21, xbe-aln-006.cisco.com X-Outbound-Node: alln-core-2.cisco.com Archived-At: Subject: Re: [netconf] AD review of draft-ietf-netconf-sztp-csr X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jun 2021 15:12:14 -0000 SGkgS2VudCwNCg0KVGhhbmtzLg0KDQpQbGVhc2Ugc2VlIGlubGluZSAuLi4NCg0KPiAtLS0tLU9y aWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBLZW50IFdhdHNlbiA8a2VudCtpZXRmQHdhdHNl bi5uZXQ+DQo+IFNlbnQ6IDIxIEp1bmUgMjAyMSAxNTo0NQ0KPiBUbzogUm9iIFdpbHRvbiAocndp bHRvbikgPHJ3aWx0b25AY2lzY28uY29tPg0KPiBDYzogbmV0Y29uZkBpZXRmLm9yZzsgZHJhZnQt aWV0Zi1uZXRjb25mLXN6dHAtY3NyQGlldGYub3JnOyBuZXRjb25mLQ0KPiBjaGFpcnNAaWV0Zi5v cmcNCj4gU3ViamVjdDogUmU6IEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLW5ldGNvbmYtc3p0cC1j c3INCj4gDQo+IEhpIFJvYiwNCj4gDQo+IFRoYW5rIHlvdSBmb3IgeW91ciByZXZpZXchDQo+IA0K PiANCj4gPiBBRCBSZXZpZXcgb2YgZHJhZnQtaWV0Zi1uZXRjb25mLXN6dHAtY3NyLTAzDQo+ID4N Cj4gPiBEaXNjbGFpbWVyLCBJIGFtIG5vdCBhIHNlY3VyaXR5IGV4cGVydCBhbmQgdGhlIHNlY3Vy aXR5IHNwZWNpZmljIGFzcGVjdHMNCj4gPiAoZS5nLiwgdGhlIHByZWNpc2UgZGV0YWlscyBvZiBo b3cgdGhlIENTUnMgYXJlIGVuY29kZWQpIGlzIGJleW9uZCBteQ0KPiBrbm93bGVkZ2UuDQo+ID4g SG9wZWZ1bGx5IHRoaXMgd2lsbCBiZSBzdWZmaWNpZW50bHkgY2hlY2tlZCBieSBTRUMgRElSIHJl dmlld3MgYW5kIFNFQyBBRCwNCj4gPiB3aGlsc3QgYWxzbyBhY2tub3dsZWRnaW5nIHRoZSBleHBl cnRpc2Ugb2YgdGhlIGF1dGhvcnMhDQo+IA0KPiBBY2suDQo+IA0KPiANCj4gPiBNeSBtYWluIHF1 ZXN0aW9ucyByZWFsbHkgcmVsYXRlIHRvIFJFU1Qgc2VtYW50aWNzLg0KPiA+DQo+ID4gMS4gSXQg aXMgYWx3YXlzIHRoZSBjYXNlIHRoYXQgdGhlIFNaVFAtY2xpZW50IG11c3QgZG8gdGhlIGhhbmRz aGFrZSB3aXRoDQo+ID4gdGhlIHNlcnZlciAoaS5lLCBwb3B1bGF0aW5nIHRoZSBjc3Itc3VwcG9y dCBjb250YWluZXIsIHRoZW4gZ2V0dGluZyBhIDQwMA0KPiBlcnJvciBiYWNrLA0KPiA+IGJlZm9y ZSBtYWtpbmcgdGhlIGFjdHVhbCBib290c3RyYXAgcmVxdWVzdCksIG9yIGlzIGl0IGFjY2VwdGFi bGUgZm9yIHRoZQ0KPiBTWlRQLWNsaWVudA0KPiA+IHRvIGd1ZXNzIG9uIGFjY2VwdGFibGUgcGFy YW1ldGVycywgYW5kIHNlbmQgYSBzaW5nbGUgcmVxdWVzdD8gIE9idmlvdXNseSwNCj4gdGhpcyBj YW5ub3QNCj4gPiB3b3JrIGluIGFsbCBjYXNlcywgYnV0IEkgd2FudCB0byBjaGVjayB3aGV0aGVy IGl0IGlzIGFsbG93ZWQgKG9yIGV4cGxpY2l0bHkNCj4gZGlzYWxsb3dlZCkNCj4gPiBpbiBhbnkg Y2FzZXMuDQo+IA0KPiBBIGhhbmRzaGFrZSBpcyBub3Qgc3RyaWN0bHkgYWx3YXlzIHJlcXVpcmVk LCBhczoNCj4gDQo+IDEpIGl04oCZcyBwb3NzaWJsZSB0aGUgZGV2aWNlIGNvdWxkIGF1dG9tYXRp Y2FsbHkgZ2VuZXJhdGUgYSBDU1IgdXNpbmcgdGhlIHNhbWUNCj4gY2VydGlmaWNhdGUgaW5mb3Jt YXRpb24gYXMgcHJlc2VudCBpbiBpdHMgSURldklEIGNlcnRpZmljYXRlLiAgVGhpcyB3b3VsZCBh bGxvdw0KPiB0aGUgc2lnbmF0dXJlIG9uIHRoZSByZXN1bHRpbmcgTERldklEIHRvIGJlIGZyb20g dGhlIGRlcGxveW1lbnTigJlzIENBDQo+IGluZnJhc3RydWN0dXJlLCB3aGljaCBoYXMgdmFsdWUg aW4gYW5kIG9mIGl0c2VsZiwgYnV0IHRoZSBMRGV2SUQgd291bGQgbm90DQo+IGNvbnRhaW4gYW55 IG5ldy9kaWZmZXJlbnQvaW50ZXJlc3RpbmcgZmllbGRzLCBhbmQgaGVuY2UgbWlnaHQgaGF2ZSBs aW1pdGVkDQo+IGFwcGVhbC4NCj4gDQo+IDIpIGl04oCZcyBwb3NzaWJsZSB0aGF0IHRoZSBkZXZp Y2UgY291bGQgYXV0b21hdGljYWxseSBnZW5lcmF0ZSB1bmlxdWUga2V5cyBhbmQNCj4gYXNzb2Np YXRlZCBwMTAsIGNtYywgY21wIHN0cnVjdHVyZXMgKGkuZS4sIGV2ZXJ5IHBlcm11dGF0aW9uIG9m IGtleS1hbGdvcml0aG0NCj4gYW5kIHJlcXVlc3Qtc3RydWN0dXJlIHRoZSBkZXZpY2Ugc3VwcG9y dHMpLCBidXQgdGhpcyB3b3VsZCBiZSBleHBlbnNpdmUgb24NCj4gdGhlIGRldmljZSwgZXNwZWNp YWxseSB3aXRob3V0IGtub3dsZWRnZSBpZiB0aGUgZGVwbG95bWVudOKAmXMgaW5mcmFzdHJ1Y3R1 cmUNCj4gZXZlbiBjYXJlcyB0byBzZXQgYW4gTERldklEIG9uIHRoZSBkZXZpY2UuDQo+IA0KPiBG b3IgdGhlc2UgcmVhc29ucyB0aGUgYXV0aG9ycyBmZWx0IGl0IGJlc3QgdG8gaW50cm9kdWNlIHRo ZSBkaWFsb2cgcHJlc2VudGVkIGluDQo+IHRoZSBkcmFmdC4NCj4gDQoNCk9rYXksIEknbSB3b25k ZXJpbmcgd2hldGhlciBhIHNlbnRlbmNlIHRvIHRoYXQgZWZmZWN0IHdvdWxkIGJlIGhlbHBmdWws IHNpbmNlIHdoZW4gSSByZWFkIHRoZSBkcmFmdCwgbXkgaW1wcmVzc2lvbiB3YXMgdGhhdCBhIGhh bmRzaGFrZSB3YXMgYWx3YXlzIGV4cGVjdGVkLCBidXQgcGVyaGFwcyBJJ20gbWlzc2luZyBzb21l dGhpbmc/DQoNCg0KPiANCj4gDQo+ID4gMi4gU2VjdGlvbiAyLjI6DQo+ID4gICBBc3N1bWluZyB0 aGUgU1pUUC1zZXJ2ZXIgd2lzaGVzIHRvIHByb21wdCB0aGUgU1pUUC1jbGllbnQgdG8gcHJvdmlk ZQ0KPiA+ICAgYSBDU1IsIHRoZW4gaXQgd291bGQgcmVzcG9uZCB3aXRoIGFuIEhUVFAgNDAwIChC YWQgUmVxdWVzdCkgZXJyb3INCj4gPiAgIGNvZGU6DQo+ID4NCj4gPiBJIHdvbmRlciB3aGV0aGVy IHJldHVybmluZyBhIDQwMCAiQmFkIFJlcXVlc3QiIGVycm9yIGlzIHJlYWxseSB0aGUgYmVzdA0K PiByZXR1cm4gY29kZSwgaS5lLiwNCj4gPiBpdCB3YXNuJ3QgY2xlYXIgdG8gbWUgd2hldGhlciB0 aGlzIHJlcXVlc3RpbmcgdGhlIGNhcGFiaWx0aWllcyBpcyByZWFsbHkgYW4NCj4gZXJyb3IuDQo+ ID4gRGlkIHlvdSBjb25zaWRlciBwb3RlbnRpYWxseSB1c2luZyBvdGhlciByZXR1cm4gY29kZXM/ ICBQb3NzaWJseToNCj4gPiAgMzAwIE11bHRpcGxlIENob2ljZXMsDQo+ID4gIDQwMyBGb2JpZGRl biwNCj4gPiAgNDA2IE5vdCBBY2NlcHRhYmxlDQo+IA0KPiBJIGRpZCBiZWZvcmUgbG9vayBhdCBh bGwgdGhlIDR4eCBjb2Rlcy4gIEkgd2FzIGluaXRpYWxseSBkcmF3biB0byA0MTINCj4gUHJlY29u ZGl0aW9uIEZhaWxlZCwgYnV0IG5vdGVkIHRoYXQgaXQgaXMgc3BlY2lmaWMgdG8gSFRUUCByZXF1 ZXN0IGhlYWRlcg0KPiBmaWVsZHMuICAgQXMgZm9yIHRoZSBvdGhlcnMgeW91IG1lbnRpb24sIHRo ZSBzZW1hbnRpY3Mgb2YgNDAzIEZvcmJpZGRlbiBpcyB0aGF0DQo+IHRoZSByZXF1ZXN0IHNob3Vs ZCBub3QgYmUgcmVwZWF0ZWQsIHdoaWNoIGlzbuKAmXQgb3V0IGNhc2UsIGFuZCA0MDYgTm90DQo+ IEFjY2VwdGFibGUgcmVnYXJkcyB0aGUgdXNlIG9mIHRoZSBIVFRQIOKAnEFjY2VwdOKAnSBoZWFk ZXJzLCB3aGljaCBhcmVuJ3QgaW4NCj4gcGxheSBoZXJlIGVpdGhlci4gIFRoYXQgc2FpZCwgMzAw IE11bHRpcGxlIENob2ljZXMgZG9lcyBhcHBlYXIgdG8gYmUgYSBiZXR0ZXINCj4gaWYgbm90IHBl cmZlY3Qgb3B0aW9uLCBzbyBJIG1hZGUgdGhhdCBjaGFuZ2UgaW4gbXkgbG9jYWwgY29weS4NCj4g DQpBY2suDQoNCg0KPiANCj4gDQo+ID4gMy4gRG9lcyBpdCBtYWtlIHNlbnNlIHRvIHJlY29tbWVu ZCBhIGRlZmF1bHQgY2VydGlmaWNhdGUtcmVxdWVzdC1mb3JtYXQNCj4gdGhhdCBjbGllbnRzIHNo b3VsZA0KPiA+IHN1cHBvcnQsIG9yIGRvZXMgaXQgbWFrZSBzZW5zZSB0byBub3QgcHJpb3JpdGl6 ZSBhbnkgcGFydGljdWxhciBjZXJ0aWZpY2F0ZQ0KPiBmb3JtYXQsIGVmZmVjdGl2ZWx5DQo+ID4g cmVxdWlyaW5nIHRoYXQgYSBnZW5lcmljIHNlcnZlciBuZWVkcyB0byBzdXBwb3J0IHRoZW0gYWxs Pw0KPiANCj4gTm8gZGVmYXVsdCBmb3JtYXQgaXMgcG9zc2libGUsIGFzIGl04oCZcyBjb21wbGV0 ZWx5IGRlcGVuZGVudCBvbiB3aGF0IENBDQo+IGluZnJhc3RydWN0dXJlIHRoZSBwYXJ0aWN1bGFy IGRlcGxveW1lbnQgaGFzLg0KPiANCj4gVGhlIGltcGFjdCB0byBnZW5lcmljIHNlcnZlcnMgaXMg bWluaW1hbCBhcywgZm9yIHRoZSBtb3N0IHBhcnQsIHRoZXkgc2ltcGx5DQo+IHBhc3MgdGhlIHN0 cnVjdHVyZSB0byB0aGUgZGVwbG95bWVudOKAmXMgQ0EgYW5kIHN1YnNlcXVlbnRseSByZWxheSB0 aGUNCj4gcmVzcG9uc2Ugc3RydWN0dXJlIHRvIHRoZSBkZXZpY2UuICBPbmx5IGlmIHRoZSBTWlRQ LXNlcnZlciB3aXNoZXMgdG8gaW5zcGVjdA0KPiB0aGF0IGNvbnRlbnRzIHdvdWxkIGl0IHRoZW4g bmVlZCB0byBzdGVwIHVwIHRvIHVuZGVyc3RhbmRpbmcgYWxsIHRoZSBmb3JtYXRzLg0KPiANCkFj ay4NCg0KPiANCj4gPiA0LiBSZWZlcmVuY2VzLiAgUkZDIDM2ODggcHJvYmFibHkgc2hvdWxkIGJl IG5vcm1hdGl2ZSBmb3IgdGhlIFhNTA0KPiByZWdpc3RyeSwgbm90aW5nIHRoYXQNCj4gPiBSRkMg NjAyMCBpcyBub3JtYXRpdmVseSByZWZlcmVuY2VkLg0KPiANCj4gUmVhbGx5PyAgSSB0ZW5kIHRv IGRpc2FncmVlIGFzIEkgdGhvdWdodCB0aGUgbGl0bXVzIHRlc3QgZm9yIGlmIHNvbWV0aGluZyB3 ZXJlDQo+IG5vcm1hdGl2ZSB3YXMgaWYgaXQgaGFkIHRvIGJlIHVuZGVyc3Rvb2QgaW4gb3JkZXIg dG8gaW1wbGVtZW50IHRoZSBSRkMuDQoNCkkgZ3Vlc3MgdGhlIGxvZ2ljIGhlcmUgaXMgdGhhdCB5 b3UgbmVlZCB0byB1bmRlcnN0YW5kIFJGQyA2MDIwIHRvIHVuZGVyc3RhbmQgdGhlIHJlZ2lzdHJ5 IHRoYXQgaXMgaGF2aW5nIGVudHJpZXMgYWRkZWQgKGdpdmVuIHRoYXQgUkZDIDc5NTAgZG9lc24n dCBkZWZpbmUgdGhlIHJlZ2lzdHJ5KS4NCg0KQnV0LCBhcyBwZXIgYmVsb3csIEknbGwgY2hlY2sg d2l0aCB0aGUgSUVTRyBvbiB0aGlzIG9uZS4NCg0KPiANCj4gWW91IHJhaXNlIGFuIGludGVyZXN0 aW5nIHBvaW50IGFib3V0IFJGQyA2MDIwIGJlaW5nIE5vcm1hdGl2ZSwgYXMgSSBzZWUgdGhhdA0K PiBpdCBpcyBOT1Qgbm9ybWF0aXZlIGluIGF0IGxlYXN0IG9uZSBvZiBteSBvdGhlciBkcmFmdHMu ICBJIHRoaW5rIHRoYXQgaXQgaXMgYQ0KPiByZWFzb25hYmxlIHBvc2l0aW9uIHRoYXQsIGlmIHRo ZSBSRkMgNjAyMCByZWZlcmVuY2UgaXMgb25seSBwcmVzZW50IGluIHRoZQ0KPiBJQU5BIENvbnNp ZGVyYXRpb25zIHNlY3Rpb24sIHRoZW4gaXQgaXMgSU5GT1JNQVRJVkUgYXMgZmFyIGFzIHRoZSBk cmFmdCBhcyBhDQo+IHdob2xlIGdvZXMuICBUaG91Z2h0cz8NCg0KTGV0IG1lIGNoZWNrIHdpdGgg dGhlIElFU0cgYW5kIGdldCBiYWNrIHRvIHlvdSBvbiB0aGlzIG9uZS4gIEFsdGhvdWdoLCBwZXJo YXBzIHdvcnRoIG5vdGluZyB0aGF0IGJvdGggdGhlc2UgcmVmZXJlbmNlcyBhcmUgbm9ybWF0aXZl IGluIFJGQyA4MzQzIChhbmQgdGhleSBhcmUgb25seSByZWZlcmVuY2VkIGZyb20gdGhlIElBTkEg cmVnaXN0cnkgZW50cmllcykuDQoNCg0KPiANCj4gDQo+IA0KPiA+IE5pdHM6DQo+ID4NCj4gPiA1 Lg0KPiA+IEluIHRoZSBleGFtcGxlIGRhdGEsIHdvdWxkIGl0IGhlbHBmdWwgdG8gYWRkIGEgc2Vu dGVuY2UgdG8gZXhwbGFpbg0KPiA+ICAgICAgICAgICAgICAgImJhc2U2NGVuY29kZWR2YWx1ZTE9 IiwNCj4gPiAgICAgICAgICAgICAgICJiYXNlNjRlbmNvZGVkdmFsdWUyPSIsDQo+ID4gICAgICAg ICAgICAgICAiYmFzZTY0ZW5jb2RlZHZhbHVlMz0iDQo+ID4NCj4gPiBBY3R1YWxseSwgZ2l2ZW4g dGhpcyBjb252ZW50aW9uIGlzIHVzZWQgaW4gdmFyaW91cyBwbGFjZXMsIHRoZXJlIGlzIGEgY2hv aWNlIGFzDQo+IHRvIHdoZXRoZXINCj4gPiB0byBhZGQgYSBzZW50ZW5jZSB0byBlYWNoIGV4YW1w bGUsIG9yIHBlcmhhcHMgaW4gdGhlIGludHJvZHVjdGlvbi4NCj4gDQo+IEFkZGluZyBhIHNlbnRl bmNlIHRvIGVhY2ggZXhhbXBsZSB3b3VsZCBiZSBpZGVhbCwgYnV0IGEgdG9uIG9mIHdvcmssDQo+ IGVzcGVjaWFsbHkgY29uc2lkZXJpbmcgbXkgbmVlZGluZyB0byBwcm9wYWdhdGUgaXQgdG8gdGhl IHN1aXRlIG9mIGNsaWVudC1zZXJ2ZXINCj4gZHJhZnRzIGFzIHdlbGwuDQo+IA0KPiBBZGRpbmcg c29tZXRoaW5nIGxpa2UgdGhlIGZvbGxvd2luZyB0byB0aGUgSW50cm9kdWN0aW9uIHNlY3Rpb24g d291bGRu4oCZdCBiZQ0KPiB0b28gbXVjaCB3b3JrOg0KPiANCj4gMS4zLiAgQ29udmVudGlvbnMN Cj4gDQo+ICAgIFZhcmlvdXMgZXhhbXBsZXMgdXNlZCBpbiB0aGlzIGRvY3VtZW50IHVzZSBhIHBs YWNlaG9sZGVyDQo+ICAgIHZhbHVlIGZvciBiaW5hcnkgZGF0YSB0aGF0IGhhcyBiZWVuIGJhc2U2 NCBlbmNvZGVkIChlLmcuLA0KPiAgICAiYmFzZTY0ZW5jb2RlZGRhdGE9PeKAnCkuICBUaGlzIHBs YWNlaG9sZGVyIHZhbHVlIGlzIHVzZWQNCj4gICAgIGFzIHJlYWwgYmFzZTY0IGVuY29kZWQgc3Ry dWN0dXJlcyBhcmUgb2Z0ZW4gbWFueSBsaW5lcw0KPiAgICAgbG9uZyBhbmQgaGVuY2UgZGlzdHJh Y3RpbmcgdG8gdGhlIGV4YW1wbGUgYmVpbmcgcHJlc2VudGVkLg0KPiANCj4gVGhvdWdodHM/DQoN Ckxvb2tzIGdvb2QuDQoNCg0KPiANCj4gDQo+ID4gNi4NCj4gPiAzLjEuMy4gIFJlcGxheSBBdHRh Y2sgUHJvdGVjdGlvbg0KPiA+DQo+ID4gICBUaGlzIFJGQyBlbmFibGVzIGFuIFNaVFAtY2xpZW50 IHRvIGFubm91bmNlIGFuIGFiaWxpdHkgdG8gZ2VuZXJhdGUNCj4gPiAgIG5ldyBrZXkgdG8gdXNl IGZvciBpdHMgQ1NSLg0KPiA+DQo+ID4gImEgbmV3IGtleSINCj4gDQo+IEZpeGVkDQo+IA0KPiAN Cj4gPiA3LiBJbiBTZWN1cml0eSBDb25zaWRlcmF0aW9uczoNCj4gPiAgIEdlbmVyYXRpbmcgYSBu ZXcga2V5IGVhY2ggdGltZSBlbmFibGVzIHRoZSByYW5kb20gYnl0ZXMgdXNlZCB0bw0KPiA+ICAg Y3JlYXRlIHRoZSBrZXkgdG8gc2VydmUgdGhlIGR1YWwtcHVycG9zZSBvZiBhbHNvIGFjdGluZyBs aWtlIGENCj4gPiAgICJub25jZSIgdXNlZCBpbiBvdGhlciBtZWNoYW5pc21zIHRvIGRldGVjdCBy ZXBsYXkgYXR0YWNrcy4NCj4gPg0KPiA+IEkgd2Fzbid0IGNsZWFyIHRvIG1lIHdoYXQgdGhlIHR3 byBwdXJwb3NlcyBhcmUgaGVyZS4gIE9uZSBpcyBhY3RpbmcgbGlrZQ0KPiA+IGEgIm5vbmNlIiwg YnV0IHdoYXQgaXMgdGhlIG90aGVyIHB1cnBvc2U/DQo+IA0KPiA6bGF1Z2g6ICBUaGUgb3JpZ2lu YWwgZmlyc3QgcHVycG9zZSBpcywgb2YgY291cnNlLCB0byBnZW5lcmF0ZSBhIG5ldyBrZXkgYXQg YWxsLA0KPiBhcyBvcHBvc2VkIHRvIGVhY2ggdGltZS4gICBQbGVhc2UgcHJvdmlkZSBzdWdnZXN0 ZWQgdGV4dCBpZiB5b3Ugc3RpbGwgdGhpbmsgaXQNCj4gY2FuIGJlIGltcHJvdmVkLg0KDQpXaGVu IHlvdSBwdXQgaXQgdGhhdCB3YXksIGl0IGlzIGtpbmQgb2Ygb2J2aW91cyA7LSkNCg0KWW91IGNh biBlaXRoZXIgbGVhdmUgaXQgYXMgaXMsIG9yIHBlcmhhcHMgYSBzbWFsbCB0d2VhayAobW92aW5n IGFsc28pIG1pZ2h0IG1ha2UgaXQgY2xlYXJlcjoNCg0KICAgR2VuZXJhdGluZyBhIG5ldyBrZXkg ZWFjaCB0aW1lIGVuYWJsZXMgdGhlIHJhbmRvbSBieXRlcyB1c2VkIHRvDQogICBjcmVhdGUgdGhl IGtleSB0byBhbHNvIHNlcnZlIHRoZSBkdWFsLXB1cnBvc2Ugb2YgYWN0aW5nIGxpa2UgYQ0KICAg Im5vbmNlIiB1c2VkIGluIG90aGVyIG1lY2hhbmlzbXMgdG8gZGV0ZWN0IHJlcGxheSBhdHRhY2tz Lg0KDQoNCj4gDQo+IA0KPiANCj4gPiA4Lg0KPiA+ICAgSW4gdGhlIGNhc2UgdGhlIFNaVFAtY2xp ZW50IG11c3QgY2hvb3NlIGJldHdlZW4gdGhlIGFzeW1tZXRyaWMga2V5DQo+ID4gICBvcHRpb24g dmVyc3VzIGEgc2hhcmVkIHNlY3JldCBmb3Igb3JpZ2luIGF1dGhlbnRpY2F0aW9uLCBpdCBpcw0K PiA+ICAgUkVDT01NRU5ERUQgdGhhdCB0aGUgU1pUUC1jbGllbnQgY2hvb3NlIHVzaW5nIHRoZSBh c3ltbWV0cmljIGtleQ0KPiA+ICAgb3B0aW9uLg0KPiA+DQo+ID4gIkluIHRoZSBjYXNlIHRoZSIg PT4gIkluIHRoZSBjYXNlIHRoYXQgdGhlIC4uLg0KPiANCj4gRml4ZWQuDQo+IA0KPiANCj4gPiBU ZXJtaW5vbG9neToNCj4gPiBTaG91bGQgeW91IGFkZCBMRGV2SUQgb3IgSURldklEDQo+IA0KPiBN YXliZSwgYnV0IG5vdGUgdGhhdCB0aGlzIGRyYWZ0IChhcyB3aXRoIFJGQyA4NTcyKSBjYXJlZnVs bHkgcmVmZXJzIHRvIOKAnGlkZW50aXR5DQo+IGNlcnRpZmljYXRlc+KAnSwgb2Ygd2hpY2ggSUVF RSA4MDIuMUFSIERldklEcyBhcmUgbWVyZSBleGFtcGxlcyBvZiBzdWNoLCBidXQNCj4gYnkgbm8g bWVhbnMgdGhlIG9ubHkgcG9zc2liaWxpdHkuICAgSXTigJlzIHVuY2xlYXIgaWYgcHJvbW90aW5n IHN1Y2ggYW4gYW5jaWxsYXJ5DQo+IHJlZmVyZW5jZSB0byBhIHRvcC1sZXZlbCB0ZXJtIGlzIGFw cHJvcHJpYXRlLiAgQ3VycmVudGx5LCBhcyBJ4oCZbSBzdXJlIHlvdeKAmXJlDQo+IGF3YXJlLCB0 aGUgZHJhZnQgaGFzIGEgcmVmZXJlbmNlIChpLmUuLCBhbiA8eHJlZj4pIHdoZXJlIHRoZXNlIHZh bHVlcyBhcmUNCj4gdXNlZOKApmFkbWl0dGVkLCBsaWtlbHkgbW9yZSB0aW1lcyB0aGFuIG5lY2Vz c2FyeSwgc3VjaCB0aGF0IEkgd291bGRu4oCZdCBiZQ0KPiBzdXJwcmlzZWQgaWYgdGhlIGNvcHll ZGl0b3Igd2VyZSB0byBlbGltaW5hdGUgYWxsIGJ1dCB0aGUgZmlyc3QgcmVmZXJlbmNlcy4NCj4g VGhvdWdodHM/IFBsZWFzZSBhZHZpc2UuDQoNCk9rYXkuICBJJ20gaGFwcHkgZm9yIHlvdSB0byBs ZWF2ZSB0aGlzIGFzIGlzLCB0aGlzIGlzIHByZXR0eSBtaW5vci4NCg0KDQo+IA0KPiANCj4gPiBQ b3RlbnRpYWwgc3BlbGxpbmcgd2FybmluZ3M6DQo+ID4gZGVzY2VuZGVudA0KPiANCj4gRml4ZWQu DQo+IA0KPiANCj4gPiBHcmFtbWFyIFdhcm5pbmdzIChmcm9tIHRvb2wpOg0KPiA+IFNlY3Rpb246 IDIuMywgZHJhZnQgdGV4dDoNCj4gPiBUaGlzIG1vZHVsZSBhdWdtZW50cyBhbiBSUEMgZGVmaW5l ZCBpbiBbUkZDODU3Ml0sIHVzZXMgYSBkYXRhIHR5cGUNCj4gZGVmaW5lZCBpbiBbSS1ELmlldGYt bmV0Y29uZi1jcnlwdG8tdHlwZXNdLCBoYXMgYW4gbm9ybWF0aXZlIHJlZmVyZW5jZXMgdG8NCj4g W1JGQzI5ODZdIGFuZCBbSVRVLg0KPiA+IFdhcm5pbmc6ICBUaGUgcGx1cmFsIG5vdW4gInJlZmVy ZW5jZXMiIGNhbm5vdCBiZSB1c2VkIHdpdGggdGhlIGFydGljbGUNCj4gImFuIi4gRGlkIHlvdSBt ZWFuIGFuIG5vcm1hdGl2ZSByZWZlcmVuY2Ugb3Igbm9ybWF0aXZlIHJlZmVyZW5jZXM/DQo+ID4g U3VnZ2VzdGVkIGNoYW5nZTogICJhbiBub3JtYXRpdmUgcmVmZXJlbmNlIg0KPiANCj4gRml4ZWQu DQo+IA0KPiANCj4gPiBTZWN0aW9uOiAzLjEuNCwgZHJhZnQgdGV4dDoNCj4gPiBDb25zaXN0ZW50 IHdpdGggdGhlIHJlY29tbWVuZGF0aW9uIHByZXNlbnRlZCBpbiBTZWN0aW9uIDkuNiBvZg0KPiBb UkZDODU3Ml0sIFNaVFAtY2xpZW50cyBTSE9VTEQgTk9UIHBhc3NlZCB0aGUgImNzci1zdXBwb3J0 IiBpbnB1dA0KPiBwYXJhbWV0ZXIgdG8gYW4gdW50cnVzdGVkIFNaVFAtc2VydmVyLg0KPiA+IFdh cm5pbmc6ICBUaGUgbW9kYWwgdmVyYiAnU0hPVUxEJyByZXF1aXJlcyB0aGUgdmVyYidzIGJhc2Ug Zm9ybS4NCj4gPiBTdWdnZXN0ZWQgY2hhbmdlOiAgInBhc3MiDQo+IA0KPiBGaXhlZC4NCj4gDQo+ IA0KPiA+IFNlY3Rpb246IDMuMS41LCBkcmFmdCB0ZXh0Og0KPiA+IEFsbCBvZiB0aGUgY2VydGlm aWNhdGUgcmVxdWVzdCBmb3JtYXRzIGRlZmluZWQgaW4gdGhpcyBkb2N1bWVudCAoZS5nLiwgQ01D LA0KPiBDTVAsIGV0Yy4pLCBub3QgaW5jbHVkaW5nIGEgcmF3IFBLQ1MjMTAsIHN1cHBvcnQgb3Jp Z2luIGF1dGhlbnRpY2F0aW9uLg0KPiA+IFdhcm5pbmc6ICBDb25zaWRlciB1c2luZyBhbGwgdGhl Lg0KPiA+IFN1Z2dlc3RlZCBjaGFuZ2U6ICAiQWxsIHRoZSINCj4gDQo+IEZpeGVk4oCmYW5kIEkg bGVhcm5lZCBzb21ldGhpbmcgbmV3IDopDQoNCkkgdGhpbmsgdGhhdCAiQWxsIG9mIHRoZSIgaXMg YWxzbyB0ZWNobmljYWxseSB2YWxpZCwgYnV0IGxlc3MgY29tbW9uLiAgUGVyaGFwcyB0aGlzIHdh cm5pbmcgaXMgYSBiaXQgcGlja3kgLi4uDQoNCj4gDQo+IA0KPiA+IFNlY3Rpb246IDMuMS41LCBk cmFmdCB0ZXh0Og0KPiA+IFR5cGljYWxseSBvbmx5IG9uZSBwb3NzaWJsZSBvcmlnaW4gYXV0aGVu dGljYXRpb24gbWVjaGFuaXNtIGNhbiBwb3NzaWJseQ0KPiBiZSB1c2VkIGJ1dCwgaW4gdGhlIGNh c2UgdGhhdCB0aGUgU1pUUC1jbGllbnQgYXV0aGVudGljYXRlcyBpdHNlbGYgdXNpbmcgYm90aA0K PiBUTFMtbGV2ZWwgKGUuZy4sIElEZXZJRCkgYW5kIEhUVFAtbGV2ZWwgY3JlZGVudGlhbHMgKGUu Zy4sIEJhc2ljKSwgYXMgaXMgYWxsb3dlZA0KPiBieSBTZWN0aW9uIDUuMyBvZiBbUkZDODU3Ml0s IHRoZW4gdGhlIFNaVFAtY2xpZW50IG1heSBuZWVkIHRvIGNob29zZQ0KPiBiZXR3ZWVuIHRoZSB0 d28gb3B0aW9ucy4NCj4gPiBXYXJuaW5nOiAgRGlkIHlvdSBmb3JnZXQgYSBjb21tYSBhZnRlciBh IGNvbmp1bmN0aXZlL2xpbmtpbmcgYWR2ZXJiPw0KPiA+IFN1Z2dlc3RlZCBjaGFuZ2U6ICAiVHlw aWNhbGx5LCINCj4gDQo+IEZpeGVkLg0KPiANCj4gDQo+ID4gVGhhbmtzLA0KPiA+IFJvYg0KPiAN Cj4gSy4NCg0KVGhhbmtzLA0KUm9iDQoNCj4gDQoNCg== From nobody Mon Jun 21 13:22:37 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 41C993A17D1; Mon, 21 Jun 2021 13:22:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.299 X-Spam-Level: X-Spam-Status: No, score=-2.299 tagged_above=-999 required=5 tests=[RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OIdg_2G4Oou0; Mon, 21 Jun 2021 13:22:28 -0700 (PDT) Received: from mail.amsl.com (c8a.amsl.com [4.31.198.40]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 045DA3A17CC; Mon, 21 Jun 2021 13:22:27 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by c8a.amsl.com (Postfix) with ESMTP id 84AEE389F00; Mon, 21 Jun 2021 13:22:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com Received: from c8a.amsl.com ([127.0.0.1]) by localhost (c8a.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2J2Dtq3C7NsP; Mon, 21 Jun 2021 13:22:27 -0700 (PDT) Received: from [192.168.1.12] (cpe-76-95-228-63.socal.res.rr.com [76.95.228.63]) by c8a.amsl.com (Postfix) with ESMTPSA id 3522B389EFE; Mon, 21 Jun 2021 13:22:27 -0700 (PDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) From: Chris Smiley In-Reply-To: <20210621122110.8D0B5F4075F@rfc-editor.org> Date: Mon, 21 Jun 2021 13:22:26 -0700 Cc: sramanathan@google.com, RFC Errata System , Kent Watsen , ian.farrer@telekom.de, mikael.abrahamsson@t-systems.se, IESG , netconf@ietf.org Content-Transfer-Encoding: quoted-printable Message-Id: References: <20210621122110.8D0B5F4075F@rfc-editor.org> To: "Rob Wilton (rwilton)" X-Mailer: Apple Mail (2.3445.104.11) Archived-At: Subject: Re: [netconf] [Errata Verified] RFC8572 (6616) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jun 2021 20:22:32 -0000 Hi Rob, The section has been updated from 4.2 to 4.2.3. to match the original = errata report and RFC 8572. Please let me know if you have any objections. Thank you, RFC Editor/cs > On Jun 21, 2021, at 5:21 AM, RFC Errata System = wrote: >=20 > The following errata report has been verified for RFC8572, > "Secure Zero Touch Provisioning (SZTP)".=20 >=20 > -------------------------------------- > You may review the report below and at: > https://www.rfc-editor.org/errata/eid6616 >=20 > -------------------------------------- > Status: Verified > Type: Editorial >=20 > Reported by: Srihari Ramanathan > Date Reported: 2021-06-18 > Verified by: Rob Wilton (IESG) >=20 > Section: 4.2. >=20 > Original Text > ------------- > For device-independent queries, the three bootstrapping artifacts > defined in Section 3 are encoded into the SVR records as follows. >=20 > Artifact to SRV Record Mapping: >=20 > Conveyed Information: This artifact is not supported directly. > Instead, the essence of unsigned redirect information is = mapped > to SVR records per [RFC2782]. >=20 > Corrected Text > -------------- > For device-independent queries, the three bootstrapping artifacts > defined in Section 3 are encoded into the SRV records as follows. >=20 > Artifact to SRV Record Mapping: >=20 > Conveyed Information: This artifact is not supported directly. > Instead, the essence of unsigned redirect information is = mapped > to SRV records per [RFC2782]. >=20 > Notes > ----- > In both places "SVR" should obviously read "SRV". >=20 >=20 > -------------------------------------- > RFC8572 (draft-ietf-netconf-zerotouch-29) > -------------------------------------- > Title : Secure Zero Touch Provisioning (SZTP) > Publication Date : April 2019 > Author(s) : K. Watsen, I. Farrer, M. Abrahamsson > Category : PROPOSED STANDARD > Source : Network Configuration > Area : Operations and Management > Stream : IETF > Verifying Party : IESG >=20 From nobody Tue Jun 22 04:08:49 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A5EBA3A20B9; Tue, 22 Jun 2021 04:08:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.596 X-Spam-Level: X-Spam-Status: No, score=-9.596 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=h7QyIzB0; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=J3tpXe0P Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id O2xxc3owZGYV; Tue, 22 Jun 2021 04:08:42 -0700 (PDT) Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2B1343A20B7; Tue, 22 Jun 2021 04:08:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2808; q=dns/txt; s=iport; t=1624360122; x=1625569722; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=2Ls4uJNluXeOPARUMh7d9xZ0fGCyU5t1DNvYngdEm0Y=; b=h7QyIzB0JMNQ0QsnzoXLLHWU6sMa5xfgf3JdtBtzqYTzIVhYqQTbcN7H QW6ADRAoNF7et9fYtqVOXzzSVIKMtYmwFSZ4UiMNVDWoL3SmWZ6GcJl72 0G76j0borBoPMydPKGitwnI7xAzQ3IdjP5/sqczpUZB5Ojb5RF6R4n7fg 4=; IronPort-PHdr: =?us-ascii?q?A9a23=3AY8dn+h1bs5WoPgsmsmDPs1BlVkEcU/3cNwsO7?= =?us-ascii?q?twsjLcdOqig/pG3OkvZ6L0tiVLSRozU5rpCjPaeqKHvX2EMoPPj+HAPeZBBT?= =?us-ascii?q?VkJ3MMRmQFzCcueDQvwK/u5JyA/Fd5JAVli+XzzOENJGcH4MlvVpHD67TMbF?= =?us-ascii?q?hjlcwRvIeGgEY/JhMPx3Oe3qPXu?= IronPort-HdrOrdr: =?us-ascii?q?A9a23=3AlOlTxqsba39psUpEQHJm1TDO7skCyoMji2?= =?us-ascii?q?hC6mlwRA09TyXGraGTdaUguyMc1gx/ZJh5o6H+BEGBKUmskqKdkrNhQ4tKOz?= =?us-ascii?q?OW+FdATbsSrLcKpgeBJ8SQzJ8n6U4NSdkaNDS0NykHsS+Y2nj6Lz9D+qj8zE?= =?us-ascii?q?nAv463pB0BIXAIGsNdBkVCe3um+yZNNW977O8CZeKhD7181kOdkBosH6CGL0?= =?us-ascii?q?hAe9KGi8zAlZrgbxJDLQUg8hOygTSh76O/OwSE3z8FOgk/g4sKwCzgqUjU96?= =?us-ascii?q?+ju/a0xlv3zGnI9albn9Pn159qGNGMsM4IMT/h4zzYIbiJGofy+Azdktvfrm?= =?us-ascii?q?rCo+O8+ivI+P4Ds085S1vF5icFHTOQiwrGpUWSk2NwykGT0PARDAhKe/apw7?= =?us-ascii?q?gpLycwLyEbzY5BOGUh5RPEi3MfN2KyoA3to9fPTB1kjUyyvD4rlvMSlWVWVc?= =?us-ascii?q?8EZKZWtpF3xjIZLH4sJlOw1GkcKpglMCgc3ochTXqKK3TC+mV/yt2lWXo+Wh?= =?us-ascii?q?+AX0gZo8SQlzxbhmpwwUcUzNEW2i5ozuNzd7BUo+Dfdqh4nrBHScEbKap7Ge?= =?us-ascii?q?caWMOyTmjAWwjFPm6eKUnuUKsHJ3XOoZjq56hd3pDnRHXJ9up7pH3laiIXiY?= =?us-ascii?q?cfQTObNSS+5uwDzvmWehTJYd3E8LAo23FWgMyPeIbW?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0D7DQC6w9Fg/5NdJa1aHgEBCxIMQIF?= =?us-ascii?q?MC4FTUQd3WjcxC4gFA4U5iG8Dmh2BLoElA1QLAQEBDQEBNQoCBAEBhFACgm0?= =?us-ascii?q?CJTYHDgIEAQEBEgEBBQEBAQIBBgRxE4VoDYZFAQEBBBIoBgEBNwELBAIBCA4?= =?us-ascii?q?DBAEBAR4QMh0IAgQOBQgaglCCVQMvAQMLmkUBgToCih94gTSBAYIHAQEGBAS?= =?us-ascii?q?FHhiCMQmBOoJ7im8nHIFJRIEVQ4JgPoEEg0KDS4IugyBoU4EYB0wBJhQ1kSe?= =?us-ascii?q?qdgqDH4oUlAUSg16BQ4lmhjGQPLVRhEoCBAIEBQIOAQEGgVsBMzmBIHAVGoM?= =?us-ascii?q?KCUcXAg6OH4NwhRSFSnM4AgYKAQEDCXyKOAGBEAEB?= X-IronPort-AV: E=Sophos;i="5.83,291,1616457600"; d="scan'208";a="903979609" Received: from rcdn-core-11.cisco.com ([173.37.93.147]) by rcdn-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 22 Jun 2021 11:08:37 +0000 Received: from mail.cisco.com (xbe-rcd-005.cisco.com [173.37.102.20]) by rcdn-core-11.cisco.com (8.15.2/8.15.2) with ESMTPS id 15MB8a51005129 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 22 Jun 2021 11:08:37 GMT Received: from xfe-aln-004.cisco.com (173.37.135.124) by xbe-rcd-005.cisco.com (173.37.102.20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.792.15; Tue, 22 Jun 2021 06:08:27 -0500 Received: from xfe-rcd-003.cisco.com (173.37.227.251) by xfe-aln-004.cisco.com (173.37.135.124) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.792.15; Tue, 22 Jun 2021 06:08:26 -0500 Received: from NAM02-BN1-obe.outbound.protection.outlook.com (72.163.14.9) by xfe-rcd-003.cisco.com (173.37.227.251) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.792.15 via Frontend Transport; Tue, 22 Jun 2021 06:08:26 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=HMfI5/JsgA1qCmFLMW84pAlVBQYhPLXOyE84FY4GoFlmKVzuZykhAuaArwhrep1O8igVWp6p8PtmEExfbPbSYMbo/89ZqM5laO0sLyCr244YIWKqUi1jlc/b3vNJaTvfX+1GklYdQ6F8iP8WvXpd0NPFmW/qMzR3UVvh3iXWQ/3ZMfqzIkas6mj4aLznbBroFtdhjt37Z3uAh3Sm6GMtbHS+dXfkl9lJXb9lkgE/Bmy8RtdAhUtfBxQROgyumVKVaAuKr6iR5/pP6PhW7Opa9MJVpfubGEZsMAnkjUVI2Cq5YRbZtPG3uTZ0MKXotNJImetNIK7aV1/vihcVERfiyw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=XZdGMaAy7AjjwQT4CBwa/ZKoezGqEAzR2yRCGL3at8A=; b=LGmKQm9zGN8haShDY5XipfErhVDIaBZTFWXSFx9WSEJyCkZGzwxG/nJOpkqKM5fiFBXELPL5VH2ldRQPPqLPuVhdMsU8kSZ2jGySQyQWuzaAocSa17aVuwFkE7WPW4nDvvkuYjm5GlFTkOFdgBpd+FLmNv0woabGXvwNqIje4nB7ajubp58ajz6fK5TJmrNamySZaYfLYy/i7HcIcNSJjz0eGaPApGPbLqn1W4RAQfI/L2dC6G31M1c+htNeCtTw6LwhOcGF+LCr+802LfIIq5SROWhf0NJ+J68CXChINzM63qPuoHmXSeaZj/F20Erg+TigiCtLCNt4Nunn8PGpLw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=XZdGMaAy7AjjwQT4CBwa/ZKoezGqEAzR2yRCGL3at8A=; b=J3tpXe0P42Lfm9cpsqPN99/kYpOktCMecg0cpJVCFP2J7uSQgZ8gAASeqJQMeBF7oQW57q0Ul+AJtqvEEFID2RcM4F01AR0a/qmsktZfzpFsrYaEJcq//N2pm7ViX8HT3MxBaB6MuuXfeKbbtPjvnvKNJRCiHRQ+g7fYlJ+rPzw= Received: from DM4PR11MB5438.namprd11.prod.outlook.com (2603:10b6:5:399::21) by DM6PR11MB4235.namprd11.prod.outlook.com (2603:10b6:5:205::29) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4242.22; Tue, 22 Jun 2021 11:08:25 +0000 Received: from DM4PR11MB5438.namprd11.prod.outlook.com ([fe80::e14c:8880:1101:bb0c]) by DM4PR11MB5438.namprd11.prod.outlook.com ([fe80::e14c:8880:1101:bb0c%5]) with mapi id 15.20.4242.023; Tue, 22 Jun 2021 11:08:25 +0000 From: "Rob Wilton (rwilton)" To: Chris Smiley CC: "sramanathan@google.com" , RFC Errata System , Kent Watsen , "ian.farrer@telekom.de" , "mikael.abrahamsson@t-systems.se" , IESG , "netconf@ietf.org" Thread-Topic: [Errata Verified] RFC8572 (6616) Thread-Index: AQHXZpfwcZkRPfXczUedXqvcdKTN16se6R0AgAD3GuA= Date: Tue, 22 Jun 2021 11:08:25 +0000 Message-ID: References: <20210621122110.8D0B5F4075F@rfc-editor.org> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: amsl.com; dkim=none (message not signed) header.d=none;amsl.com; dmarc=none action=none header.from=cisco.com; x-originating-ip: [82.12.233.180] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 1052b7c6-f495-43af-ed1b-08d9356e0eb8 x-ms-traffictypediagnostic: DM6PR11MB4235: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DM4PR11MB5438.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(39860400002)(396003)(136003)(366004)(346002)(376002)(5660300002)(52536014)(8936002)(66476007)(64756008)(66556008)(66446008)(186003)(26005)(6916009)(66946007)(71200400001)(4326008)(122000001)(76116006)(966005)(53546011)(7696005)(478600001)(86362001)(8676002)(54906003)(15650500001)(33656002)(83380400001)(2906002)(38100700002)(9686003)(6506007)(55016002)(316002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?/N/ue9/wNqw5WLqdSzWE+/8H35hNptJ7JEPFiY4m+mb49ULjFCT0aCdtpuCj?= =?us-ascii?Q?sSWLu/VADHKkblvsqyNR60x/cFYVLDGb+lPYBuBmMQuswjVlLwncwFqQLbnR?= =?us-ascii?Q?gpkCfS9NegkE/np9LB1Tj861Dxc6R2Yh0oHwqIS4Y3tl0rf48xt/uGXvsMa0?= =?us-ascii?Q?PGeiDE4HL6Rja7o1xuVCNkDoMqQcxtIpD9dAHqy2YtLLB3exoRMyFpKNFiok?= =?us-ascii?Q?kM59HJd4XtGCzvztfch2he87DNiOKdPgA9dH0oVvjar+s9X707Q9gx/OYTSJ?= =?us-ascii?Q?6MRQaHPA4Qdwz3FS2F3X92MVNH+JACmqO3ekxfLjJ1IK6D6ZicoHrMa/gX6M?= =?us-ascii?Q?7Z+f07vYQrawSUIk2bVGEHALaIo6yOYTMz4FyuRRE1HjPGtubP9wQe12980V?= =?us-ascii?Q?ymZ6Y1yimD0SH7CetYeBqo2r7q1jZLCYwWbKKulDmTjtcBmHi/YSFnWECttU?= =?us-ascii?Q?+/Gw7yQZoFln/S1Z3+bEt2xzMISsfySGxGhlqmFhxabCWD5SSpJKMnRpJncT?= =?us-ascii?Q?KTqN4unJezTUtUidEFqJuBlLfAGViZrhvLqDOnxm1R0VMnzDXq0TUciNlQqT?= =?us-ascii?Q?IzRjiBUaPHWNPENc/Fgk1nTnoD8a/TWVI1bQmm5fLiSgMmtN19pSeKe69mZa?= =?us-ascii?Q?6YJ/+dnN1rCrHS69ywlhW+jy+fJJO3aSaemK+8rpGaJZ6Z/J5hSKAUKqagpK?= =?us-ascii?Q?NfX7j8v1r7xYRt4014/lMAIXJWMtHfGIc6/uMzytU28RFUV+xefaZn92Szhj?= =?us-ascii?Q?dmgJnKbBvmsngTz1LS/lTO+785fxuC1is9Y55GFQqHk54xDL6fE+rXsKOf4U?= =?us-ascii?Q?F40jUbz076w9CgAVuREMTZSP8eo2VT48Da7/wGnnjgxd+vNRZd9pwIntEgyt?= =?us-ascii?Q?jYp5SWRqjDo2fOZLIIhUHOXbmhuSpjSCl328Hkm/H0L7uZ2kq0E8QiYYCXe+?= =?us-ascii?Q?ZSaifCvdJ3Pkr9/JLwaK0TVa2KFiut0zKAvPHpCAaeWZpZ1i2dMf/Z/QFKem?= =?us-ascii?Q?l3Bx5NoMSLqgae5TNp30PZ25xeh6/bciGYFKWLSRadH9wHJbbLWwXrg23+WE?= =?us-ascii?Q?SvL4SXA5HqpLugexsyT1TiuZ0IWlIPGw1G2LuDX6tJpVv4kOeeD0ZnG8u1L3?= =?us-ascii?Q?px64r9gaZ/FopQzHC7B1YWmdsra+NRMG4nTfuSGB17/fFAuEaidbefBU1Obg?= =?us-ascii?Q?C2VKYx9Varp9ow0RDygGBZljHAiOYIPs10DHxM7bmx3nteySh5nHWLJlxWbD?= =?us-ascii?Q?c9k5TrYBuQ8qj+bcRKGWDcZ+Yb2ttkZM0ucElc39XNX8sVg7B6SXo+Q7MegX?= =?us-ascii?Q?dY3wnzplvqTt1jZbng86fL3v?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM4PR11MB5438.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 1052b7c6-f495-43af-ed1b-08d9356e0eb8 X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Jun 2021 11:08:25.8215 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: RPbbyfxZnobPAFJJ9JFQdRg0OzS1xvH2lmedU+dFlSY82ItcOM0yg1qJBpkRkDKN0kVIPawU/u9EXlGssAFwgw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR11MB4235 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.20, xbe-rcd-005.cisco.com X-Outbound-Node: rcdn-core-11.cisco.com Archived-At: Subject: Re: [netconf] [Errata Verified] RFC8572 (6616) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Jun 2021 11:08:48 -0000 Hi Chris, Yes, thanks. I hadn't intended to change this ... Regards, Rob > -----Original Message----- > From: Chris Smiley > Sent: 21 June 2021 21:22 > To: Rob Wilton (rwilton) > Cc: sramanathan@google.com; RFC Errata System editor.org>; Kent Watsen ; ian.farrer@telekom.de; > mikael.abrahamsson@t-systems.se; IESG ; netconf@ietf.org > Subject: Re: [Errata Verified] RFC8572 (6616) >=20 >=20 > Hi Rob, >=20 > The section has been updated from 4.2 to 4.2.3. to match the original err= ata > report and RFC 8572. > Please let me know if you have any objections. >=20 > Thank you, > RFC Editor/cs >=20 >=20 > > On Jun 21, 2021, at 5:21 AM, RFC Errata System > wrote: > > > > The following errata report has been verified for RFC8572, > > "Secure Zero Touch Provisioning (SZTP)". > > > > -------------------------------------- > > You may review the report below and at: > > https://www.rfc-editor.org/errata/eid6616 > > > > -------------------------------------- > > Status: Verified > > Type: Editorial > > > > Reported by: Srihari Ramanathan > > Date Reported: 2021-06-18 > > Verified by: Rob Wilton (IESG) > > > > Section: 4.2. > > > > Original Text > > ------------- > > For device-independent queries, the three bootstrapping artifacts > > defined in Section 3 are encoded into the SVR records as follows. > > > > Artifact to SRV Record Mapping: > > > > Conveyed Information: This artifact is not supported directly. > > Instead, the essence of unsigned redirect information is mapped > > to SVR records per [RFC2782]. > > > > Corrected Text > > -------------- > > For device-independent queries, the three bootstrapping artifacts > > defined in Section 3 are encoded into the SRV records as follows. > > > > Artifact to SRV Record Mapping: > > > > Conveyed Information: This artifact is not supported directly. > > Instead, the essence of unsigned redirect information is mapped > > to SRV records per [RFC2782]. > > > > Notes > > ----- > > In both places "SVR" should obviously read "SRV". > > > > > > -------------------------------------- > > RFC8572 (draft-ietf-netconf-zerotouch-29) > > -------------------------------------- > > Title : Secure Zero Touch Provisioning (SZTP) > > Publication Date : April 2019 > > Author(s) : K. Watsen, I. Farrer, M. Abrahamsson > > Category : PROPOSED STANDARD > > Source : Network Configuration > > Area : Operations and Management > > Stream : IETF > > Verifying Party : IESG > > From nobody Tue Jun 22 20:34:11 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A2D223A2683 for ; Tue, 22 Jun 2021 20:34:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PJhQ19_2uQ9k for ; Tue, 22 Jun 2021 20:34:04 -0700 (PDT) Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 95C943A2684 for ; Tue, 22 Jun 2021 20:34:04 -0700 (PDT) Received: from fraeml735-chm.china.huawei.com (unknown [172.18.147.201]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4G8pWy6skHz6H7NJ for ; Wed, 23 Jun 2021 11:23:58 +0800 (CST) Received: from dggeme768-chm.china.huawei.com (10.3.19.114) by fraeml735-chm.china.huawei.com (10.206.15.216) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.1.2176.2; Wed, 23 Jun 2021 05:34:00 +0200 Received: from dggeme770-chm.china.huawei.com (10.3.19.116) by dggeme768-chm.china.huawei.com (10.3.19.114) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2176.2; Wed, 23 Jun 2021 11:33:58 +0800 Received: from dggeme770-chm.china.huawei.com ([10.8.68.58]) by dggeme770-chm.china.huawei.com ([10.8.68.58]) with mapi id 15.01.2176.012; Wed, 23 Jun 2021 11:33:58 +0800 From: "maqiufang (A)" To: "netconf@ietf.org" Thread-Topic: [netconf] New Version Notification for draft-ma-netconf-with-system-02.txt Thread-Index: Addn4BzQX9yqceD0RQedB3f81JbKbw== Date: Wed, 23 Jun 2021 03:33:58 +0000 Message-ID: <371df6fb2860488a9ef14abb3b3667f4@huawei.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.136.123.93] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [netconf] New Version Notification for draft-ma-netconf-with-system-02.txt X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Jun 2021 03:34:10 -0000 SGksIGFsbDoNCg0Kdi0wMihodHRwczovL3d3dy5pZXRmLm9yZy9hcmNoaXZlL2lkL2RyYWZ0LW1h LW5ldGNvbmYtd2l0aC1zeXN0ZW0tMDIudHh0KSBpcyBwb3N0ZWQgdG8gcmVzb2x2ZSBzb21lIG9m IHRoZSBpc3N1ZXMgcmFpc2VkIGR1cmluZyBJRVRGMTEwIE5FVENPTkYgc2Vzc2lvbi4gDQpUaGUg bWFpbiBjaGFuZ2VzIGNvbXBhcmVkIHRvIHRoZSBwcmV2aW91cyB2ZXJzaW9uczoNCiAgIG8gIFJl bW92ZSBzeXN0ZW0gY29uZmlndXJhdGlvbiBkYXRhIHJldHJpZXZhbCBiZWhhdmlvciBpbiB0aGUg bWFpbiBib2R5IGFuZCBleGFtcGxlcyBpbiB0aGUgYXBwZW5kaXgNCiAgIG8gIENoYW5nZSBiYXNp Yy1tb2RlIHZhbHVlcyA6IHJlcG9ydC1hbGwtPmF1dG8tcG9wdWxhdGUsIGV4cGxpY2l0LT5uby1w b3B1bGF0ZQ0KICAgbyAgQ29uc2lkZXIgPGZhY3RvcnktZGVmYXVsdD4gdG8gd29yayB0b2dldGhl ciB3aXRoIDxzeXN0ZW0+DQpBIGZldyBpc3N1ZXMgYXJlIHN0aWxsIG9wZW4sIG9uZSBzZXNzaW9u IHdhcyBjcmVhdGVkIHRvIHRyYWNrIHRoZW0uIA0KQW55IGNvbW1lbnRzIGFuZCBzdWdnZXN0aW9u cyBhcmUgd2VsY29tZSENCg0KQmVzdCBSZWdhcmRzLA0KUWl1ZmFuZyBNYShvbiBiZWhhbGYgb2Yg YXV0aG9ycykNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IGludGVybmV0LWRy YWZ0c0BpZXRmLm9yZyBbbWFpbHRvOmludGVybmV0LWRyYWZ0c0BpZXRmLm9yZ10gDQpTZW50OiBX ZWRuZXNkYXksIEp1bmUgMjMsIDIwMjEgOTozMCBBTQ0KVG86IEZlbmdjaG9uZyAoZnJhbmspIDxm cmFuay5mZW5nY2hvbmdAaHVhd2VpLmNvbT47IENob25nZmVuZyBYaWUgPHhpZWNoZkBjaGluYXRl bGVjb20uY24+OyBGZW5nY2hvbmcgKGZyYW5rKSA8ZnJhbmsuZmVuZ2Nob25nQGh1YXdlaS5jb20+ OyBtYXFpdWZhbmcgKEEpIDxtYXFpdWZhbmcxQGh1YXdlaS5jb20+DQpTdWJqZWN0OiBOZXcgVmVy c2lvbiBOb3RpZmljYXRpb24gZm9yIGRyYWZ0LW1hLW5ldGNvbmYtd2l0aC1zeXN0ZW0tMDIudHh0 DQoNCg0KQSBuZXcgdmVyc2lvbiBvZiBJLUQsIGRyYWZ0LW1hLW5ldGNvbmYtd2l0aC1zeXN0ZW0t MDIudHh0DQpoYXMgYmVlbiBzdWNjZXNzZnVsbHkgc3VibWl0dGVkIGJ5IFFpdWZhbmcgTWEgYW5k IHBvc3RlZCB0byB0aGUgSUVURiByZXBvc2l0b3J5Lg0KDQpOYW1lOgkJZHJhZnQtbWEtbmV0Y29u Zi13aXRoLXN5c3RlbQ0KUmV2aXNpb246CTAyDQpUaXRsZToJCVN5c3RlbSBDb25maWd1cmF0aW9u IERhdGEgSGFuZGxpbmcgQmVoYXZpb3INCkRvY3VtZW50IGRhdGU6CTIwMjEtMDYtMjINCkdyb3Vw OgkJSW5kaXZpZHVhbCBTdWJtaXNzaW9uDQpQYWdlczoJCTEzDQpVUkw6ICAgICAgICAgICAgaHR0 cHM6Ly93d3cuaWV0Zi5vcmcvYXJjaGl2ZS9pZC9kcmFmdC1tYS1uZXRjb25mLXdpdGgtc3lzdGVt LTAyLnR4dA0KU3RhdHVzOiAgICAgICAgIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9j L2RyYWZ0LW1hLW5ldGNvbmYtd2l0aC1zeXN0ZW0vDQpIdG1saXplZDogICAgICAgaHR0cHM6Ly9k YXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9kcmFmdC1tYS1uZXRjb25mLXdpdGgtc3lzdGVt DQpEaWZmOiAgICAgICAgICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0 LW1hLW5ldGNvbmYtd2l0aC1zeXN0ZW0tMDINCg0KQWJzdHJhY3Q6DQogICBUaGlzIGRvY3VtZW50 IGRlZmluZXMgYW4gb3B0aW9uYWwgInN5c3RlbSIgZGF0YXN0b3JlIHRvIGFsbG93IGNsaWVudHMN CiAgIHBvcHVsYXRlIHRoZSBzeXN0ZW0gY29uZmlndXJhdGlvbiBpbnRvIHJ1bm5pbmcgZGF0YXN0 b3JlIGluIHRoZQ0KICAgZGV2aWNlLiAgSXQgYWxzbyBkZWZpbmVzIGEgY2FwYWJpbGl0eS1iYXNl ZCBleHRlbnNpb24gdG8gdGhlIE5FVENPTkYNCiAgIHByb3RvY29sIHRoYXQgaGVscHMgdGhlIE5F VENPTkYgY2xpZW50IGlkZW50aWZ5IGhvdyBzeXN0ZW0NCiAgIGNvbmZpZ3VyYXRpb24gYXJlIHBy b2Nlc3NlZCBieSB0aGUgc2VydmVyLg0KDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgDQoNCg0K VGhlIElFVEYgU2VjcmV0YXJpYXQNCg0KDQo= From nobody Tue Jun 22 20:43:49 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A34EE3A26E7 for ; Tue, 22 Jun 2021 20:43:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id snMh-vMW00Bc for ; Tue, 22 Jun 2021 20:43:44 -0700 (PDT) Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 111093A26E5 for ; Tue, 22 Jun 2021 20:43:44 -0700 (PDT) Received: from fraeml744-chm.china.huawei.com (unknown [172.18.147.226]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4G8ppB4gBVz6K6TK for ; Wed, 23 Jun 2021 11:36:18 +0800 (CST) Received: from dggeme768-chm.china.huawei.com (10.3.19.114) by fraeml744-chm.china.huawei.com (10.206.15.225) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.1.2176.2; Wed, 23 Jun 2021 05:43:41 +0200 Received: from dggeme770-chm.china.huawei.com (10.3.19.116) by dggeme768-chm.china.huawei.com (10.3.19.114) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2176.2; Wed, 23 Jun 2021 11:43:39 +0800 Received: from dggeme770-chm.china.huawei.com ([10.8.68.58]) by dggeme770-chm.china.huawei.com ([10.8.68.58]) with mapi id 15.01.2176.012; Wed, 23 Jun 2021 11:43:39 +0800 From: "maqiufang (A)" To: "netconf@ietf.org" Thread-Topic: [netconf] system configuration sync mechanism Thread-Index: Addn4K+zt1m84GV6QrqhDxVqt12upw== Date: Wed, 23 Jun 2021 03:43:39 +0000 Message-ID: <38c3aa805f1846d0ad0e5ac67a82cfa1@huawei.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.136.123.93] Content-Type: multipart/alternative; boundary="_000_38c3aa805f1846d0ad0e5ac67a82cfa1huaweicom_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [netconf] system configuration sync mechanism X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Jun 2021 03:43:49 -0000 --_000_38c3aa805f1846d0ad0e5ac67a82cfa1huaweicom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Dear all, One of the open issues of draft https://datatracker.ietf.org/doc/html/draft= -ma-netconf-with-system-02 is about how to synchronize the system configura= tion into . I think we could have 2 options. Option 1: Any update in will be synced up into automatic= ally PRO: o effective for the client: there is no need for the client to retr= ieve the referenced system configuration from and then copy i= t into manually. CON: o implementation complexity Option 2: To define a RPC operation to propagate with PRO: o client-driven: it totally depends on the client when and how to p= opulate . CON: o The client needs to : o spend energy to detect the update and operate the RPC every ti= me the client references the system configuration or the system configurati= on is in the when/must statement. o subscribe the update and copy it into whenever an up= date is detected. I incline to the view that this issue involves some kind of trade-off, whic= h is hard to distinguish the preference. Maybe both options can be reserved and differentiated by different modes, s= o that the server implementer may choose from. Any thoughts? Best Regards, Qiufang Ma --_000_38c3aa805f1846d0ad0e5ac67a82cfa1huaweicom_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Dear all,

One of the open issues of draft https://datatracker.ietf.org/doc/html/draft-ma-netconf-with-system-02 i= s about how to synchronize the system configuration into <running>.

I think we could have 2 options.

Option 1: Any update in <system> will be synce= d up into <running> automatically

  PRO:

       o  e=
ffective for the client: there is no need for the client to retrieve the re=
ferenced system configuration from <operational> and then copy it int=
o <running> manually.

  CON:

        &nbs= p;   o   implementation complexity

    

Option 2: To define a RPC operation to propagate <= ;running> with <system>

  PRO:

       o  client-= driven: it totally depends on the client when and how to populate <runni= ng>.

  CON:

       o  The cli= ent needs to :

o   spend energy to detect the <system> up= date and operate the RPC every time the client references the system config= uration or the system configuration is in the when/must statement.

o   subscribe the <system> update and copy= it into <running> whenever an update is detected.

 

I incline to the view that this issue involves some = kind of trade-off, which is hard to distinguish the preference.

Maybe both options can be reserved and differentiate= d by different modes, so that the server implementer may choose from.<= /o:p>

Any thoughts?

 

 

Best Regards,

Qiufang Ma

--_000_38c3aa805f1846d0ad0e5ac67a82cfa1huaweicom_-- From nobody Wed Jun 23 14:03:06 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DFE713A404D; Wed, 23 Jun 2021 14:03:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 2.875 X-Spam-Level: ** X-Spam-Status: No, score=2.875 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_HELO_FCRDNS=0.398, RCVD_IN_SBL_CSS=3.335, RCVD_IN_XBL=0.375, SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4dQIzNI1gEBp; Wed, 23 Jun 2021 14:02:56 -0700 (PDT) Received: from relay.sandelman.ca (minerva.sandelman.ca [IPv6:2a01:7e00::3d:b000]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E19B83A4053; Wed, 23 Jun 2021 14:02:54 -0700 (PDT) Received: from dooku.sandelman.ca (unknown [IPv6:2607:f0b0:f:40::146]) by relay.sandelman.ca (Postfix) with ESMTPS id 1BBBB1F455; Wed, 23 Jun 2021 21:02:53 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id 31AED1A01E3; Wed, 23 Jun 2021 17:02:52 -0400 (EDT) From: Michael Richardson To: Kent Watsen , "netconf\@ietf.org" , "anima\@ietf.org" cc: "Fries\, Steffen" , "Werner\, Thomas" In-reply-to: <0100017a2e9f69ee-5d037ce3-62dd-4825-922c-8a08b545d166-000000@email.amazonses.com> References: <3a31e33678484625b9f4f3810e673e56@siemens.com> <0100017a1b4d2e94-aeaaa06e-8dc0-4163-a747-692e72b0d75c-000000@email.amazonses.com> <8407.1624138175@localhost> <0100017a2e9f69ee-5d037ce3-62dd-4825-922c-8a08b545d166-000000@email.amazonses.com> Comments: In-reply-to Kent Watsen message dated "Mon, 21 Jun 2021 12:50:37 -0000." X-Mailer: MH-E 8.6+git; nmh 1.7.1; GNU Emacs 26.3 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Date: Wed, 23 Jun 2021 17:02:52 -0400 Message-ID: <11325.1624482172@dooku> Archived-At: Subject: Re: [netconf] [Anima] Reuse of SZTP-CSR YANG definition in BRSKI-AE X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Jun 2021 21:03:01 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Kent Watsen wrote: >> We really just want container csr-support, csr-generation, csr, ??? >>=20 >> Maybe we could chat about this more. >> We have a regular Thursday 9:30 EST design team. >>=20 >>>> The alternative would be to define an own module modeled in a simi= lar. >>=20 >>> You can do this. >>=20 >> I think that we can have some common mindshare here. > One option would be to move stuff into ietf-crypto-types=E2=80=A6as t= hat module > already defines a number of grouping statements for handy structures. > That said, these structures are not context-free=E2=80=A6they are ver= y much > entwined in a specific dialog that is rather specific to bootstrapping > processes. [FWIW, just adding =E2=80=9Ccmc=E2=80=9D and =E2=80=9Ccm= p" typedefs to > crypto-types, alongside the existing =E2=80=9Ccsr=E2=80=9D (e.g., =E2= =80=9Cp10=E2=80=9D) typedef, might > be a good thing] Understood. > Another option would be to move stuff into grouping statements, in the > same module, that are immediately. In theory this would have no impa= ct > to the on-the-wire format. However, it=E2=80=99s somewhat late in th= e process > to entertain this, as the draft is in the AD queue (AD-review was just > posted today) and no doubt we would dicker over how many groupings to > create and whether they should be put into another draft to whitewash > out the SZTP-stint. Is it proper to reset a NETCONF publication for > another WG? Rob? If we can do this at this point, that would I think, be best for all of us. If it's just at AD, then it hasn't gotten IESG reviews yet, and there could be many weeks of back and forth yet to go. The horse trading shouldn't take more than 30 minutes of real-time discussion, maybe way less.=20=20 =2D-=20 ] Never tell me the odds! | ipv6 mesh network= s [=20 ] Michael Richardson, Sandelman Software Works | network architect= [=20 ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on rails = [=20 =09 --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEERK+9HEcJHTJ9UqTMlUzhVv38QpAFAmDToXsACgkQlUzhVv38 QpAnLwf9HXKEHyaZ/6iJRBKpn19j1ghK9lyij9X0uhHhTy4wc57b0tJ1SBjVomfS PZhTJHQN2SWWu+X4v2RkWTyJtSzAHFLbEPwT06QeAj46LPV6dYfXD/uWHQr0uKLh fu8du6uoitzeAGKSJRCNdDyMf1XLH67brt+8E2rRGkmAsyPSOLaJFs5LnmWAXrRb NSMDcyPDO8myC1uexdxFgk0ZggTTyIT9unf+s0FCrs3D8qwNhHxL1nENcAo/hmY9 QX/Ca+YUVX33Xjh/7iIKfG3o+ZzGKl6ZDcToNWkAJyO8CskTcOTJSznYgX49ooq2 UVpg8q3v9CU4HPa6oDBQ08S25Dfacg== =QT9r -----END PGP SIGNATURE----- --=-=-=-- From nobody Thu Jun 24 08:26:27 2021 Return-Path: <0100017a3ea111a8-680c5610-bc55-4a82-b7fd-7715656f4924-000000@amazonses.watsen.net> X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 239053A2084; Thu, 24 Jun 2021 08:26:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NUJvU1v2Bseb; Thu, 24 Jun 2021 08:26:23 -0700 (PDT) Received: from a48-110.smtp-out.amazonses.com (a48-110.smtp-out.amazonses.com [54.240.48.110]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9C6943A2081; Thu, 24 Jun 2021 08:26:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1624548381; h=From:Message-Id:Content-Type:Mime-Version:Subject:Date:In-Reply-To:Cc:To:References:Feedback-ID; bh=AcjCDcKN6vdnpAEeXFvrw8JySJVAA+hwkiKqIs+3HNo=; b=IgzhG0DeV5danKU8xnJsBKDrPDFkEE988V+6MjU+vmNXtbHUL9+wXDU9gd5VI+Pu Vwt8Fq8EO+YCtxOk1tEjjuV4TDrQtfTdKDNGl/4yRLdWsPZSY/UIzGhJZ6Ml1GqGS6m uC90yCZWlRm2x7/uNjRph5Fo06T+EigYcCjPlw8A= From: Kent Watsen Message-ID: <0100017a3ea111a8-680c5610-bc55-4a82-b7fd-7715656f4924-000000@email.amazonses.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_2BD5D933-814A-4B32-A902-4288507CB4F1" Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.100.0.2.22\)) Date: Thu, 24 Jun 2021 15:26:21 +0000 In-Reply-To: Cc: "netconf@ietf.org" , "draft-ietf-netconf-sztp-csr@ietf.org" , "netconf-chairs@ietf.org" To: "Rob Wilton (rwilton)" References: <0100017a2f082e6a-1197e3c8-f8be-4d59-ba1c-8d39029a31fc-000000@email.amazonses.com> X-Mailer: Apple Mail (2.3654.100.0.2.22) Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES X-SES-Outgoing: 2021.06.24-54.240.48.110 Archived-At: Subject: Re: [netconf] AD review of draft-ietf-netconf-sztp-csr X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Jun 2021 15:26:26 -0000 --Apple-Mail=_2BD5D933-814A-4B32-A902-4288507CB4F1 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi Rob, Pruning down to just interesting bits=E2=80=A6 >>> My main questions really relate to REST semantics. >>>=20 >>> 1. It is always the case that the SZTP-client must do the handshake = with >>> the server (i.e, populating the csr-support container, then getting = a 400 >> error back, >>> before making the actual bootstrap request), or is it acceptable for = the >> SZTP-client >>> to guess on acceptable parameters, and send a single request? = Obviously, >> this cannot >>> work in all cases, but I want to check whether it is allowed (or = explicitly >> disallowed) >>> in any cases. >>=20 >> A handshake is not strictly always required, as: >>=20 >> 1) it=E2=80=99s possible the device could automatically generate a = CSR using the same >> certificate information as present in its IDevID certificate. This = would allow >> the signature on the resulting LDevID to be from the deployment=E2=80=99= s CA >> infrastructure, which has value in and of itself, but the LDevID = would not >> contain any new/different/interesting fields, and hence might have = limited >> appeal. >>=20 >> 2) it=E2=80=99s possible that the device could automatically generate = unique keys and >> associated p10, cmc, cmp structures (i.e., every permutation of = key-algorithm >> and request-structure the device supports), but this would be = expensive on >> the device, especially without knowledge if the deployment=E2=80=99s = infrastructure >> even cares to set an LDevID on the device. >>=20 >> For these reasons the authors felt it best to introduce the dialog = presented in >> the draft. >=20 > Okay, I'm wondering whether a sentence to that effect would be = helpful, since when I read the draft, my impression was that a handshake = was always expected, but perhaps I'm missing something? I had an offline chat with my co-authors. =20 As the YANG syntax stands, it=E2=80=99s possible for the SZTP-client to = proactively send a CSR in it=E2=80=99s first message, but the value is = so low that it=E2=80=99s almost a SHOULD NOT=E2=80=A6and, if we=E2=80=99d = caught it before, a =E2=80=9Cchoice=E2=80=9D statement may have been = used to make it impossible (in order to simplify implementations). That said, the first paragraph of the =E2=80=9Cdescription" statement = for "container csr=E2=80=9D states that a =E2=80=9Ccsr=E2=80=9D is sent = in response to a =E2=80=9Crequest-info=E2=80=9D structure from the = SZTP-server, which suggests that only a =E2=80=9Ccsr-support=E2=80=9D = node can be proactively sent in the first message. That only issue is = that it doesn=E2=80=99t state that it is *only sent* in response to a = =E2=80=9Crequest-info=E2=80=9D structure, leaving open a possibility = that the first message MAY include both the =E2=80=9Ccsr-support=E2=80=9D = *and* =E2=80=9Ccsr=E2=80=9D nodes. Looking at just the draft-text (i.e., Ignoring the YANG), Section 2.1 = says "In the order of their intended use=E2=80=9D, which is suggestive, = but the word =E2=80=9Cintended=E2=80=9D leaves open the possibility for = alternate uses. My recommendation is to 1) remove the word =E2=80=9Cintended=E2=80=9D, = 2) add a choice statement to the YANG around the =E2=80=9Ccsr-support=E2=80= =9D and =E2=80=9Ccsr=E2=80=9D nodes., and 3) strengthen the language in = the last paragraph on page 4 to be more like the YANG, indicating that = the =E2=80=9Ccsr=E2=80=9D node is sent only in response to a = =E2=80=9Crequest-info=E2=80=9D from the SZTP-server.=20 Thoughts? >>> 4. References. RFC 3688 probably should be normative for the XML >> registry, noting that >>> RFC 6020 is normatively referenced. >>=20 >> Really? I tend to disagree as I thought the litmus test for if = something were >> normative was if it had to be understood in order to implement the = RFC. >=20 > I guess the logic here is that you need to understand RFC 6020 to = understand the registry that is having entries added (given that RFC = 7950 doesn't define the registry). >=20 > But, as per below, I'll check with the IESG on this one. >=20 >>=20 >> You raise an interesting point about RFC 6020 being Normative, as I = see that >> it is NOT normative in at least one of my other drafts. I think that = it is a >> reasonable position that, if the RFC 6020 reference is only present = in the >> IANA Considerations section, then it is INFORMATIVE as far as the = draft as a >> whole goes. Thoughts? >=20 > Let me check with the IESG and get back to you on this one. Although, = perhaps worth noting that both these references are normative in RFC = 8343 (and they are only referenced from the IANA registry entries). Ack, I will wait for your response on this item. >>> Nits: >>>=20 >>> 5. >>> In the example data, would it helpful to add a sentence to explain >>> "base64encodedvalue1=3D", >>> "base64encodedvalue2=3D", >>> "base64encodedvalue3=3D" >>>=20 >>> Actually, given this convention is used in various places, there is = a choice as >> to whether >>> to add a sentence to each example, or perhaps in the introduction. >>=20 >> Adding a sentence to each example would be ideal, but a ton of work, >> especially considering my needing to propagate it to the suite of = client-server >> drafts as well. >>=20 >> Adding something like the following to the Introduction section = wouldn=E2=80=99t be >> too much work: >>=20 >> 1.3. Conventions >>=20 >> Various examples used in this document use a placeholder >> value for binary data that has been base64 encoded (e.g., >> "base64encodeddata=3D=3D=E2=80=9C). This placeholder value is used >> as real base64 encoded structures are often many lines >> long and hence distracting to the example being presented. >>=20 >> Thoughts? >=20 > Looks good. Applied. >>> 7. In Security Considerations: >>> Generating a new key each time enables the random bytes used to >>> create the key to serve the dual-purpose of also acting like a >>> "nonce" used in other mechanisms to detect replay attacks. >>>=20 >>> I wasn't clear to me what the two purposes are here. One is acting = like >>> a "nonce", but what is the other purpose? >>=20 >> :laugh: The original first purpose is, of course, to generate a new = key at all, >> as opposed to each time. Please provide suggested text if you still = think it >> can be improved. >=20 > When you put it that way, it is kind of obvious ;-) >=20 > You can either leave it as is, or perhaps a small tweak (moving also) = might make it clearer: >=20 > Generating a new key each time enables the random bytes used to > create the key to also serve the dual-purpose of acting like a > "nonce" used in other mechanisms to detect replay attacks. Applied. >>> Terminology: >>> Should you add LDevID or IDevID >>=20 >> Maybe, but note that this draft (as with RFC 8572) carefully refers = to =E2=80=9Cidentity >> certificates=E2=80=9D, of which IEEE 802.1AR DevIDs are mere examples = of such, but >> by no means the only possibility. It=E2=80=99s unclear if promoting = such an ancillary >> reference to a top-level term is appropriate. Currently, as I=E2=80=99= m sure you=E2=80=99re >> aware, the draft has a reference (i.e., an ) where these values = are >> used=E2=80=A6admitted, likely more times than necessary, such that I = wouldn=E2=80=99t be >> surprised if the copyeditor were to eliminate all but the first = references. >> Thoughts? Please advise. >=20 > Okay. I'm happy for you to leave this as is, this is pretty minor. Leaving as is for now, but on the fence and would welcome thoughts from = others. > Thanks, > Rob K. --Apple-Mail=_2BD5D933-814A-4B32-A902-4288507CB4F1 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hi = Rob,

Pruning down to = just interesting bits=E2=80=A6


My main questions really = relate to REST semantics.

1. It is always = the case that the SZTP-client must do the handshake with
the= server (i.e, populating the csr-support container, then getting a = 400
error back,
before making the actual bootstrap request), or = is it acceptable for the
SZTP-client
to guess on acceptable = parameters, and send a single request?  Obviously,
this cannot
work in all cases, but I want to check whether = it is allowed (or explicitly
disallowed)
in any cases.

A handshake is not strictly = always required, as:

1) it=E2=80=99s = possible the device could automatically generate a CSR using the same
certificate information as present in its IDevID certificate. =  This would allow
the signature on the resulting = LDevID to be from the deployment=E2=80=99s CA
infrastructure, which has value in and of itself, but the = LDevID would not
contain any new/different/interesting = fields, and hence might have limited
appeal.

2) it=E2=80=99s possible that the device could = automatically generate unique keys and
associated p10, = cmc, cmp structures (i.e., every permutation of key-algorithm
and request-structure the device supports), but this would be = expensive on
the device, especially without knowledge if = the deployment=E2=80=99s infrastructure
even cares to set = an LDevID on the device.

For these reasons = the authors felt it best to introduce the dialog presented in
the draft.

Okay, I'm wondering whether a sentence to that effect would = be helpful, since when I read the draft, my impression was that a = handshake was always expected, but perhaps I'm missing = something?

I = had an offline chat with my co-authors.   

As the YANG syntax stands, it=E2=80=99s possible = for the SZTP-client to proactively send a CSR in it=E2=80=99s first = message, but the value is so low that it=E2=80=99s almost a SHOULD = NOT=E2=80=A6and, if we=E2=80=99d caught it before, a =E2=80=9Cchoice=E2=80= =9D statement may have been used to make it impossible (in order to = simplify implementations).

That = said, the first paragraph of the =E2=80=9Cdescription" statement for = "container csr=E2=80=9D states that a =E2=80=9Ccsr=E2=80=9D is sent in = response to a =E2=80=9Crequest-info=E2=80=9D structure from the = SZTP-server, which suggests that only a =E2=80=9Ccsr-support=E2=80=9D = node can be proactively sent in the first message.  That only issue = is that it doesn=E2=80=99t state that it is *only sent* in response to a = =E2=80=9Crequest-info=E2=80=9D structure, leaving open a possibility = that the first message MAY include both the =E2=80=9Ccsr-support=E2=80=9D = *and* =E2=80=9Ccsr=E2=80=9D nodes.

Looking at just the draft-text (i.e., Ignoring the = YANG), Section 2.1 says "In the order of their intended use=E2=80=9D, = which is suggestive, but the word =E2=80=9Cintended=E2=80=9D leaves open = the possibility for alternate uses.

My= recommendation is to 1) remove the word =E2=80=9Cintended=E2=80=9D, = 2) add a choice statement to the YANG around the = =E2=80=9Ccsr-support=E2=80=9D and =E2=80=9Ccsr=E2=80=9D nodes., and = 3) strengthen the language in the last paragraph on page 4 = to be more like the YANG, indicating that the =E2=80=9Ccsr=E2=80=9D node = is sent only in response to a =E2=80=9Crequest-info=E2=80=9D from the = SZTP-server. 

Thoughts?



4. References.  RFC = 3688 probably should be normative for the XML
registry, noting that
RFC 6020 is normatively referenced.

Really?  I tend to disagree = as I thought the litmus test for if something were
normative= was if it had to be understood in order to implement the RFC.

I guess the logic here is that you need to understand RFC = 6020 to understand the registry that is having entries added (given that = RFC 7950 doesn't define the registry).

But, as per below, I'll check with the IESG on this = one.


You raise an interesting point about RFC 6020 being = Normative, as I see that
it is NOT normative in at least = one of my other drafts.  I think that it is a
reasonable position that, if the RFC 6020 reference is only = present in the
IANA Considerations section, then it is = INFORMATIVE as far as the draft as a
whole goes. =  Thoughts?

Let me check with the IESG and get back to you on this one. =  Although, perhaps worth noting that both these references are = normative in RFC 8343 (and they are only referenced from the IANA = registry entries).

Ack, I will wait for your response on this = item.



Nits:

5.
In the example data, would it helpful to add = a sentence to explain
          &nb= sp;  "base64encodedvalue1=3D",
          &nb= sp;  "base64encodedvalue2=3D",
          &nb= sp;  "base64encodedvalue3=3D"

Actually, given this convention is used in various places, = there is a choice as
to whether
to add a sentence to = each example, or perhaps in the introduction.

Adding a sentence to each example = would be ideal, but a ton of work,
especially considering = my needing to propagate it to the suite of client-server
drafts as well.

Adding something = like the following to the Introduction section wouldn=E2=80=99t be
too much work:

1.3. =  Conventions

  Various = examples used in this document use a placeholder
  value for binary data that has been base64 = encoded (e.g.,
  "base64encodeddata=3D=3D=E2=80=9C= ).  This placeholder value is used
   as= real base64 encoded structures are often many lines
   long and hence distracting to the example = being presented.

Thoughts?

Looks good.

Applied.



7. In Security = Considerations:
 Generating a new key each time = enables the random bytes used to
 create the key to = serve the dual-purpose of also acting like a
 "nonce" = used in other mechanisms to detect replay attacks.

I wasn't clear to me what the two purposes are here. =  One is acting like
a "nonce", but what is the other = purpose?

:laugh:  The = original first purpose is, of course, to generate a new key at all,
as opposed to each time.   Please provide suggested = text if you still think it
can be improved.

When you put it that way, it is kind of obvious ;-)

You can either leave it as is, = or perhaps a small tweak (moving also) might make it clearer:

  Generating a new key = each time enables the random bytes used to
  create the key to also serve the dual-purpose of = acting like a
  "nonce" used in other mechanisms to detect replay = attacks.

Applied.



Terminology:
Should you add LDevID or IDevID

Maybe, but note that this draft (as with RFC 8572) carefully = refers to =E2=80=9Cidentity
certificates=E2=80=9D, of = which IEEE 802.1AR DevIDs are mere examples of such, but
by = no means the only possibility.   It=E2=80=99s unclear if = promoting such an ancillary
reference to a top-level term = is appropriate.  Currently, as I=E2=80=99m sure you=E2=80=99re
aware, the draft has a reference (i.e., an <xref>) = where these values are
used=E2=80=A6admitted, likely more = times than necessary, such that I wouldn=E2=80=99t be
surprised if the copyeditor were to eliminate all but the = first references.
Thoughts? Please advise.

Okay.  I'm happy for you to leave this as is, this is = pretty minor.

Leaving = as is for now, but on the fence and would welcome thoughts from = others.



Thanks,
Rob

K.



= --Apple-Mail=_2BD5D933-814A-4B32-A902-4288507CB4F1-- From nobody Thu Jun 24 10:17:56 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F29BF3A2448; Thu, 24 Jun 2021 10:17:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.595 X-Spam-Level: X-Spam-Status: No, score=-9.595 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=OIVaNHfT; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=W0HHNlo1 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id O4Mz4Si2Y94K; Thu, 24 Jun 2021 10:17:49 -0700 (PDT) Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E2A3C3A2449; Thu, 24 Jun 2021 10:17:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=44188; q=dns/txt; s=iport; t=1624555069; x=1625764669; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=X2GD4MhJ7p9vSPohr9lxs3oW6WKpEruT7pzbjCrcF4g=; b=OIVaNHfT7rgCiNHV/RD6IKdvuraraWOawt2v5vp3BddbxuhsNiyDNsFC DEaG+WcXlWQEIEqDFzApwVXpWlZkFF0i8tZqY37x7HhkQNy2HXOWeT7jZ YOeYkfXqyjxhdVEodJ+6UBSaaMdD6iefuum4wHArSSDKB62kJQUalhU/n g=; X-IPAS-Result: =?us-ascii?q?A0AEAwD6vNRgl49dJa1RCR4BAQsSDIIMC4EjMCMuflo3M?= =?us-ascii?q?QuEPYNIA4U5iHgDmh2CUwNUCwEBAQ0BAT8CBAEBhFICF4JYAiU3Bg4CBAEBA?= =?us-ascii?q?QEDAgMBAQEBBQEBBQEBAQIBBgQUAQEBAQEBAQFohTsFKA2GRQEBAQEDEhEKE?= =?us-ascii?q?wEBNwEPAgEIEQQBASEBCQICAjAdCAEBBA4FCBqCTwGBflcDLwEDmwUBgToCi?= =?us-ascii?q?h96gTKBAYIHAQEGBASFLBiCMQmBOoJ7hAwBAYZhJxyBSUSBFUOCYD6EGAMRG?= =?us-ascii?q?oMVNoIugjY2ByYFAQJiBBQvMA8gQgdBBQYYBw8ZBkORDoNBiBiNJZIECoMfk?= =?us-ascii?q?UiMWhKDX4srhjGQPLMzghMNgVuDAwICAgIEBQIOAQEGgWojgVtwFYMkUBcCD?= =?us-ascii?q?olJhFYJAw0Jg06KXnM4AgYBCQEBAwl8iFKBNgGBEAEB?= IronPort-PHdr: A9a23:KSxSnBI+5NRnnKULhNmcuXkyDhhOgF28FhEc9oEqjfRIf7jwt5jhP UmK4/JrgReJWIjA8PtLhqLQtLyoQm0P55uN8RVgOJxBXhMIk4MaygonBsPWFkTnN/PsKSo3A JcKWFps5XruN09TFY73bEHTpXvn6zkUF13/OAN5K/6zFJTVipG81vu5/NvYZAAb7Ac= IronPort-HdrOrdr: A9a23:2tu3IaFchD833j/upLqFbpHXdLJyesId70hD6qkvc31om52j+f xGws516fatskdvZJkh8erwX5VoMkmsi6KdgLNhfItKOTOHhILGFvAY0WKP+UyEJ8S6zJ8g6U 4CSdk/NDSTNykBsS+S2mDReLxMrKjlgcKVbKXlvgpQpGpRGsddBnJCe36m+zpNNXB77PQCZf 6hz/sCgwDlVWUcb8y9CHVAdfPEvcf3mJXvZgNDLwI76SGV5AnYq4LSIly95FMzQjlPybAt/S zuiAri/JiutPm911v1y3LT1ZJLg9Hso+EzRvBky/JlbwkEuDzYI7iJaIfy+gzdZ9vfsWrCpe O85yvI+f4Ds085MFvF+icFkDOQoQrGo0WSuWNwx0GT+/AQgFkBepZ8bUUzSGqF16NohqAO7I tbm22erJZZFhXGgWD04MXJTQhjkg6urWMlivN7tQ0TbWIyUs4bkWUkxjIeLH7AJlON1Kk3VO 11SM3M7vdfdl2XK3jfo2l02dSpGnA+BA2PTEQOstGcl2E+pgE382IIgMgE2nsQ/pM0TJdJo+ zCL6RzjblLCssbd7h0CusNSda+TmbNXRXPOmSPJkmPLtBKB5sMke++3FwR3pDlRHUl9upHpH 3xaiIQiYdpQTOaNSSn5uw9zvniehTOYQjQ X-IronPort-Anti-Spam-Filtered: true X-IronPort-AV: E=Sophos;i="5.83,296,1616457600"; d="scan'208,217";a="706009320" Received: from rcdn-core-7.cisco.com ([173.37.93.143]) by alln-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 24 Jun 2021 17:17:47 +0000 Received: from mail.cisco.com (xbe-aln-001.cisco.com [173.36.7.16]) by rcdn-core-7.cisco.com (8.15.2/8.15.2) with ESMTPS id 15OHHj70014162 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 24 Jun 2021 17:17:46 GMT Received: from xhs-rtp-001.cisco.com (64.101.210.228) by xbe-aln-001.cisco.com (173.36.7.16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.2.792.15; Thu, 24 Jun 2021 12:17:46 -0500 Received: from xfe-rcd-001.cisco.com (173.37.227.249) by xhs-rtp-001.cisco.com (64.101.210.228) with Microsoft SMTP Server (TLS) id 15.0.1497.18; Thu, 24 Jun 2021 13:17:44 -0400 Received: from NAM11-CO1-obe.outbound.protection.outlook.com (72.163.14.9) by xfe-rcd-001.cisco.com (173.37.227.249) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.792.15 via Frontend Transport; Thu, 24 Jun 2021 12:17:44 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=dAKiuNfSYYovn2zWFGnnr1L9jJ0yUH4LK9U5jwdgJoYJplKnF2gl4wLwXeWFiiaX0TFr3PdZMxD6pYecHSodZYL01t9R022gPMjpZMFfki1KKn4CkdZ4kntnmOb7YQ4xfeN6VINA4COgD64KnhJEj72d371sXXtZwW3Y6e9sG/UdN5eQlsjbStN2J8newEHw1phgQJLarSEuCAkEKdZTjf07YLZvUS3FDE/OuLHO8MHlUSRhIRA/rVr/KlM+CV37nWjceyOoJ+5x4MYoQwjfjiNdGzjhTU6E4aeU08wY0CC4OfzUgI5mc0CX+SShfqieKRRQ5I6P72KS+pFPvzC2Mg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=X2GD4MhJ7p9vSPohr9lxs3oW6WKpEruT7pzbjCrcF4g=; b=F3ucUC9f4vw20AnTBzX4nW+fM6ip2CtpqT00XOr3jtHEaQWvYIPg9FDsT1E3RUPVru2l1biGiLN0XhtyYk7Fwpc833eXjX/N/7qku1A8u3N/jw1FTWh6HOcfrdK66d7R53iJsivCUqGUhcXtdoS34aiTs4efJVl+HFbaeXt0JoXLHjVOEElF0M70QjUtX5vqGvuJqkqjCWKKwBwNlxOjAS6uR64lywHLN6bVmyfDwJDXdhUdQJtQPuBb4m8DEs77U3F13i7Onp+l6h5taeVBSZF4FoaQz0GNftUwVSMFBF0Ureucxj9Usm5cqdc4OqDZPnGde7pD0vK5wNbxLTR+lQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=X2GD4MhJ7p9vSPohr9lxs3oW6WKpEruT7pzbjCrcF4g=; b=W0HHNlo11K0ZBVhEnka9VjHpW/Ee0cApWGLvJcMBxTBntyLud7HzkhGomMo4gpPVlQy7z5qp4GkD5zfg3rzPJhdA8/CV5u0eek9OROhGocIO/v8pZ1BzTck3TOyRwZ2bRU9ZowVnInbsSwO4OdVdcR85kIKy4yuf3oPcWsq5Czo= Received: from DM4PR11MB5438.namprd11.prod.outlook.com (2603:10b6:5:399::21) by DM6PR11MB3898.namprd11.prod.outlook.com (2603:10b6:5:19f::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4264.18; Thu, 24 Jun 2021 17:17:43 +0000 Received: from DM4PR11MB5438.namprd11.prod.outlook.com ([fe80::e14c:8880:1101:bb0c]) by DM4PR11MB5438.namprd11.prod.outlook.com ([fe80::e14c:8880:1101:bb0c%7]) with mapi id 15.20.4264.020; Thu, 24 Jun 2021 17:17:43 +0000 From: "Rob Wilton (rwilton)" To: Kent Watsen CC: "netconf@ietf.org" , "draft-ietf-netconf-sztp-csr@ietf.org" , "netconf-chairs@ietf.org" Thread-Topic: AD review of draft-ietf-netconf-sztp-csr Thread-Index: Addmei+76OsPA+grSaqUN2qOgkG4uAAMdT6AAAAewWAAmDJOgAABKWhQ Date: Thu, 24 Jun 2021 17:17:43 +0000 Message-ID: References: <0100017a2f082e6a-1197e3c8-f8be-4d59-ba1c-8d39029a31fc-000000@email.amazonses.com> <0100017a3ea111a8-680c5610-bc55-4a82-b7fd-7715656f4924-000000@email.amazonses.com> In-Reply-To: <0100017a3ea111a8-680c5610-bc55-4a82-b7fd-7715656f4924-000000@email.amazonses.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: watsen.net; dkim=none (message not signed) header.d=none;watsen.net; dmarc=none action=none header.from=cisco.com; x-originating-ip: [82.12.233.180] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 8973df9a-c846-4cf4-52d8-08d93733fa57 x-ms-traffictypediagnostic: DM6PR11MB3898: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DM4PR11MB5438.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(136003)(396003)(39860400002)(366004)(376002)(346002)(52536014)(71200400001)(9686003)(316002)(5660300002)(186003)(122000001)(7696005)(478600001)(86362001)(38100700002)(8676002)(4326008)(26005)(33656002)(55016002)(76116006)(54906003)(8936002)(66556008)(64756008)(66476007)(66946007)(2906002)(9326002)(83380400001)(66446008)(6506007)(53546011); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?RDhQcjh3d2pHRis4SGFWc1dqUGwxenhROVdVVXZHRnNJd29QTFIwdG96aXg3?= =?utf-8?B?UEd4ZkNOSm0zT1ZjZGVBTXEvQmpReVg5R2VyTVlBYjFpeTFDRHRvUkttbWZx?= =?utf-8?B?TGdSNzBVTDlhYnRkMFJtOU1BVTFvcTRZcVdhaitBOTVsQXJEaHIyRnY5SENa?= =?utf-8?B?bTBWY3VubUtQKzRaNnNyKzQ5ZkZKTE1CZ0VheHdXQUFWVHZFQ21BWnc3ZjFO?= =?utf-8?B?VXB2Wmp4ejl3NVh4RW9iaDNQcitXQ1RDTitBSjBPa3dMQWdia3ZDSVZoMmdr?= =?utf-8?B?Ykx1ZmJZVUlrUFV3ckhZa0hiNXRHQ2JJbnJWSnR4M1pzV0FmTkkwTWFaTXVh?= =?utf-8?B?czlRWUEzNjBxN1lMYXhyZUZkYWRJMmFQYjdxZDc1OG8rVG1LRXpGS25TSm9Z?= =?utf-8?B?eTArcnV3UFlQNWx6eVowLzdVOXdUaUxTYWhVNmN6YlhOcW1Xd1VOQmh4L0hW?= =?utf-8?B?TVRYd3F5U2N2ZE9RaUNha3MzZkpLSmt3bjFadXVLSDFDN2k2MHkzVUtoL0Nr?= =?utf-8?B?eFFhVkl2eGVDb0M3UStSdFVDYjR2Q0pDS3ZvK3h6L3RlS0RyZFFYNUR4MzNy?= =?utf-8?B?OGdJWGIvaUM4VjMxQnFKdnQwZUdycVVGaU5Fd0VWSUtEd1ZORjJiQmJDNkRQ?= =?utf-8?B?Wlg3UmlmbnViV2M3RFUwZ0VuV2pIcE41WkNTcHZYemhvZERUampMaGlBNlc2?= =?utf-8?B?WCtkSjAwbjF1R3FKa3g0Y0hTa29QQU9yd2dxR0twTm1wcVRZd3FBcVB5alAv?= =?utf-8?B?OC9xQkJaSFhzMDlYb1RxQWk5TUZOUmZweW4vaDcwSFd2M1g5T3VsSmphUG56?= =?utf-8?B?OGlHYng4RHBKOFJ6bGwvWDJMdi9ISmJ0aGxWK3c0ejVQQWszSmk3TWpqTWxE?= =?utf-8?B?Mk1JN1I0QVRTYy9oUzFYdk5UOFlWWVFpQjFpd1c4bmU4SlpsRFQ1dUR3OG8z?= =?utf-8?B?bWxtN0lGWkYzeTVHU29vbVRIWWpCQXpvSmNNSXJQblN0M2trUnM1L2tzMWox?= =?utf-8?B?VUdxbHM0TUp2STRxTi85UlBLMkFQQXl4czlsTFN3d2NxKzhPR3NFWVdUSUpZ?= =?utf-8?B?RnpXbVJHendaNkdXaTd6bmozMVBuT3g4UVU1ZHk1elV3OHlPSFFEYWpOQXNP?= =?utf-8?B?VGtLOFNOQWNNQ2lSOTJWSy8rencwUjVkTHUrQjVmcVVzdDVvakthMkp3bDJj?= =?utf-8?B?bFdFNzFGekRScFA3dms1R1NCbFV3SHR4K05zV09EbkhGamFUMkViMXozTE5x?= =?utf-8?B?SDZwcW0rZEFycmoybjJueWNkRm0xSXJRbzRob3gyemV4czJBWUFWdnFiVFVs?= =?utf-8?B?QVJuUUhKalFDYm1hS1EwaDVMdllXUW1WV2ZlQUhJVUJRTjJRV1F3KzR6ZFpn?= =?utf-8?B?K1FjcDNqTmNNTkg3U0Yza0diSnVyZVcvQit5SXdUdm4wTWMzclYrYmpzeWtV?= =?utf-8?B?Sk9OeDd5OWptbjhGb2JIUm1DdWNpcGd0a1BBN0NyamppaUV2eHBrQklKSncw?= =?utf-8?B?NStXM05CMmt4OExoT29NZ3QzOFdPNjh3Q2JtVVBYNWJwd2NTOWZsanRSaGNO?= =?utf-8?B?WFB6QVptR3ZGb1VmcmRKN2ljL1dtQ09uYmk1RC9yOEpkWFhRd0hXK0NSeDZ6?= =?utf-8?B?aEFmaFRzempNT2FXVHBzNXV0dFZYMFZDM3dMVWgrMmxncFdmaWJ3TTRSbVVN?= =?utf-8?B?Y2JWYlB3bmpuNFYxNGlRYkIreXQ5UFkvVlNmZVZwMjhKcEJYcW5NcnVBVDJW?= =?utf-8?Q?a1AvrfQQPFvaMB5InTxVMmm/zGvb6khf8LSxbTh?= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_DM4PR11MB54383EB098E3344A85A2DAA5B5079DM4PR11MB5438namp_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM4PR11MB5438.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 8973df9a-c846-4cf4-52d8-08d93733fa57 X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Jun 2021 17:17:43.1068 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: mLtiiXst9oqmQrrKCw2lG1I08/yBIJsM+GwDa92cqnsl+1nhkmsAWCNvM/w16vlZjveGW6vc2r2dQye5QSLA/g== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR11MB3898 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.16, xbe-aln-001.cisco.com X-Outbound-Node: rcdn-core-7.cisco.com Archived-At: Subject: Re: [netconf] AD review of draft-ietf-netconf-sztp-csr X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Jun 2021 17:17:54 -0000 --_000_DM4PR11MB54383EB098E3344A85A2DAA5B5079DM4PR11MB5438namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgS2VudCwNCg0KRnJvbTogS2VudCBXYXRzZW4gPGtlbnQraWV0ZkB3YXRzZW4ubmV0Pg0KU2Vu dDogMjQgSnVuZSAyMDIxIDE2OjI2DQpUbzogUm9iIFdpbHRvbiAocndpbHRvbikgPHJ3aWx0b25A Y2lzY28uY29tPg0KQ2M6IG5ldGNvbmZAaWV0Zi5vcmc7IGRyYWZ0LWlldGYtbmV0Y29uZi1zenRw LWNzckBpZXRmLm9yZzsgbmV0Y29uZi1jaGFpcnNAaWV0Zi5vcmcNClN1YmplY3Q6IFJlOiBBRCBy ZXZpZXcgb2YgZHJhZnQtaWV0Zi1uZXRjb25mLXN6dHAtY3NyDQoNCkhpIFJvYiwNCg0KUHJ1bmlu ZyBkb3duIHRvIGp1c3QgaW50ZXJlc3RpbmcgYml0c+KApg0KDQoNCg0KTXkgbWFpbiBxdWVzdGlv bnMgcmVhbGx5IHJlbGF0ZSB0byBSRVNUIHNlbWFudGljcy4NCg0KMS4gSXQgaXMgYWx3YXlzIHRo ZSBjYXNlIHRoYXQgdGhlIFNaVFAtY2xpZW50IG11c3QgZG8gdGhlIGhhbmRzaGFrZSB3aXRoDQp0 aGUgc2VydmVyIChpLmUsIHBvcHVsYXRpbmcgdGhlIGNzci1zdXBwb3J0IGNvbnRhaW5lciwgdGhl biBnZXR0aW5nIGEgNDAwDQplcnJvciBiYWNrLA0KDQpiZWZvcmUgbWFraW5nIHRoZSBhY3R1YWwg Ym9vdHN0cmFwIHJlcXVlc3QpLCBvciBpcyBpdCBhY2NlcHRhYmxlIGZvciB0aGUNClNaVFAtY2xp ZW50DQoNCnRvIGd1ZXNzIG9uIGFjY2VwdGFibGUgcGFyYW1ldGVycywgYW5kIHNlbmQgYSBzaW5n bGUgcmVxdWVzdD8gIE9idmlvdXNseSwNCnRoaXMgY2Fubm90DQoNCndvcmsgaW4gYWxsIGNhc2Vz LCBidXQgSSB3YW50IHRvIGNoZWNrIHdoZXRoZXIgaXQgaXMgYWxsb3dlZCAob3IgZXhwbGljaXRs eQ0KZGlzYWxsb3dlZCkNCg0KaW4gYW55IGNhc2VzLg0KDQpBIGhhbmRzaGFrZSBpcyBub3Qgc3Ry aWN0bHkgYWx3YXlzIHJlcXVpcmVkLCBhczoNCg0KMSkgaXTigJlzIHBvc3NpYmxlIHRoZSBkZXZp Y2UgY291bGQgYXV0b21hdGljYWxseSBnZW5lcmF0ZSBhIENTUiB1c2luZyB0aGUgc2FtZQ0KY2Vy dGlmaWNhdGUgaW5mb3JtYXRpb24gYXMgcHJlc2VudCBpbiBpdHMgSURldklEIGNlcnRpZmljYXRl LiAgVGhpcyB3b3VsZCBhbGxvdw0KdGhlIHNpZ25hdHVyZSBvbiB0aGUgcmVzdWx0aW5nIExEZXZJ RCB0byBiZSBmcm9tIHRoZSBkZXBsb3ltZW504oCZcyBDQQ0KaW5mcmFzdHJ1Y3R1cmUsIHdoaWNo IGhhcyB2YWx1ZSBpbiBhbmQgb2YgaXRzZWxmLCBidXQgdGhlIExEZXZJRCB3b3VsZCBub3QNCmNv bnRhaW4gYW55IG5ldy9kaWZmZXJlbnQvaW50ZXJlc3RpbmcgZmllbGRzLCBhbmQgaGVuY2UgbWln aHQgaGF2ZSBsaW1pdGVkDQphcHBlYWwuDQoNCjIpIGl04oCZcyBwb3NzaWJsZSB0aGF0IHRoZSBk ZXZpY2UgY291bGQgYXV0b21hdGljYWxseSBnZW5lcmF0ZSB1bmlxdWUga2V5cyBhbmQNCmFzc29j aWF0ZWQgcDEwLCBjbWMsIGNtcCBzdHJ1Y3R1cmVzIChpLmUuLCBldmVyeSBwZXJtdXRhdGlvbiBv ZiBrZXktYWxnb3JpdGhtDQphbmQgcmVxdWVzdC1zdHJ1Y3R1cmUgdGhlIGRldmljZSBzdXBwb3J0 cyksIGJ1dCB0aGlzIHdvdWxkIGJlIGV4cGVuc2l2ZSBvbg0KdGhlIGRldmljZSwgZXNwZWNpYWxs eSB3aXRob3V0IGtub3dsZWRnZSBpZiB0aGUgZGVwbG95bWVudOKAmXMgaW5mcmFzdHJ1Y3R1cmUN CmV2ZW4gY2FyZXMgdG8gc2V0IGFuIExEZXZJRCBvbiB0aGUgZGV2aWNlLg0KDQpGb3IgdGhlc2Ug cmVhc29ucyB0aGUgYXV0aG9ycyBmZWx0IGl0IGJlc3QgdG8gaW50cm9kdWNlIHRoZSBkaWFsb2cg cHJlc2VudGVkIGluDQp0aGUgZHJhZnQuDQoNCk9rYXksIEknbSB3b25kZXJpbmcgd2hldGhlciBh IHNlbnRlbmNlIHRvIHRoYXQgZWZmZWN0IHdvdWxkIGJlIGhlbHBmdWwsIHNpbmNlIHdoZW4gSSBy ZWFkIHRoZSBkcmFmdCwgbXkgaW1wcmVzc2lvbiB3YXMgdGhhdCBhIGhhbmRzaGFrZSB3YXMgYWx3 YXlzIGV4cGVjdGVkLCBidXQgcGVyaGFwcyBJJ20gbWlzc2luZyBzb21ldGhpbmc/DQoNCkkgaGFk IGFuIG9mZmxpbmUgY2hhdCB3aXRoIG15IGNvLWF1dGhvcnMuDQoNCkFzIHRoZSBZQU5HIHN5bnRh eCBzdGFuZHMsIGl04oCZcyBwb3NzaWJsZSBmb3IgdGhlIFNaVFAtY2xpZW50IHRvIHByb2FjdGl2 ZWx5IHNlbmQgYSBDU1IgaW4gaXTigJlzIGZpcnN0IG1lc3NhZ2UsIGJ1dCB0aGUgdmFsdWUgaXMg c28gbG93IHRoYXQgaXTigJlzIGFsbW9zdCBhIFNIT1VMRCBOT1TigKZhbmQsIGlmIHdl4oCZZCBj YXVnaHQgaXQgYmVmb3JlLCBhIOKAnGNob2ljZeKAnSBzdGF0ZW1lbnQgbWF5IGhhdmUgYmVlbiB1 c2VkIHRvIG1ha2UgaXQgaW1wb3NzaWJsZSAoaW4gb3JkZXIgdG8gc2ltcGxpZnkgaW1wbGVtZW50 YXRpb25zKS4NCg0KVGhhdCBzYWlkLCB0aGUgZmlyc3QgcGFyYWdyYXBoIG9mIHRoZSDigJxkZXNj cmlwdGlvbiIgc3RhdGVtZW50IGZvciAiY29udGFpbmVyIGNzcuKAnSBzdGF0ZXMgdGhhdCBhIOKA nGNzcuKAnSBpcyBzZW50IGluIHJlc3BvbnNlIHRvIGEg4oCccmVxdWVzdC1pbmZv4oCdIHN0cnVj dHVyZSBmcm9tIHRoZSBTWlRQLXNlcnZlciwgd2hpY2ggc3VnZ2VzdHMgdGhhdCBvbmx5IGEg4oCc Y3NyLXN1cHBvcnTigJ0gbm9kZSBjYW4gYmUgcHJvYWN0aXZlbHkgc2VudCBpbiB0aGUgZmlyc3Qg bWVzc2FnZS4gIFRoYXQgb25seSBpc3N1ZSBpcyB0aGF0IGl0IGRvZXNu4oCZdCBzdGF0ZSB0aGF0 IGl0IGlzICpvbmx5IHNlbnQqIGluIHJlc3BvbnNlIHRvIGEg4oCccmVxdWVzdC1pbmZv4oCdIHN0 cnVjdHVyZSwgbGVhdmluZyBvcGVuIGEgcG9zc2liaWxpdHkgdGhhdCB0aGUgZmlyc3QgbWVzc2Fn ZSBNQVkgaW5jbHVkZSBib3RoIHRoZSDigJxjc3Itc3VwcG9ydOKAnSAqYW5kKiDigJxjc3LigJ0g bm9kZXMuDQoNCkxvb2tpbmcgYXQganVzdCB0aGUgZHJhZnQtdGV4dCAoaS5lLiwgSWdub3Jpbmcg dGhlIFlBTkcpLCBTZWN0aW9uIDIuMSBzYXlzICJJbiB0aGUgb3JkZXIgb2YgdGhlaXIgaW50ZW5k ZWQgdXNl4oCdLCB3aGljaCBpcyBzdWdnZXN0aXZlLCBidXQgdGhlIHdvcmQg4oCcaW50ZW5kZWTi gJ0gbGVhdmVzIG9wZW4gdGhlIHBvc3NpYmlsaXR5IGZvciBhbHRlcm5hdGUgdXNlcy4NCg0KTXkg cmVjb21tZW5kYXRpb24gaXMgdG8gMSkgcmVtb3ZlIHRoZSB3b3JkIOKAnGludGVuZGVk4oCdLCAy KSBhZGQgYSBjaG9pY2Ugc3RhdGVtZW50IHRvIHRoZSBZQU5HIGFyb3VuZCB0aGUg4oCcY3NyLXN1 cHBvcnTigJ0gYW5kIOKAnGNzcuKAnSBub2Rlcy4sIGFuZCAzKSBzdHJlbmd0aGVuIHRoZSBsYW5n dWFnZSBpbiB0aGUgbGFzdCBwYXJhZ3JhcGggb24gcGFnZSA0IHRvIGJlIG1vcmUgbGlrZSB0aGUg WUFORywgaW5kaWNhdGluZyB0aGF0IHRoZSDigJxjc3LigJ0gbm9kZSBpcyBzZW50IG9ubHkgaW4g cmVzcG9uc2UgdG8gYSDigJxyZXF1ZXN0LWluZm/igJ0gZnJvbSB0aGUgU1pUUC1zZXJ2ZXIuDQoN ClRob3VnaHRzPw0KDQpJ4oCZbSBub3Qgc3VyZS4gIEl0IGZlZWxzIGxlc3MgUkVTVGZ1bCAoYXQg bGVhc3QgdG8gbWUpIHRvIG5vdCBhbGxvdyB0aGUgZGF0YSB0byBiZSBwcm92aWRlZCBhcyBhIHNp bmdsZSBtZXNzYWdlLCBldmVuIGlmIGluIHByYWN0aWNlIHRoYXQgbWlnaHQgbm90IG1ha2Ugc2Vu c2UgaW4gbW9zdCAoYWxtb3N0IGFsbCkgY2FzZXMuICBJZiB5b3Ugd2VyZSB1c2luZyBhIHNlcGFy YXRlIFlBTkcgUlBDIHRvIHNlbmQgdGhlIGNycy1zdXBwb3J0IGFuZCBnZXQgdGhlIHJlcXVlc3Qt aW5mbyB0aGVuIG9ubHkgaW5jbHVkaW5nIHRoZSBjcnMgbm9kZSBpbiB0aGUgYm9vdHN0cmFwcGlu ZyBkYXRhIFJQQyB0aGVuIEkgd291bGQgaGF2ZSBubyBjb21wbGFpbnRzLiAgSS5lLiwgaXQgb25s eSBmZWVscyBzdHJhbmdlIHRvIGhhbmRsZSBhIHRyYW5zYWN0aW9uYWwgZGVwZW5kZW5jeSB3aXRo aW4gdGhlIGRhdGEgc3RydWN0dXJlcyBvZiBhIHNpbmdsZSBSUEMgb24gd2hhdCBpcyBub21pbmFs bHkgYSBzdGF0ZWxlc3MgQVBJLg0KDQpBbHNvLCB3b3J0aCBub3RpbmcgdGhhdCB1c2luZyBhIHNl cGFyYXRlIFlBTkcgUlBDIHRvIHRyYW5zbWl0IHRoZSBjYXBhYmlsaXRpZXMgYXZvaWRzIHRoZSBu ZWVkIHRvIHJldHVybiBhbiBlcnJvci4gIEl0IGNvdWxkIGp1c3QgcmV0dXJuIHN1Y2Nlc3Mgd2l0 aCB0aGUgcmVxdWlyZWQgaW5mb3JtYXRpb24uICBXYXMgdGhpcyBhcHByb2FjaCBjb25zaWRlcmVk IGF0IGFsbCwgYW5kIHdvdWxkIHRoaXMgYmUgdG9vIGJpZyBhIGNoYW5nZT8gIEnigJltIG5vdCB0 cnlpbmcgdG8gY3JlYXRlIGV4dHJhIHdvcmsgZm9yIHlvdSwgb3IgZGVsYXkgdGhpcyBkb2N1bWVu dCDigKYNCg0KSWYgYSBzZXBhcmF0ZSBSUEMgdG8gZ2V0IHRoZSBjYXBhYmlsaXRpZXMgaW4gdW5k ZXNpcmFibGUgb3IgaW5mZWFzaWJsZSB0aGVuIGNoYW5naW5nIHRvIGEgY2hvaWNlIHNlZW1zIHJl YXNvbmFibGUsIGJ1dCBJIHdvdWxkIHByb2JhYmx5IHN1Z2dlc3Qga2VlcGluZyDigJxpbnRlbmRl ZOKAnSBhbmQgcHJvYmFibHkga2VlcGluZyB0aGUgbGFuZ3VhZ2Ugb24gcGFnZSA0IHNvbWV3aGF0 IG9wZW4sIGkuZS4sIG5vdCBzdHJpY3RseSBsb2NraW5nIGl0IGRvd24gdG8gZG9pbmcgYSBoYW5k c2hha2UuDQoNCjQuIFJlZmVyZW5jZXMuICBSRkMgMzY4OCBwcm9iYWJseSBzaG91bGQgYmUgbm9y bWF0aXZlIGZvciB0aGUgWE1MDQpyZWdpc3RyeSwgbm90aW5nIHRoYXQNCg0KUkZDIDYwMjAgaXMg bm9ybWF0aXZlbHkgcmVmZXJlbmNlZC4NCg0KUmVhbGx5PyAgSSB0ZW5kIHRvIGRpc2FncmVlIGFz IEkgdGhvdWdodCB0aGUgbGl0bXVzIHRlc3QgZm9yIGlmIHNvbWV0aGluZyB3ZXJlDQpub3JtYXRp dmUgd2FzIGlmIGl0IGhhZCB0byBiZSB1bmRlcnN0b29kIGluIG9yZGVyIHRvIGltcGxlbWVudCB0 aGUgUkZDLg0KDQpJIGd1ZXNzIHRoZSBsb2dpYyBoZXJlIGlzIHRoYXQgeW91IG5lZWQgdG8gdW5k ZXJzdGFuZCBSRkMgNjAyMCB0byB1bmRlcnN0YW5kIHRoZSByZWdpc3RyeSB0aGF0IGlzIGhhdmlu ZyBlbnRyaWVzIGFkZGVkIChnaXZlbiB0aGF0IFJGQyA3OTUwIGRvZXNuJ3QgZGVmaW5lIHRoZSBy ZWdpc3RyeSkuDQoNCkJ1dCwgYXMgcGVyIGJlbG93LCBJJ2xsIGNoZWNrIHdpdGggdGhlIElFU0cg b24gdGhpcyBvbmUuDQoNCg0KDQpZb3UgcmFpc2UgYW4gaW50ZXJlc3RpbmcgcG9pbnQgYWJvdXQg UkZDIDYwMjAgYmVpbmcgTm9ybWF0aXZlLCBhcyBJIHNlZSB0aGF0DQppdCBpcyBOT1Qgbm9ybWF0 aXZlIGluIGF0IGxlYXN0IG9uZSBvZiBteSBvdGhlciBkcmFmdHMuICBJIHRoaW5rIHRoYXQgaXQg aXMgYQ0KcmVhc29uYWJsZSBwb3NpdGlvbiB0aGF0LCBpZiB0aGUgUkZDIDYwMjAgcmVmZXJlbmNl IGlzIG9ubHkgcHJlc2VudCBpbiB0aGUNCklBTkEgQ29uc2lkZXJhdGlvbnMgc2VjdGlvbiwgdGhl biBpdCBpcyBJTkZPUk1BVElWRSBhcyBmYXIgYXMgdGhlIGRyYWZ0IGFzIGENCndob2xlIGdvZXMu ICBUaG91Z2h0cz8NCg0KTGV0IG1lIGNoZWNrIHdpdGggdGhlIElFU0cgYW5kIGdldCBiYWNrIHRv IHlvdSBvbiB0aGlzIG9uZS4gIEFsdGhvdWdoLCBwZXJoYXBzIHdvcnRoIG5vdGluZyB0aGF0IGJv dGggdGhlc2UgcmVmZXJlbmNlcyBhcmUgbm9ybWF0aXZlIGluIFJGQyA4MzQzIChhbmQgdGhleSBh cmUgb25seSByZWZlcmVuY2VkIGZyb20gdGhlIElBTkEgcmVnaXN0cnkgZW50cmllcykuDQoNCkFj aywgSSB3aWxsIHdhaXQgZm9yIHlvdXIgcmVzcG9uc2Ugb24gdGhpcyBpdGVtLg0KDQpJIGRpZG7i gJl0IHJlYWxseSBnZXQgYSBzdHJvbmcgYW5zd2VyIGZyb20gb3RoZXIgQURzIG9uIHRoaXMuDQoN ClNvbWUgb2YgdXMgZmVsdCB0aGF0IGEgbm9ybWF0aXZlIHJlZmVyZW5jZSBpcyBhcHByb3ByaWF0 ZSAoYmVjYXVzZSB5b3UgbmVlZCB0byB1bmRlcnN0YW5kIHRoZSBtZWFuaW5nIG9mIHRoZSByZWdp c3RyeSB0aGF0IGlzIGJlaW5nIHVwZGF0ZWQpLCBhbmQgbm9ib2R5IG9iamVjdGVkIHRvIHRoYXQg Y2hhcmFjdGVyaXphdGlvbiwgYnV0IGVxdWFsbHksIHNvbWUgQURzIGRpZG7igJl0IHRoaW5rIHRo YXQgSW5mb3JtYXRpdmUgaXMgbmVjZXNzYXJpbHkgd3JvbmcgYW5kIGl0IGlzIHByb2JhYmx5IG5v dCB3b3J0aCB3b3JyeWluZyBhYm91dC4NCg0KTXkgcmVjb21tZW5kYXRpb24gaXMgdG8gbWFrZSB0 aGVtIG5vcm1hdGl2ZSwgYmVjYXVzZSB0aGF0IGlzIHdoYXQgaGFzIGJlZW4gZG9uZSBmb3Igb3Ro ZXIgUkZDcyB3aXRoIFlBTkcgbW9kdWxlcyAoYW5kIGNvbnNpc3RlbmN5IGlzIGdvb2QpLCBhbmQg SSBkb27igJl0IHNlZSBhbnkgb3RoZXIgQURzIG9iamVjdGluZyB0byB0aGlzIGFwcHJvYWNoLiAg SSB3b3VsZCByZWdhcmQgdGhpcyBhcyB0aGUgcGF0aCBvZiBsZWFzdCByZXNpc3RhbmNlLg0KDQpU aGFua3MsDQpSb2INCg0KDQoNCg0KTml0czoNCg0KNS4NCkluIHRoZSBleGFtcGxlIGRhdGEsIHdv dWxkIGl0IGhlbHBmdWwgdG8gYWRkIGEgc2VudGVuY2UgdG8gZXhwbGFpbg0KICAgICAgICAgICAg ICJiYXNlNjRlbmNvZGVkdmFsdWUxPSIsDQogICAgICAgICAgICAgImJhc2U2NGVuY29kZWR2YWx1 ZTI9IiwNCiAgICAgICAgICAgICAiYmFzZTY0ZW5jb2RlZHZhbHVlMz0iDQoNCkFjdHVhbGx5LCBn aXZlbiB0aGlzIGNvbnZlbnRpb24gaXMgdXNlZCBpbiB2YXJpb3VzIHBsYWNlcywgdGhlcmUgaXMg YSBjaG9pY2UgYXMNCnRvIHdoZXRoZXINCg0KdG8gYWRkIGEgc2VudGVuY2UgdG8gZWFjaCBleGFt cGxlLCBvciBwZXJoYXBzIGluIHRoZSBpbnRyb2R1Y3Rpb24uDQoNCkFkZGluZyBhIHNlbnRlbmNl IHRvIGVhY2ggZXhhbXBsZSB3b3VsZCBiZSBpZGVhbCwgYnV0IGEgdG9uIG9mIHdvcmssDQplc3Bl Y2lhbGx5IGNvbnNpZGVyaW5nIG15IG5lZWRpbmcgdG8gcHJvcGFnYXRlIGl0IHRvIHRoZSBzdWl0 ZSBvZiBjbGllbnQtc2VydmVyDQpkcmFmdHMgYXMgd2VsbC4NCg0KQWRkaW5nIHNvbWV0aGluZyBs aWtlIHRoZSBmb2xsb3dpbmcgdG8gdGhlIEludHJvZHVjdGlvbiBzZWN0aW9uIHdvdWxkbuKAmXQg YmUNCnRvbyBtdWNoIHdvcms6DQoNCjEuMy4gIENvbnZlbnRpb25zDQoNCiAgVmFyaW91cyBleGFt cGxlcyB1c2VkIGluIHRoaXMgZG9jdW1lbnQgdXNlIGEgcGxhY2Vob2xkZXINCiAgdmFsdWUgZm9y IGJpbmFyeSBkYXRhIHRoYXQgaGFzIGJlZW4gYmFzZTY0IGVuY29kZWQgKGUuZy4sDQogICJiYXNl NjRlbmNvZGVkZGF0YT094oCcKS4gIFRoaXMgcGxhY2Vob2xkZXIgdmFsdWUgaXMgdXNlZA0KICAg YXMgcmVhbCBiYXNlNjQgZW5jb2RlZCBzdHJ1Y3R1cmVzIGFyZSBvZnRlbiBtYW55IGxpbmVzDQog ICBsb25nIGFuZCBoZW5jZSBkaXN0cmFjdGluZyB0byB0aGUgZXhhbXBsZSBiZWluZyBwcmVzZW50 ZWQuDQoNClRob3VnaHRzPw0KDQpMb29rcyBnb29kLg0KDQpBcHBsaWVkLg0KDQoNCg0KNy4gSW4g U2VjdXJpdHkgQ29uc2lkZXJhdGlvbnM6DQogR2VuZXJhdGluZyBhIG5ldyBrZXkgZWFjaCB0aW1l IGVuYWJsZXMgdGhlIHJhbmRvbSBieXRlcyB1c2VkIHRvDQogY3JlYXRlIHRoZSBrZXkgdG8gc2Vy dmUgdGhlIGR1YWwtcHVycG9zZSBvZiBhbHNvIGFjdGluZyBsaWtlIGENCiAibm9uY2UiIHVzZWQg aW4gb3RoZXIgbWVjaGFuaXNtcyB0byBkZXRlY3QgcmVwbGF5IGF0dGFja3MuDQoNCkkgd2Fzbid0 IGNsZWFyIHRvIG1lIHdoYXQgdGhlIHR3byBwdXJwb3NlcyBhcmUgaGVyZS4gIE9uZSBpcyBhY3Rp bmcgbGlrZQ0KYSAibm9uY2UiLCBidXQgd2hhdCBpcyB0aGUgb3RoZXIgcHVycG9zZT8NCg0KOmxh dWdoOiAgVGhlIG9yaWdpbmFsIGZpcnN0IHB1cnBvc2UgaXMsIG9mIGNvdXJzZSwgdG8gZ2VuZXJh dGUgYSBuZXcga2V5IGF0IGFsbCwNCmFzIG9wcG9zZWQgdG8gZWFjaCB0aW1lLiAgIFBsZWFzZSBw cm92aWRlIHN1Z2dlc3RlZCB0ZXh0IGlmIHlvdSBzdGlsbCB0aGluayBpdA0KY2FuIGJlIGltcHJv dmVkLg0KDQpXaGVuIHlvdSBwdXQgaXQgdGhhdCB3YXksIGl0IGlzIGtpbmQgb2Ygb2J2aW91cyA7 LSkNCg0KWW91IGNhbiBlaXRoZXIgbGVhdmUgaXQgYXMgaXMsIG9yIHBlcmhhcHMgYSBzbWFsbCB0 d2VhayAobW92aW5nIGFsc28pIG1pZ2h0IG1ha2UgaXQgY2xlYXJlcjoNCg0KICBHZW5lcmF0aW5n IGEgbmV3IGtleSBlYWNoIHRpbWUgZW5hYmxlcyB0aGUgcmFuZG9tIGJ5dGVzIHVzZWQgdG8NCiAg Y3JlYXRlIHRoZSBrZXkgdG8gYWxzbyBzZXJ2ZSB0aGUgZHVhbC1wdXJwb3NlIG9mIGFjdGluZyBs aWtlIGENCiAgIm5vbmNlIiB1c2VkIGluIG90aGVyIG1lY2hhbmlzbXMgdG8gZGV0ZWN0IHJlcGxh eSBhdHRhY2tzLg0KDQpBcHBsaWVkLg0KDQoNCg0KVGVybWlub2xvZ3k6DQpTaG91bGQgeW91IGFk ZCBMRGV2SUQgb3IgSURldklEDQoNCk1heWJlLCBidXQgbm90ZSB0aGF0IHRoaXMgZHJhZnQgKGFz IHdpdGggUkZDIDg1NzIpIGNhcmVmdWxseSByZWZlcnMgdG8g4oCcaWRlbnRpdHkNCmNlcnRpZmlj YXRlc+KAnSwgb2Ygd2hpY2ggSUVFRSA4MDIuMUFSIERldklEcyBhcmUgbWVyZSBleGFtcGxlcyBv ZiBzdWNoLCBidXQNCmJ5IG5vIG1lYW5zIHRoZSBvbmx5IHBvc3NpYmlsaXR5LiAgIEl04oCZcyB1 bmNsZWFyIGlmIHByb21vdGluZyBzdWNoIGFuIGFuY2lsbGFyeQ0KcmVmZXJlbmNlIHRvIGEgdG9w LWxldmVsIHRlcm0gaXMgYXBwcm9wcmlhdGUuICBDdXJyZW50bHksIGFzIEnigJltIHN1cmUgeW91 4oCZcmUNCmF3YXJlLCB0aGUgZHJhZnQgaGFzIGEgcmVmZXJlbmNlIChpLmUuLCBhbiA8eHJlZj4p IHdoZXJlIHRoZXNlIHZhbHVlcyBhcmUNCnVzZWTigKZhZG1pdHRlZCwgbGlrZWx5IG1vcmUgdGlt ZXMgdGhhbiBuZWNlc3NhcnksIHN1Y2ggdGhhdCBJIHdvdWxkbuKAmXQgYmUNCnN1cnByaXNlZCBp ZiB0aGUgY29weWVkaXRvciB3ZXJlIHRvIGVsaW1pbmF0ZSBhbGwgYnV0IHRoZSBmaXJzdCByZWZl cmVuY2VzLg0KVGhvdWdodHM/IFBsZWFzZSBhZHZpc2UuDQoNCk9rYXkuICBJJ20gaGFwcHkgZm9y IHlvdSB0byBsZWF2ZSB0aGlzIGFzIGlzLCB0aGlzIGlzIHByZXR0eSBtaW5vci4NCg0KTGVhdmlu ZyBhcyBpcyBmb3Igbm93LCBidXQgb24gdGhlIGZlbmNlIGFuZCB3b3VsZCB3ZWxjb21lIHRob3Vn aHRzIGZyb20gb3RoZXJzLg0KDQoNCg0KDQpUaGFua3MsDQpSb2INCg0KSy4NCg0KDQoNCg== --_000_DM4PR11MB54383EB098E3344A85A2DAA5B5079DM4PR11MB5438namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAz IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAx NSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFs LCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsNCglmb250LXNpemU6 MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCnNwYW4uRW1haWxT dHlsZTE4DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJD YWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1bHQN Cgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFn ZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo2MTIuMHB0IDc5Mi4wcHQ7DQoJbWFyZ2luOjcyLjBwdCA3 Mi4wcHQgNzIuMHB0IDcyLjBwdDt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rp b24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1 bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEt LVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzpp ZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtl bmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLUdCIiBsaW5rPSIjMDU2M0MxIiB2bGlu az0iIzk1NEY3MiIgc3R5bGU9IndvcmQtd3JhcDpicmVhay13b3JkIj4NCjxkaXYgY2xhc3M9Ildv cmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVh c3QtbGFuZ3VhZ2U6RU4tVVMiPkhpIEtlbnQsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5v bmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAw Y20iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PGI+ PHNwYW4gbGFuZz0iRU4tVVMiPkZyb206PC9zcGFuPjwvYj48c3BhbiBsYW5nPSJFTi1VUyI+IEtl bnQgV2F0c2VuICZsdDtrZW50K2lldGZAd2F0c2VuLm5ldCZndDsNCjxicj4NCjxiPlNlbnQ6PC9i PiAyNCBKdW5lIDIwMjEgMTY6MjY8YnI+DQo8Yj5Ubzo8L2I+IFJvYiBXaWx0b24gKHJ3aWx0b24p ICZsdDtyd2lsdG9uQGNpc2NvLmNvbSZndDs8YnI+DQo8Yj5DYzo8L2I+IG5ldGNvbmZAaWV0Zi5v cmc7IGRyYWZ0LWlldGYtbmV0Y29uZi1zenRwLWNzckBpZXRmLm9yZzsgbmV0Y29uZi1jaGFpcnNA aWV0Zi5vcmc8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IEFEIHJldmlldyBvZiBkcmFmdC1pZXRm LW5ldGNvbmYtc3p0cC1jc3I8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYu MHB0Ij5IaSBSb2IsPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5Q cnVuaW5nIGRvd24gdG8ganVzdCBpbnRlcmVzdGluZyBiaXRz4oCmPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYu MHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjxi bG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQ7Zm9u dC12YXJpYW50LWNhcHM6IG5vcm1hbDtvcnBoYW5zOiBhdXRvO3RleHQtYWxpZ246c3RhcnQ7d2lk b3dzOiBhdXRvOy13ZWJraXQtdGV4dC1zaXplLWFkanVzdDogYXV0bzstd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7d29yZC1zcGFjaW5nOjBweCI+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5 bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8YmxvY2txdW90ZSBz dHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj5N eSBtYWluIHF1ZXN0aW9ucyByZWFsbHkgcmVsYXRlIHRvIFJFU1Qgc2VtYW50aWNzLjxicj4NCjxi cj4NCjEuIEl0IGlzIGFsd2F5cyB0aGUgY2FzZSB0aGF0IHRoZSBTWlRQLWNsaWVudCBtdXN0IGRv IHRoZSBoYW5kc2hha2Ugd2l0aDxicj4NCnRoZSBzZXJ2ZXIgKGkuZSwgcG9wdWxhdGluZyB0aGUg Y3NyLXN1cHBvcnQgY29udGFpbmVyLCB0aGVuIGdldHRpbmcgYSA0MDA8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTom cXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+ZXJyb3IgYmFjayw8YnI+DQo8YnI+DQo8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBw dDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5 OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj5iZWZvcmUgbWFraW5nIHRoZSBhY3R1 YWwgYm9vdHN0cmFwIHJlcXVlc3QpLCBvciBpcyBpdCBhY2NlcHRhYmxlIGZvciB0aGU8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250 LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+U1pUUC1jbGllbnQ8YnI+ DQo8YnI+DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2lu LXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Zv bnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj50byBndWVzcyBvbiBh Y2NlcHRhYmxlIHBhcmFtZXRlcnMsIGFuZCBzZW5kIGEgc2luZ2xlIHJlcXVlc3Q/ICZuYnNwO09i dmlvdXNseSw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+ dGhpcyBjYW5ub3Q8YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8YmxvY2txdW90 ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlm Ij53b3JrIGluIGFsbCBjYXNlcywgYnV0IEkgd2FudCB0byBjaGVjayB3aGV0aGVyIGl0IGlzIGFs bG93ZWQgKG9yIGV4cGxpY2l0bHk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Jsb2NrcXVvdGU+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDss c2Fucy1zZXJpZiI+ZGlzYWxsb3dlZCk8YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0 Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90 OyxzYW5zLXNlcmlmIj5pbiBhbnkgY2FzZXMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9ibG9j a3F1b3RlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNh JnF1b3Q7LHNhbnMtc2VyaWYiPjxicj4NCkEgaGFuZHNoYWtlIGlzIG5vdCBzdHJpY3RseSBhbHdh eXMgcmVxdWlyZWQsIGFzOjxicj4NCjxicj4NCjEpIGl04oCZcyBwb3NzaWJsZSB0aGUgZGV2aWNl IGNvdWxkIGF1dG9tYXRpY2FsbHkgZ2VuZXJhdGUgYSBDU1IgdXNpbmcgdGhlIHNhbWU8YnI+DQpj ZXJ0aWZpY2F0ZSBpbmZvcm1hdGlvbiBhcyBwcmVzZW50IGluIGl0cyBJRGV2SUQgY2VydGlmaWNh dGUuICZuYnNwO1RoaXMgd291bGQgYWxsb3c8YnI+DQp0aGUgc2lnbmF0dXJlIG9uIHRoZSByZXN1 bHRpbmcgTERldklEIHRvIGJlIGZyb20gdGhlIGRlcGxveW1lbnTigJlzIENBPGJyPg0KaW5mcmFz dHJ1Y3R1cmUsIHdoaWNoIGhhcyB2YWx1ZSBpbiBhbmQgb2YgaXRzZWxmLCBidXQgdGhlIExEZXZJ RCB3b3VsZCBub3Q8YnI+DQpjb250YWluIGFueSBuZXcvZGlmZmVyZW50L2ludGVyZXN0aW5nIGZp ZWxkcywgYW5kIGhlbmNlIG1pZ2h0IGhhdmUgbGltaXRlZDxicj4NCmFwcGVhbC48YnI+DQo8YnI+ DQoyKSBpdOKAmXMgcG9zc2libGUgdGhhdCB0aGUgZGV2aWNlIGNvdWxkIGF1dG9tYXRpY2FsbHkg Z2VuZXJhdGUgdW5pcXVlIGtleXMgYW5kPGJyPg0KYXNzb2NpYXRlZCBwMTAsIGNtYywgY21wIHN0 cnVjdHVyZXMgKGkuZS4sIGV2ZXJ5IHBlcm11dGF0aW9uIG9mIGtleS1hbGdvcml0aG08YnI+DQph bmQgcmVxdWVzdC1zdHJ1Y3R1cmUgdGhlIGRldmljZSBzdXBwb3J0cyksIGJ1dCB0aGlzIHdvdWxk IGJlIGV4cGVuc2l2ZSBvbjxicj4NCnRoZSBkZXZpY2UsIGVzcGVjaWFsbHkgd2l0aG91dCBrbm93 bGVkZ2UgaWYgdGhlIGRlcGxveW1lbnTigJlzIGluZnJhc3RydWN0dXJlPGJyPg0KZXZlbiBjYXJl cyB0byBzZXQgYW4gTERldklEIG9uIHRoZSBkZXZpY2UuPGJyPg0KPGJyPg0KRm9yIHRoZXNlIHJl YXNvbnMgdGhlIGF1dGhvcnMgZmVsdCBpdCBiZXN0IHRvIGludHJvZHVjZSB0aGUgZGlhbG9nIHBy ZXNlbnRlZCBpbjxicj4NCnRoZSBkcmFmdC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Jsb2Nr cXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2Em cXVvdDssc2Fucy1zZXJpZiI+PGJyPg0KT2theSwgSSdtIHdvbmRlcmluZyB3aGV0aGVyIGEgc2Vu dGVuY2UgdG8gdGhhdCBlZmZlY3Qgd291bGQgYmUgaGVscGZ1bCwgc2luY2Ugd2hlbiBJIHJlYWQg dGhlIGRyYWZ0LCBteSBpbXByZXNzaW9uIHdhcyB0aGF0IGEgaGFuZHNoYWtlIHdhcyBhbHdheXMg ZXhwZWN0ZWQsIGJ1dCBwZXJoYXBzIEknbSBtaXNzaW5nIHNvbWV0aGluZz88L3NwYW4+PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4w cHQiPkkgaGFkIGFuIG9mZmxpbmUgY2hhdCB3aXRoIG15IGNvLWF1dGhvcnMuICZuYnNwOyZuYnNw OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5BcyB0 aGUgWUFORyBzeW50YXggc3RhbmRzLCBpdOKAmXMgcG9zc2libGUgZm9yIHRoZSBTWlRQLWNsaWVu dCB0byBwcm9hY3RpdmVseSBzZW5kIGEgQ1NSIGluIGl04oCZcyBmaXJzdCBtZXNzYWdlLCBidXQg dGhlIHZhbHVlIGlzIHNvIGxvdyB0aGF0IGl04oCZcyBhbG1vc3QgYSBTSE9VTEQgTk9U4oCmYW5k LCBpZiB3ZeKAmWQgY2F1Z2h0IGl0IGJlZm9yZSwgYSDigJxjaG9pY2XigJ0gc3RhdGVtZW50DQog bWF5IGhhdmUgYmVlbiB1c2VkIHRvIG1ha2UgaXQgaW1wb3NzaWJsZSAoaW4gb3JkZXIgdG8gc2lt cGxpZnkgaW1wbGVtZW50YXRpb25zKS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0OjM2LjBwdCI+VGhhdCBzYWlkLCB0aGUgZmlyc3QgcGFyYWdyYXBoIG9mIHRoZSDi gJxkZXNjcmlwdGlvbiZxdW90OyBzdGF0ZW1lbnQgZm9yICZxdW90O2NvbnRhaW5lciBjc3LigJ0g c3RhdGVzIHRoYXQgYSDigJxjc3LigJ0gaXMgc2VudCBpbiByZXNwb25zZSB0byBhIOKAnHJlcXVl c3QtaW5mb+KAnSBzdHJ1Y3R1cmUgZnJvbSB0aGUgU1pUUC1zZXJ2ZXIsIHdoaWNoIHN1Z2dlc3Rz IHRoYXQgb25seSBhIOKAnGNzci1zdXBwb3J04oCdDQogbm9kZSBjYW4gYmUgcHJvYWN0aXZlbHkg c2VudCBpbiB0aGUgZmlyc3QgbWVzc2FnZS4gJm5ic3A7VGhhdCBvbmx5IGlzc3VlIGlzIHRoYXQg aXQgZG9lc27igJl0IHN0YXRlIHRoYXQgaXQgaXMgKm9ubHkgc2VudCogaW4gcmVzcG9uc2UgdG8g YSDigJxyZXF1ZXN0LWluZm/igJ0gc3RydWN0dXJlLCBsZWF2aW5nIG9wZW4gYSBwb3NzaWJpbGl0 eSB0aGF0IHRoZSBmaXJzdCBtZXNzYWdlIE1BWSBpbmNsdWRlIGJvdGggdGhlIOKAnGNzci1zdXBw b3J04oCdICphbmQqIOKAnGNzcuKAnQ0KIG5vZGVzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYu MHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPkxvb2tpbmcgYXQganVzdCB0aGUgZHJh ZnQtdGV4dCAoaS5lLiwgSWdub3JpbmcgdGhlIFlBTkcpLCBTZWN0aW9uIDIuMSBzYXlzICZxdW90 O0luIHRoZSBvcmRlciBvZiB0aGVpciBpbnRlbmRlZCB1c2XigJ0sIHdoaWNoIGlzIHN1Z2dlc3Rp dmUsIGJ1dCB0aGUgd29yZCDigJxpbnRlbmRlZOKAnSBsZWF2ZXMgb3BlbiB0aGUgcG9zc2liaWxp dHkgZm9yIGFsdGVybmF0ZSB1c2VzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij5NeSByZWNvbW1lbmRhdGlvbiBpcyB0byAxKSByZW1vdmUgdGhlIHdv cmQg4oCcaW50ZW5kZWTigJ0sIDIpJm5ic3A7PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5hZGQg YSBjaG9pY2Ugc3RhdGVtZW50IHRvIHRoZSBZQU5HIGFyb3VuZCB0aGUg4oCcY3NyLXN1cHBvcnTi gJ0gYW5kIOKAnGNzcuKAnSBub2Rlcy4sIGFuZCAzKSZuYnNwOzwvc3Bhbj5zdHJlbmd0aGVuIHRo ZSBsYW5ndWFnZSBpbiB0aGUgbGFzdA0KIHBhcmFncmFwaCBvbiBwYWdlIDQgdG8gYmUgbW9yZSBs aWtlIHRoZSBZQU5HLCBpbmRpY2F0aW5nIHRoYXQgdGhlIOKAnGNzcuKAnSBub2RlIGlzIHNlbnQg b25seSBpbiByZXNwb25zZSB0byBhIOKAnHJlcXVlc3QtaW5mb+KAnSBmcm9tIHRoZSBTWlRQLXNl cnZlci4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2 LjBwdCI+VGhvdWdodHM/PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPknigJltIG5vdCBzdXJlLiZuYnNwOyBJdCBmZWVscyBs ZXNzIFJFU1RmdWwgKGF0IGxlYXN0IHRvIG1lKSB0byBub3QgYWxsb3cgdGhlIGRhdGEgdG8gYmUg cHJvdmlkZWQgYXMgYSBzaW5nbGUgbWVzc2FnZSwgZXZlbiBpZiBpbiBwcmFjdGljZSB0aGF0IG1p Z2h0IG5vdCBtYWtlIHNlbnNlIGluIG1vc3QgKGFsbW9zdCBhbGwpIGNhc2VzLiZuYnNwOyBJZiB5 b3Ugd2VyZSB1c2luZyBhIHNlcGFyYXRlIFlBTkcgUlBDIHRvIHNlbmQgdGhlDQogY3JzLXN1cHBv cnQgYW5kIGdldCB0aGUgcmVxdWVzdC1pbmZvIHRoZW4gb25seSBpbmNsdWRpbmcgdGhlIGNycyBu b2RlIGluIHRoZSBib290c3RyYXBwaW5nIGRhdGEgUlBDIHRoZW4gSSB3b3VsZCBoYXZlIG5vIGNv bXBsYWludHMuJm5ic3A7IEkuZS4sIGl0IG9ubHkgZmVlbHMgc3RyYW5nZSB0byBoYW5kbGUgYSB0 cmFuc2FjdGlvbmFsIGRlcGVuZGVuY3kgd2l0aGluIHRoZSBkYXRhIHN0cnVjdHVyZXMgb2YgYSBz aW5nbGUgUlBDIG9uIHdoYXQgaXMgbm9taW5hbGx5DQogYSBzdGF0ZWxlc3MgQVBJLjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5BbHNvLCB3b3J0aCBub3RpbmcgdGhhdCB1c2luZyBhIHNlcGFyYXRl IFlBTkcgUlBDIHRvIHRyYW5zbWl0IHRoZSBjYXBhYmlsaXRpZXMgYXZvaWRzIHRoZSBuZWVkIHRv IHJldHVybiBhbiBlcnJvci4mbmJzcDsgSXQgY291bGQganVzdCByZXR1cm4gc3VjY2VzcyB3aXRo IHRoZSByZXF1aXJlZCBpbmZvcm1hdGlvbi4mbmJzcDsgV2FzIHRoaXMgYXBwcm9hY2ggY29uc2lk ZXJlZCBhdCBhbGwsIGFuZCB3b3VsZCB0aGlzIGJlIHRvbw0KIGJpZyBhIGNoYW5nZT8mbmJzcDsg SeKAmW0gbm90IHRyeWluZyB0byBjcmVhdGUgZXh0cmEgd29yayBmb3IgeW91LCBvciBkZWxheSB0 aGlzIGRvY3VtZW50IOKApjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5J ZiBhIHNlcGFyYXRlIFJQQyB0byBnZXQgdGhlIGNhcGFiaWxpdGllcyBpbiB1bmRlc2lyYWJsZSBv ciBpbmZlYXNpYmxlIHRoZW4gY2hhbmdpbmcgdG8gYSBjaG9pY2Ugc2VlbXMgcmVhc29uYWJsZSwg YnV0IEkgd291bGQgcHJvYmFibHkgc3VnZ2VzdCBrZWVwaW5nIOKAnGludGVuZGVk4oCdIGFuZCBw cm9iYWJseSBrZWVwaW5nIHRoZSBsYW5ndWFnZSBvbiBwYWdlIDQgc29tZXdoYXQgb3BlbiwgaS5l Liwgbm90IHN0cmljdGx5DQogbG9ja2luZyBpdCBkb3duIHRvIGRvaW5nIGEgaGFuZHNoYWtlLjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxl PSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxibG9ja3F1 b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGJsb2Nr cXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1z ZXJpZiI+NC4gUmVmZXJlbmNlcy4gJm5ic3A7UkZDIDM2ODggcHJvYmFibHkgc2hvdWxkIGJlIG5v cm1hdGl2ZSBmb3IgdGhlIFhNTDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvYmxvY2txdW90ZT4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90Oyxz YW5zLXNlcmlmIj5yZWdpc3RyeSwgbm90aW5nIHRoYXQ8YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90 dG9tOjUuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4w cHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZl dGljYSZxdW90OyxzYW5zLXNlcmlmIj5SRkMgNjAyMCBpcyBub3JtYXRpdmVseSByZWZlcmVuY2Vk LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvYmxvY2txdW90ZT4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu NXB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj48YnI+DQpS ZWFsbHk/ICZuYnNwO0kgdGVuZCB0byBkaXNhZ3JlZSBhcyBJIHRob3VnaHQgdGhlIGxpdG11cyB0 ZXN0IGZvciBpZiBzb21ldGhpbmcgd2VyZTxicj4NCm5vcm1hdGl2ZSB3YXMgaWYgaXQgaGFkIHRv IGJlIHVuZGVyc3Rvb2QgaW4gb3JkZXIgdG8gaW1wbGVtZW50IHRoZSBSRkMuPG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1p bHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPjxicj4NCkkgZ3Vlc3MgdGhlIGxv Z2ljIGhlcmUgaXMgdGhhdCB5b3UgbmVlZCB0byB1bmRlcnN0YW5kIFJGQyA2MDIwIHRvIHVuZGVy c3RhbmQgdGhlIHJlZ2lzdHJ5IHRoYXQgaXMgaGF2aW5nIGVudHJpZXMgYWRkZWQgKGdpdmVuIHRo YXQgUkZDIDc5NTAgZG9lc24ndCBkZWZpbmUgdGhlIHJlZ2lzdHJ5KS48YnI+DQo8YnI+DQpCdXQs IGFzIHBlciBiZWxvdywgSSdsbCBjaGVjayB3aXRoIHRoZSBJRVNHIG9uIHRoaXMgb25lLjxicj4N CjxiciBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTtmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsO3RleHQtYWxpZ246c3RhcnQ7LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4O3dv cmQtc3BhY2luZzowcHgiPg0KPGJyPg0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVv dGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJp ZiI+PGJyPg0KWW91IHJhaXNlIGFuIGludGVyZXN0aW5nIHBvaW50IGFib3V0IFJGQyA2MDIwIGJl aW5nIE5vcm1hdGl2ZSwgYXMgSSBzZWUgdGhhdDxicj4NCml0IGlzIE5PVCBub3JtYXRpdmUgaW4g YXQgbGVhc3Qgb25lIG9mIG15IG90aGVyIGRyYWZ0cy4gJm5ic3A7SSB0aGluayB0aGF0IGl0IGlz IGE8YnI+DQpyZWFzb25hYmxlIHBvc2l0aW9uIHRoYXQsIGlmIHRoZSBSRkMgNjAyMCByZWZlcmVu Y2UgaXMgb25seSBwcmVzZW50IGluIHRoZTxicj4NCklBTkEgQ29uc2lkZXJhdGlvbnMgc2VjdGlv biwgdGhlbiBpdCBpcyBJTkZPUk1BVElWRSBhcyBmYXIgYXMgdGhlIGRyYWZ0IGFzIGE8YnI+DQp3 aG9sZSBnb2VzLiAmbmJzcDtUaG91Z2h0cz88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Jsb2Nr cXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2Em cXVvdDssc2Fucy1zZXJpZiI+PGJyPg0KTGV0IG1lIGNoZWNrIHdpdGggdGhlIElFU0cgYW5kIGdl dCBiYWNrIHRvIHlvdSBvbiB0aGlzIG9uZS4gJm5ic3A7QWx0aG91Z2gsIHBlcmhhcHMgd29ydGgg bm90aW5nIHRoYXQgYm90aCB0aGVzZSByZWZlcmVuY2VzIGFyZSBub3JtYXRpdmUgaW4gUkZDIDgz NDMgKGFuZCB0aGV5IGFyZSBvbmx5IHJlZmVyZW5jZWQgZnJvbSB0aGUgSUFOQSByZWdpc3RyeSBl bnRyaWVzKS48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPkFjaywgSSB3aWxsIHdhaXQgZm9yIHlvdXIgcmVzcG9u c2Ugb24gdGhpcyBpdGVtLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIGRpZG7igJl0IHJlYWxs eSBnZXQgYSBzdHJvbmcgYW5zd2VyIGZyb20gb3RoZXIgQURzIG9uIHRoaXMuPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPlNvbWUgb2YgdXMgZmVsdCB0aGF0IGEgbm9ybWF0aXZlIHJlZmVyZW5jZSBp cyBhcHByb3ByaWF0ZSAoYmVjYXVzZSB5b3UgbmVlZCB0byB1bmRlcnN0YW5kIHRoZSBtZWFuaW5n IG9mIHRoZSByZWdpc3RyeSB0aGF0IGlzIGJlaW5nIHVwZGF0ZWQpLCBhbmQgbm9ib2R5IG9iamVj dGVkIHRvIHRoYXQgY2hhcmFjdGVyaXphdGlvbiwgYnV0IGVxdWFsbHksIHNvbWUgQURzIGRpZG7i gJl0IHRoaW5rIHRoYXQgSW5mb3JtYXRpdmUNCiBpcyBuZWNlc3NhcmlseSB3cm9uZyBhbmQgaXQg aXMgcHJvYmFibHkgbm90IHdvcnRoIHdvcnJ5aW5nIGFib3V0LjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5NeSByZWNvbW1lbmRhdGlvbiBpcyB0byBtYWtlIHRoZW0gbm9ybWF0aXZlLCBiZWNhdXNl IHRoYXQgaXMgd2hhdCBoYXMgYmVlbiBkb25lIGZvciBvdGhlciBSRkNzIHdpdGggWUFORyBtb2R1 bGVzIChhbmQgY29uc2lzdGVuY3kgaXMgZ29vZCksIGFuZCBJIGRvbuKAmXQgc2VlIGFueSBvdGhl ciBBRHMgb2JqZWN0aW5nIHRvIHRoaXMgYXBwcm9hY2guJm5ic3A7IEkgd291bGQgcmVnYXJkIHRo aXMgYXMgdGhlIHBhdGggb2YgbGVhc3QNCiByZXNpc3RhbmNlLjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5UaGFua3MsPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Sb2I8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 MzYuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90 dG9tOjUuMHB0Ij4NCjxkaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDtt YXJnaW4tYm90dG9tOjUuMHB0O2ZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7b3JwaGFuczogYXV0 bzt0ZXh0LWFsaWduOnN0YXJ0O3dpZG93czogYXV0bzstd2Via2l0LXRleHQtc2l6ZS1hZGp1c3Q6 IGF1dG87LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4O3dvcmQtc3BhY2luZzowcHgiPg0K PGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDss c2Fucy1zZXJpZiI+Tml0czo8YnI+DQo8YnI+DQo1Ljxicj4NCkluIHRoZSBleGFtcGxlIGRhdGEs IHdvdWxkIGl0IGhlbHBmdWwgdG8gYWRkIGEgc2VudGVuY2UgdG8gZXhwbGFpbjxicj4NCiZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZxdW90O2Jhc2U2NGVuY29kZWR2YWx1ZTE9JnF1b3Q7LDxicj4NCiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZxdW90O2Jhc2U2NGVuY29kZWR2YWx1ZTI9JnF1b3Q7LDxicj4N CiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZxdW90O2Jhc2U2NGVuY29kZWR2YWx1ZTM9JnF1b3Q7PGJy Pg0KPGJyPg0KQWN0dWFsbHksIGdpdmVuIHRoaXMgY29udmVudGlvbiBpcyB1c2VkIGluIHZhcmlv dXMgcGxhY2VzLCB0aGVyZSBpcyBhIGNob2ljZSBhczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv YmxvY2txdW90ZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4w cHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZl dGljYSZxdW90OyxzYW5zLXNlcmlmIj50byB3aGV0aGVyPGJyPg0KPGJyPg0KPG86cD48L286cD48 L3NwYW4+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJv dHRvbTo1LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYu MHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtIZWx2 ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+dG8gYWRkIGEgc2VudGVuY2UgdG8gZWFjaCBleGFtcGxl LCBvciBwZXJoYXBzIGluIHRoZSBpbnRyb2R1Y3Rpb24uPG86cD48L286cD48L3NwYW4+PC9wPg0K PC9ibG9ja3F1b3RlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2 LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVs dmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPjxicj4NCkFkZGluZyBhIHNlbnRlbmNlIHRvIGVhY2gg ZXhhbXBsZSB3b3VsZCBiZSBpZGVhbCwgYnV0IGEgdG9uIG9mIHdvcmssPGJyPg0KZXNwZWNpYWxs eSBjb25zaWRlcmluZyBteSBuZWVkaW5nIHRvIHByb3BhZ2F0ZSBpdCB0byB0aGUgc3VpdGUgb2Yg Y2xpZW50LXNlcnZlcjxicj4NCmRyYWZ0cyBhcyB3ZWxsLjxicj4NCjxicj4NCkFkZGluZyBzb21l dGhpbmcgbGlrZSB0aGUgZm9sbG93aW5nIHRvIHRoZSBJbnRyb2R1Y3Rpb24gc2VjdGlvbiB3b3Vs ZG7igJl0IGJlPGJyPg0KdG9vIG11Y2ggd29yazo8YnI+DQo8YnI+DQoxLjMuICZuYnNwO0NvbnZl bnRpb25zPGJyPg0KPGJyPg0KJm5ic3A7Jm5ic3A7VmFyaW91cyBleGFtcGxlcyB1c2VkIGluIHRo aXMgZG9jdW1lbnQgdXNlIGEgcGxhY2Vob2xkZXI8YnI+DQombmJzcDsmbmJzcDt2YWx1ZSBmb3Ig YmluYXJ5IGRhdGEgdGhhdCBoYXMgYmVlbiBiYXNlNjQgZW5jb2RlZCAoZS5nLiw8YnI+DQombmJz cDsmbmJzcDsmcXVvdDtiYXNlNjRlbmNvZGVkZGF0YT094oCcKS4gJm5ic3A7VGhpcyBwbGFjZWhv bGRlciB2YWx1ZSBpcyB1c2VkPGJyPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7YXMgcmVhbCBiYXNlNjQg ZW5jb2RlZCBzdHJ1Y3R1cmVzIGFyZSBvZnRlbiBtYW55IGxpbmVzPGJyPg0KJm5ic3A7Jm5ic3A7 Jm5ic3A7bG9uZyBhbmQgaGVuY2UgZGlzdHJhY3RpbmcgdG8gdGhlIGV4YW1wbGUgYmVpbmcgcHJl c2VudGVkLjxicj4NCjxicj4NClRob3VnaHRzPzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvYmxv Y2txdW90ZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGlj YSZxdW90OyxzYW5zLXNlcmlmIj48YnI+DQpMb29rcyBnb29kLjwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+QXBw bGllZC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBw dCI+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJv dHRvbTo1LjBwdDtmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsO29ycGhhbnM6IGF1dG87dGV4dC1h bGlnbjpzdGFydDt3aWRvd3M6IGF1dG87LXdlYmtpdC10ZXh0LXNpemUtYWRqdXN0OiBhdXRvOy13 ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDt3b3JkLXNwYWNpbmc6MHB4Ij4NCjxibG9ja3F1 b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2Vy aWYiPjcuIEluIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zOjxicj4NCiZuYnNwO0dlbmVyYXRpbmcg YSBuZXcga2V5IGVhY2ggdGltZSBlbmFibGVzIHRoZSByYW5kb20gYnl0ZXMgdXNlZCB0bzxicj4N CiZuYnNwO2NyZWF0ZSB0aGUga2V5IHRvIHNlcnZlIHRoZSBkdWFsLXB1cnBvc2Ugb2YgYWxzbyBh Y3RpbmcgbGlrZSBhPGJyPg0KJm5ic3A7JnF1b3Q7bm9uY2UmcXVvdDsgdXNlZCBpbiBvdGhlciBt ZWNoYW5pc21zIHRvIGRldGVjdCByZXBsYXkgYXR0YWNrcy48YnI+DQo8YnI+DQpJIHdhc24ndCBj bGVhciB0byBtZSB3aGF0IHRoZSB0d28gcHVycG9zZXMgYXJlIGhlcmUuICZuYnNwO09uZSBpcyBh Y3RpbmcgbGlrZTxicj4NCmEgJnF1b3Q7bm9uY2UmcXVvdDssIGJ1dCB3aGF0IGlzIHRoZSBvdGhl ciBwdXJwb3NlPzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvYmxvY2txdW90ZT4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlm Ij48YnI+DQo6bGF1Z2g6ICZuYnNwO1RoZSBvcmlnaW5hbCBmaXJzdCBwdXJwb3NlIGlzLCBvZiBj b3Vyc2UsIHRvIGdlbmVyYXRlIGEgbmV3IGtleSBhdCBhbGwsPGJyPg0KYXMgb3Bwb3NlZCB0byBl YWNoIHRpbWUuICZuYnNwOyZuYnNwO1BsZWFzZSBwcm92aWRlIHN1Z2dlc3RlZCB0ZXh0IGlmIHlv dSBzdGlsbCB0aGluayBpdDxicj4NCmNhbiBiZSBpbXByb3ZlZC48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVv dDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+PGJyPg0KV2hlbiB5b3UgcHV0IGl0IHRoYXQg d2F5LCBpdCBpcyBraW5kIG9mIG9idmlvdXMgOy0pPGJyPg0KPGJyPg0KWW91IGNhbiBlaXRoZXIg bGVhdmUgaXQgYXMgaXMsIG9yIHBlcmhhcHMgYSBzbWFsbCB0d2VhayAobW92aW5nIGFsc28pIG1p Z2h0IG1ha2UgaXQgY2xlYXJlcjo8YnI+DQo8YnI+DQombmJzcDsmbmJzcDtHZW5lcmF0aW5nIGEg bmV3IGtleSBlYWNoIHRpbWUgZW5hYmxlcyB0aGUgcmFuZG9tIGJ5dGVzIHVzZWQgdG88YnI+DQom bmJzcDsmbmJzcDtjcmVhdGUgdGhlIGtleSB0byBhbHNvIHNlcnZlIHRoZSBkdWFsLXB1cnBvc2Ug b2YgYWN0aW5nIGxpa2UgYTxicj4NCiZuYnNwOyZuYnNwOyZxdW90O25vbmNlJnF1b3Q7IHVzZWQg aW4gb3RoZXIgbWVjaGFuaXNtcyB0byBkZXRlY3QgcmVwbGF5IGF0dGFja3MuPC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPkFw cGxpZWQuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90 dG9tOjUuMHB0Ij4NCjxkaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDtt YXJnaW4tYm90dG9tOjUuMHB0O2ZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7b3JwaGFuczogYXV0 bzt0ZXh0LWFsaWduOnN0YXJ0O3dpZG93czogYXV0bzstd2Via2l0LXRleHQtc2l6ZS1hZGp1c3Q6 IGF1dG87LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4O3dvcmQtc3BhY2luZzowcHgiPg0K PGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDss c2Fucy1zZXJpZiI+VGVybWlub2xvZ3k6PGJyPg0KU2hvdWxkIHlvdSBhZGQgTERldklEIG9yIElE ZXZJRDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvYmxvY2txdW90ZT4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj48YnI+ DQpNYXliZSwgYnV0IG5vdGUgdGhhdCB0aGlzIGRyYWZ0IChhcyB3aXRoIFJGQyA4NTcyKSBjYXJl ZnVsbHkgcmVmZXJzIHRvIOKAnGlkZW50aXR5PGJyPg0KY2VydGlmaWNhdGVz4oCdLCBvZiB3aGlj aCBJRUVFIDgwMi4xQVIgRGV2SURzIGFyZSBtZXJlIGV4YW1wbGVzIG9mIHN1Y2gsIGJ1dDxicj4N CmJ5IG5vIG1lYW5zIHRoZSBvbmx5IHBvc3NpYmlsaXR5LiAmbmJzcDsmbmJzcDtJdOKAmXMgdW5j bGVhciBpZiBwcm9tb3Rpbmcgc3VjaCBhbiBhbmNpbGxhcnk8YnI+DQpyZWZlcmVuY2UgdG8gYSB0 b3AtbGV2ZWwgdGVybSBpcyBhcHByb3ByaWF0ZS4gJm5ic3A7Q3VycmVudGx5LCBhcyBJ4oCZbSBz dXJlIHlvdeKAmXJlPGJyPg0KYXdhcmUsIHRoZSBkcmFmdCBoYXMgYSByZWZlcmVuY2UgKGkuZS4s IGFuICZsdDt4cmVmJmd0Oykgd2hlcmUgdGhlc2UgdmFsdWVzIGFyZTxicj4NCnVzZWTigKZhZG1p dHRlZCwgbGlrZWx5IG1vcmUgdGltZXMgdGhhbiBuZWNlc3NhcnksIHN1Y2ggdGhhdCBJIHdvdWxk buKAmXQgYmU8YnI+DQpzdXJwcmlzZWQgaWYgdGhlIGNvcHllZGl0b3Igd2VyZSB0byBlbGltaW5h dGUgYWxsIGJ1dCB0aGUgZmlyc3QgcmVmZXJlbmNlcy48YnI+DQpUaG91Z2h0cz8gUGxlYXNlIGFk dmlzZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+PGJy Pg0KT2theS4gJm5ic3A7SSdtIGhhcHB5IGZvciB5b3UgdG8gbGVhdmUgdGhpcyBhcyBpcywgdGhp cyBpcyBwcmV0dHkgbWlub3IuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Jsb2Nr cXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2 LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPkxlYXZpbmcgYXMgaXMgZm9yIG5vdywgYnV0IG9u IHRoZSBmZW5jZSBhbmQgd291bGQgd2VsY29tZSB0aG91Z2h0cyBmcm9tIG90aGVycy48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij48YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjxibG9ja3F1b3Rl IHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5z LXNlcmlmIj5UaGFua3MsPGJyPg0KUm9iPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYu MHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPksuPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0 Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9k aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_DM4PR11MB54383EB098E3344A85A2DAA5B5079DM4PR11MB5438namp_-- From nobody Thu Jun 24 12:15:07 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5E77D3A27F5; Thu, 24 Jun 2021 12:15:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Zyrkn1vGMaqi; Thu, 24 Jun 2021 12:14:57 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 79F5A3A28D7; Thu, 24 Jun 2021 12:14:40 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id EA37038BAD; Thu, 24 Jun 2021 15:16:21 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id umpEeHiBq0DK; Thu, 24 Jun 2021 15:16:20 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id E157138B34; Thu, 24 Jun 2021 15:16:19 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 6336763B; Thu, 24 Jun 2021 15:14:35 -0400 (EDT) From: Michael Richardson To: Qin Wu , netconf@ietf.org CC: core@ietf.org In-Reply-To: <5ba27e43a63e427091f3093b35be09a0@huawei.com> References: <5ba27e43a63e427091f3093b35be09a0@huawei.com> X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: [netconf] some comments on netconf-adaptive-subscription X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Jun 2021 19:15:03 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable I read: Title : Adaptive Subscription to YANG Notification Filename : draft-wang-netconf-adaptive-subscription-05.txt today. I understand the need for some kind of way to switch between some kind of periodic capture of value vs a edge-triggered/on-change proces= s. I'm a bit surprised that the example-wifi-mac module had to be created in t= he appendix to provide an example. Surely we should already have likely modules that are really being used and need this kind of thing. So one recommendation is that the document focus on already published YANG models that could benefit from this kind of subscription. (Perhaps the wifi-mac module is something that also needs to exist, and does not. I will note that CHIP/MATTER has some kind of WIFI statistics module, but it's not presently written up in YANG) I had to back to RFC8641, which I don't know well at all, to be sure I understood the xpath criteria. I guess I don't understand how RFC8641 and this document can be used for non-XML serialized YANG interactions. If bandwidth is at a premium, wouldn't you want to use draft-ietf-core-comi= -11 (YANG in CBOR) rather than XML? At which point, the obvious interaction with RFC7641 would need to be explained? It seems that the netconf (RESTCONF) and CORECONF groups should spend some more time together. =2D- ] Never tell me the odds! | ipv6 mesh network= s [ ] Michael Richardson, Sandelman Software Works | IoT architect = [ ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on rails = [ =2D- Michael Richardson . o O ( IPv6 I=C3=B8T consulti= ng ) Sandelman Software Works Inc, Ottawa and Worldwide --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAmDU2ZsACgkQgItw+93Q 3WU8LAgAjHxRTmDPiPyC9s4HNzQxyn2Fy11UwrUoSDQmv7QtvgUXh/LRh/vX5idE 5xmGtpPXglZ+cQ3bVbkGw0JzFdiN7FXcKNBlkC0OOaU4Mt8ZCqO0EgDvl7AK6wBK GxB0ph+da/0l6d6in0Mhp4jVczbCJvbVnsx9vJBUSrumQmRlNwZBlguo7TUHbNLj x+AS6yT1N0f17MlI52UdTxtE4zahK4kKjSP2aKkpBLAoiAcIN6xWfUI6I7RllrVG Rm8dx4vlsg4XOX9ogLb/mTYIPHa5uo9qjrLESFmYH0U8pXVKjRXzm6daIyUFhpX/ 4ui45y/nvC71enXfoCkqTDsriQkAqA== =YBzo -----END PGP SIGNATURE----- --=-=-=-- From nobody Thu Jun 24 13:53:07 2021 Return-Path: <0100017a3fcc223f-c6d25440-0346-4b41-9fa4-fad32b3e3b75-000000@amazonses.watsen.net> X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 683B73A2ADA; Thu, 24 Jun 2021 13:53:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.894 X-Spam-Level: X-Spam-Status: No, score=-1.894 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zmqjBUgUi27T; Thu, 24 Jun 2021 13:53:02 -0700 (PDT) Received: from a48-90.smtp-out.amazonses.com (a48-90.smtp-out.amazonses.com [54.240.48.90]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 248743A2ADB; Thu, 24 Jun 2021 13:53:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1624567980; h=From:Message-Id:Content-Type:Mime-Version:Subject:Date:In-Reply-To:Cc:To:References:Feedback-ID; bh=c4e56BDmZcbhOelX9aPlQwWa0XIxxTr2+kWzRiu+NXA=; b=dT58p95tNag/Le/ZiENTGMCVVBqGfszp16VKh3q9KoEYKtFM53gzbDTpgLgj2iME RHGkQTY1Oj9U7d78URTHKLV8WXRrGtpJv0ahJNQDdRXBqK78uLH+r3iXnjjkRf8LshO Y/UgZ2QvDLQeYowCGz3grQcfr/wq5HuhUvJ/oMCw= From: Kent Watsen Message-ID: <0100017a3fcc223f-c6d25440-0346-4b41-9fa4-fad32b3e3b75-000000@email.amazonses.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_9975103B-E338-4C97-A4D6-B8383A0FCC56" Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.100.0.2.22\)) Date: Thu, 24 Jun 2021 20:53:00 +0000 In-Reply-To: Cc: "netconf@ietf.org" , "draft-ietf-netconf-sztp-csr@ietf.org" , "netconf-chairs@ietf.org" To: "Rob Wilton (rwilton)" References: <0100017a2f082e6a-1197e3c8-f8be-4d59-ba1c-8d39029a31fc-000000@email.amazonses.com> <0100017a3ea111a8-680c5610-bc55-4a82-b7fd-7715656f4924-000000@email.amazonses.com> X-Mailer: Apple Mail (2.3654.100.0.2.22) Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES X-SES-Outgoing: 2021.06.24-54.240.48.90 Archived-At: Subject: Re: [netconf] AD review of draft-ietf-netconf-sztp-csr X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Jun 2021 20:53:06 -0000 --Apple-Mail=_9975103B-E338-4C97-A4D6-B8383A0FCC56 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Rob, =20 > I=E2=80=99m not sure. It feels less RESTful (at least to me) to not = allow the data to be provided as a single message, even if in practice = that might not make sense in most (almost all) cases. If you were using = a separate YANG RPC to send the crs-support and get the request-info = then only including the crs node in the bootstrapping data RPC then I = would have no complaints. I.e., it only feels strange to handle a = transactional dependency within the data structures of a single RPC on = what is nominally a stateless API. > =20 > Also, worth noting that using a separate YANG RPC to transmit the = capabilities avoids the need to return an error. It could just return = success with the required information. Was this approach considered at = all, and would this be too big a change? I=E2=80=99m not trying to = create extra work for you, or delay this document =E2=80=A6 > =20 > If a separate RPC to get the capabilities in undesirable or infeasible = then changing to a choice seems reasonable, but I would probably suggest = keeping =E2=80=9Cintended=E2=80=9D and probably keeping the language on = page 4 somewhat open, i.e., not strictly locking it down to doing a = handshake. I=E2=80=99m unsure it it makes sense to be concerned about the = RESTfulness of this API. Yes, it uses RESTCONF, but that is more out of = convenience than any inherent need or desire for the API to be = "RESTful=E2=80=9D. For instance, note that never could HTTP caches be = used, as each message is distinct from any other. That said, the =E2=80=9Cget-bootstrapping-data=E2=80=9D RPC *is* = idempotent, as the same POST (get-bootstrapping-data) returns the same = response (assuming the server isn=E2=80=99t updated by an operator in = the interim). This is true also for when sending the =E2=80=9Ccsr-support= =E2=80=9D and =E2=80=9Ccsr=E2=80=9D nodes, as described in the current = document. Of course, the idempotency of a YANG =E2=80=9Crpc=E2=80=9D = statement isn=E2=80=99t that meaningful, relative to a RESTCONF "POST=E2=80= =9D used to edit configuration (e.g., like )=E2=80=A6it=E2=80= =99s likely fair to say that YANG RPCs are generally NOT RESTful. Regarding using a separate RPC (returning a 2XX), yes it was = considered, however note that it is impossible for a generic device to = anticipate what the specific deployment=E2=80=99s CA infrastructure will = require in terms of 1) if *any* CSR is desired (most often not) and 2) = when desired, what key-algorithm and CSR-attributes to use (rarely would = the nearly-empty CSR a device could proactively send be viable). =20 FWIW, if an out-of-band RPC were used, most of the time it would be a = roundtrip for a no-op. The in-band approach currently described is = ideal in that it only consumes extra resources when needed. That said, it does little harm for the draft to say (in addition to = supporting the =E2=80=9Cin-band=E2=80=9D mechanism) =E2=80=9Ca device = MAY obtain the =E2=80=98request-info=E2=80=99 through an out-of-band = mechanism outside the scope of this document=E2=80=9D. If this resolves = your concern, then it=E2=80=99s an easy thing to add, and it may (to = your point) provide some flexibility. I think that it is consistent = with your last paragraph above. =20 I still think we should put =E2=80=9Ccsr-support=E2=80=9D and =E2=80=9Ccsr= =E2=80=9D under a "choice=E2=80=9D though, as the use-case for sending = both at the same time is very small and it seems wrong to = encourage/suggest it=E2=80=99s a good idea or to ask servers to have to = support the case. > 4. References. RFC 3688 probably should be normative for the XML > registry, noting that >=20 > RFC 6020 is normatively referenced. >=20 > Really? I tend to disagree as I thought the litmus test for if = something were > normative was if it had to be understood in order to implement the = RFC. >=20 > I guess the logic here is that you need to understand RFC 6020 to = understand the registry that is having entries added (given that RFC = 7950 doesn't define the registry). >=20 > But, as per below, I'll check with the IESG on this one. >=20 >=20 >=20 > You raise an interesting point about RFC 6020 being Normative, as I = see that > it is NOT normative in at least one of my other drafts. I think that = it is a > reasonable position that, if the RFC 6020 reference is only present in = the > IANA Considerations section, then it is INFORMATIVE as far as the = draft as a > whole goes. Thoughts? >=20 > Let me check with the IESG and get back to you on this one. Although, = perhaps worth noting that both these references are normative in RFC = 8343 (and they are only referenced from the IANA registry entries). > =20 > Ack, I will wait for your response on this item. > =20 > I didn=E2=80=99t really get a strong answer from other ADs on this. > =20 > Some of us felt that a normative reference is appropriate (because you = need to understand the meaning of the registry that is being updated), = and nobody objected to that characterization, but equally, some ADs = didn=E2=80=99t think that Informative is necessarily wrong and it is = probably not worth worrying about. > =20 > My recommendation is to make them normative, because that is what has = been done for other RFCs with YANG modules (and consistency is good), = and I don=E2=80=99t see any other ADs objecting to this approach. I = would regard this as the path of least resistance. Regarding "because you need to understand the meaning of the registry = that is being updated=E2=80=9D, =E2=80=9Cyou" only refers to IANA, = right? I don=E2=80=99t think SZTP-client and/or SZTP-server developers = need to know about IANA registries to implement the document, right = again? Consistency is good, yes, but not when consistently-wrong ;) = [I=E2=80=99m speaking theoretically here, not to any particular group of = people]=20 This is not something I care to block on, but I do want Normative = references to adhere to the principle of they are for *implementors* = (which doesn=E2=80=99t include IANA, IMO). Related, there=E2=80=99s = also the XML Registry (RFC 3688); should all documents publishing a YANG = module have a Normative reference due to an IANA instruction? [PS: some = RFCs exist (i.e., published) already having RFC 3688 as Informative=E2=80=A6= I wouldn=E2=80=99t by surprised if some also exist having RFC 6020 as = Informative, but a quick search didn=E2=80=99t find any] BTW, other drafts in your queue have "Informative=E2=80=9D set for RFC = 6020, and one (netconf-notification-capabilities) incorrectly references = RFC 7950 instead of RFC 6020 (As shepherd, I apologize for missing it, = but it=E2=80=99s one thing to test if all the references provided are = accurate [i.e., the doc *does* have a normative dependency on 7950], and = another to see if any references were missing altogether=E2=80=A6i.e., = finding the gaps). PS: there=E2=80=99s a separate email thread (Reuse of SZTP-CSR YANG = definition in BRSKI-AE) regarding this document that is pending your = feedback. Ideally I can collect that and thus apply all updates in one = shot. K. --Apple-Mail=_9975103B-E338-4C97-A4D6-B8383A0FCC56 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Rob,
 

I=E2=80=99m not sure.  It feels less RESTful = (at least to me) to not allow the data to be provided as a single = message, even if in practice that might not make sense in most (almost = all) cases.  If you were using a separate YANG RPC to send the crs-support and get the request-info then only including the crs node = in the bootstrapping data RPC then I would have no complaints.  = I.e., it only feels strange to handle a transactional dependency within = the data structures of a single RPC on what is nominally a stateless API.

 

Also, worth noting = that using a separate YANG RPC to transmit the capabilities avoids the = need to return an error.  It could just return success with the = required information.  Was this approach considered at all, and = would this be too big a change?  I=E2=80=99m not trying to create extra work for = you, or delay this document =E2=80=A6

 

If a separate RPC to get the = capabilities in undesirable or infeasible then changing to a choice = seems reasonable, but I would probably suggest keeping =E2=80=9Cintended=E2= =80=9D and probably keeping the language on page 4 somewhat open, i.e., = not strictly locking it down to doing a = handshake.


I=E2=80=99m unsure it it makes sense to be = concerned about the RESTfulness of this API.  Yes, it uses = RESTCONF, but that is more out of convenience than any inherent need or = desire for the API to be "RESTful=E2=80=9D.  For instance, note = that never could HTTP caches be used, as each message is distinct from = any other.

That said, the = =E2=80=9Cget-bootstrapping-data=E2=80=9D RPC *is* idempotent, as the = same POST (get-bootstrapping-data) returns the same response (assuming = the server isn=E2=80=99t updated by an operator in the interim). =  This is true also for when sending the =E2=80=9Ccsr-support=E2=80=9D= and =E2=80=9Ccsr=E2=80=9D nodes, as described in the current document. =   Of course, the idempotency of a YANG =E2=80=9Crpc=E2=80=9D = statement isn=E2=80=99t that meaningful, relative to a RESTCONF "POST=E2=80= =9D used to edit configuration (e.g., like <edit-config>)=E2=80=A6it= =E2=80=99s likely fair to say that YANG RPCs are generally NOT = RESTful.

Regarding using a separate = RPC (returning a 2XX),  yes it was considered, however note that it is = impossible for a generic device to anticipate = what the specific deployment=E2=80=99s CA infrastructure will require in terms of 1) if *any* CSR = is desired (most often not) and 2) when desired, what key-algorithm = and CSR-attributes to use (rarely would the nearly-empty CSR a device could proactively send = be viable).  

FWIW, if = an out-of-band RPC were used, = most of the time it would be a roundtrip for a no-op. =  The in-band approach currently described is = ideal in that it only consumes extra resources when = needed.

That said, it does = little harm for the draft to say (in addition to supporting the = =E2=80=9Cin-band=E2=80=9D mechanism) =E2=80=9Ca device MAY obtain the = =E2=80=98request-info=E2=80=99 through an out-of-band mechanism outside = the scope of this document=E2=80=9D.  If this resolves your = concern, then it=E2=80=99s an easy thing to add, and it may (to your = point) provide some flexibility.  I think that it is consistent = with your last paragraph above.  

I still think we should put =E2=80=9Ccsr-support=E2=80= =9D and =E2=80=9Ccsr=E2=80=9D under a "choice=E2=80=9D though, as the = use-case for sending both at the same time is very small and it seems = wrong to encourage/suggest it=E2=80=99s a good idea or to ask servers to = have to support the case.



4. References.  RFC 3688 probably should be normative = for the XML

registry, noting that

RFC 6020 is normatively referenced.


Really?  I tend to disagree as I thought the litmus test for if = something were
normative was if it had to be understood in order to implement the = RFC.


I guess the logic here is that you need to understand RFC 6020 to = understand the registry that is having entries added (given that RFC = 7950 doesn't define the registry).

But, as per below, I'll check with the IESG on this one.



You raise an interesting point about RFC 6020 being Normative, as I see = that
it is NOT normative in at least one of my other drafts.  I think = that it is a
reasonable position that, if the RFC 6020 reference is only present in = the
IANA Considerations section, then it is INFORMATIVE as far as the draft = as a
whole goes.  Thoughts?


Let me check with the IESG and get back to you on this one. =  Although, perhaps worth noting that both these references are = normative in RFC 8343 (and they are only referenced from the IANA = registry entries).

 

Ack, = I will wait for your response on this item.

 

I didn=E2=80=99t really get a strong answer from = other ADs on this.

 

Some of us felt that a = normative reference is appropriate (because you need to understand the = meaning of the registry that is being updated), and nobody objected to = that characterization, but equally, some ADs didn=E2=80=99t think that = Informative is necessarily wrong and it is probably not worth worrying about.

 

My recommendation is = to make them normative, because that is what has been done for other = RFCs with YANG modules (and consistency is good), and I don=E2=80=99t = see any other ADs objecting to this approach.  I would regard this = as the path of least resistance.


Regarding "because you need = to understand the meaning of the registry that is being = updated=E2=80=9D, =E2=80=9Cyou" only refers to IANA, right? =   I don=E2=80=99t = think SZTP-client and/or SZTP-server developers need to know about IANA = registries to implement the document, right again?   Consistency is = good, yes, but not when consistently-wrong  ;)   [I=E2=80=99m speaking theoretically here, not to any particular group of = people] 

This is not something I care to block on, but I do want = Normative references to adhere to the principle of they are = for  *implementors* (which doesn=E2=80=99t include IANA, IMO). =  Related, there=E2=80=99s also the XML Registry (RFC 3688); = should all documents publishing a YANG module have a Normative = reference due to an IANA instruction?  [PS: some RFCs exist = (i.e., published) already having RFC 3688 as Informative=E2=80=A6I = wouldn=E2=80=99t by surprised if some also exist having RFC 6020 = as Informative, but a quick search didn=E2=80=99t find any]

BTW, other drafts in your queue have = "Informative=E2=80=9D set for RFC 6020, and one = (netconf-notification-capabilities) incorrectly references RFC 7950 = instead of RFC 6020 (As shepherd, I apologize for missing it, but it=E2=80= =99s one thing to test if all the references provided are accurate = [i.e., the doc *does* have a normative dependency on 7950], and = another to see if any references were missing altogether=E2=80=A6i.e., = finding the gaps).

PS: there=E2=80=99s a = separate email thread (Reuse of SZTP-CSR YANG definition in BRSKI-AE) = regarding this document that is pending your feedback. =  Ideally I can collect that and thus apply all updates in one = shot.

K.

= --Apple-Mail=_9975103B-E338-4C97-A4D6-B8383A0FCC56-- From nobody Thu Jun 24 17:56:12 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 09CF73A31FD for ; Thu, 24 Jun 2021 17:56:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.886 X-Spam-Level: X-Spam-Status: No, score=-1.886 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yumaworks-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9YSQdha2mbsW for ; Thu, 24 Jun 2021 17:56:05 -0700 (PDT) Received: from mail-lj1-x235.google.com (mail-lj1-x235.google.com [IPv6:2a00:1450:4864:20::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D88E83A31F7 for ; Thu, 24 Jun 2021 17:56:04 -0700 (PDT) Received: by mail-lj1-x235.google.com with SMTP id d25so10247961lji.7 for ; Thu, 24 Jun 2021 17:56:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yumaworks-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=SQy6StQU3uZn8R/PmCSK5VavK6G+vxD67aEl0yPTPn0=; b=0NAkdvnEcSDjFbUBe9KvbH12nBjWaSBH75x3VSdHB8QXL0UxURI/Kk9TRfvmZBb5nO lGyv7zdusOeJF6iF3Eu24eAxkz2df+IzQqTSEBetIt5t6mw+FXjp2MOGBg1Eq7T/tG57 dCOXKqgbm9iJ3kvrtRe9iPu7R2HcfPcim3aO8xxs5V30Dw1L6zPJUPZniBDreZmGEZhm RSV2MMFvzTPNWyXyHGYNfd7SkTgUpDls5eQu+3Mc5sZVggAjmS5MHwfMPb81qBPna5EG lEgVpkoSwHvwTmrWgA46QKLKp9798tJgigXovMq8J+Z8qZFMWK4Yzk0i7wGhIB2a01Fa kxwQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=SQy6StQU3uZn8R/PmCSK5VavK6G+vxD67aEl0yPTPn0=; b=NUb2/N1Z8pg5TdYUbwCXRAbhK9jpcmTtTGW+t+6GvyqgysJXfVV9uTsxHd6edMF3RB dyjGmoTU8DSncZRYe7933Amo87AI1I/+Lj0UXF2LApDkg7STLFACJNveTuW4WoxU5Lt7 Epw2I8bWoY7d6dyolQAJPOrbjs5G3JQQ1Vg4tnWRNK2ShRXWFa805bEackK+nhq+/Wzk Iu4+Ywp6MHKX30cwWBcVoFri95EwpD3FwnVxTJGAOQwgRm38jhfh2v2A1OLJdh5WDdT/ ZQrPF5vZ5CmVDPmAlHcDh36go7QUAsvQWNLNkhqIcORDOpIyiR1NJaWbx9hrhD3vn878 M7gw== X-Gm-Message-State: AOAM53035bo3nFbrUTpfBlhfPcbkCCOyHIQC6a5zTQMmBm7mT0PbmIBY eUcuauXCZXh181rniuGplHttcRqjXsoKmsJ4f9afHb1hdksu/g== X-Google-Smtp-Source: ABdhPJzS7ZKzmSQ53eVoP56k72vvUm/TjMod//0xu7DCXgroJJHgKUowlwILBIL4EAk5P8uefjBNDaiEuWFpzwqIcRY= X-Received: by 2002:a2e:9297:: with SMTP id d23mr5902837ljh.160.1624582562195; Thu, 24 Jun 2021 17:56:02 -0700 (PDT) MIME-Version: 1.0 References: <5ba27e43a63e427091f3093b35be09a0@huawei.com> <14286.1624562075@localhost> In-Reply-To: <14286.1624562075@localhost> From: Andy Bierman Date: Thu, 24 Jun 2021 17:55:51 -0700 Message-ID: To: Michael Richardson Cc: Qin Wu , Netconf , Core Content-Type: multipart/alternative; boundary="000000000000873f7805c58c9ad8" Archived-At: Subject: Re: [netconf] [core] some comments on netconf-adaptive-subscription X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jun 2021 00:56:10 -0000 --000000000000873f7805c58c9ad8 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Thu, Jun 24, 2021 at 12:15 PM Michael Richardson wrote: > > I read: > Title : Adaptive Subscription to YANG Notification > Filename : draft-wang-netconf-adaptive-subscription-05.txt > > today. I understand the need for some kind of way to switch between > some kind of periodic capture of value vs a edge-triggered/on-change > process. > > I'm a bit surprised that the example-wifi-mac module had to be created in > the > appendix to provide an example. Surely we should already have likely > modules that are really being used and need this kind of thing. > So one recommendation is that the document focus on already published YAN= G > models that could benefit from this kind of subscription. > (Perhaps the wifi-mac module is something that also needs to exist, and > does > not. I will note that CHIP/MATTER has some kind of WIFI statistics modul= e, > but it's not presently written up in YANG) > > I had to back to RFC8641, which I don't know well at all, to be sure I > understood the xpath criteria. I guess I don't understand how RFC8641 an= d > this document can be used for non-XML serialized YANG interactions. > > If bandwidth is at a premium, wouldn't you want to use > draft-ietf-core-comi-11 > (YANG in CBOR) rather than XML? > At which point, the obvious interaction with RFC7641 would need to be > explained? > > Commenting only on the use of CORECONF, not this draft... IMO CORECONF is for constrained devices, possibly on constrained networks. But if only the network is constrained, then perhaps only CBOR is really needed. E.g., Use RESTCONF and support "application/yang-data+cbor" in the Accept and Content-Type headers. Expect developers to use this media type in creative ways ;-) It seems that the netconf (RESTCONF) and CORECONF groups should spend some > more time together. > I first raised these issues in NETCONF WG in 2013 https://datatracker.ietf.org/doc/html/draft-bierman-netconf-efficiency-exte= nsions-00 There was not then (or is now) much interest in minimizing resources used by NETCONF. The WG rejected other efforts as well https://datatracker.ietf.org/doc/html/draft-mahesh-netconf-binary-encoding-= 00 IMO the WG missed the point of this draft, which was to preserve the massive and expensive investment in the NETCONF application layer already deployed. Just optimize the network traffic and not rewrite any feature code. Andy > -- > ] Never tell me the odds! | ipv6 mesh > networks [ > ] Michael Richardson, Sandelman Software Works | IoT > architect [ > ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on > rails [ > > > > > > > -- > Michael Richardson . o O ( IPv6 I=C3=B8T consul= ting ) > Sandelman Software Works Inc, Ottawa and Worldwide > > > > > _______________________________________________ > core mailing list > core@ietf.org > https://www.ietf.org/mailman/listinfo/core > --000000000000873f7805c58c9ad8 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


=
On Thu, Jun 24, 2021 at 12:15 PM Mich= ael Richardson <mcr+ietf@sand= elman.ca> wrote:

I read:
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Title=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0:= Adaptive Subscription to YANG Notification
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Filename=C2=A0 =C2=A0 =C2=A0 =C2=A0 : draft-wan= g-netconf-adaptive-subscription-05.txt

today.=C2=A0 I understand the need for some kind of way to switch between some kind of periodic capture of value vs a edge-triggered/on-change proces= s.

I'm a bit surprised that the example-wifi-mac module had to be created = in the
appendix to provide an example.=C2=A0 Surely we should already have likely<= br> modules that are really being used and need this kind of thing.
So one recommendation is that the document focus on already published YANG<= br> models that could benefit from this kind of subscription.
(Perhaps the wifi-mac module is something that also needs to exist, and doe= s
not.=C2=A0 I will note that CHIP/MATTER has some kind of WIFI statistics mo= dule,
but it's not presently written up in YANG)

I had to back to RFC8641, which I don't know well at all, to be sure I<= br> understood the xpath criteria.=C2=A0 I guess I don't understand how RFC= 8641 and
this document can be used for non-XML serialized YANG interactions.

If bandwidth is at a premium, wouldn't you want to use draft-ietf-core-= comi-11
(YANG in CBOR) rather than XML?
At which point, the obvious interaction with RFC7641 would need to be
explained?



Commenting only on the = use of CORECONF, not this draft...
IMO CORECONF is for constraine= d devices, possibly on constrained networks.
But if only the netw= ork is constrained, then perhaps only CBOR is really needed.

=
E.g., Use RESTCONF and support "application/yang-data+cbor&= quot; in the Accept and Content-Type headers.
Expect developers t= o use this media type in creative ways ;-)



It seems that the netconf (RESTCONF) and CORECONF groups should spend some<= br> more time together.

I first raised thes= e issues in NETCONF WG in 2013


IMO the WG missed the point of this draft, which was to preserve the massi= ve and expensive
investment in the NETCONF application layer alre= ady deployed. Just optimize the network traffic
and not rewrite a= ny feature code.


Andy

--
]=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Never tell me the o= dds!=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0| ipv6 me= sh networks [
]=C2=A0 =C2=A0Michael Richardson, Sandelman Software Works=C2=A0 =C2=A0 =C2= =A0 =C2=A0 |=C2=A0 =C2=A0 IoT architect=C2=A0 =C2=A0[
]=C2=A0 =C2=A0 =C2=A0= mcr@sandelman.ca=C2=A0 http://www.sandelman.ca/=C2=A0 =C2=A0 =C2=A0 = =C2=A0 |=C2=A0 =C2=A0ruby on rails=C2=A0 =C2=A0 [






--
Michael Richardson <mcr+IETF@sandelman.ca>=C2=A0 =C2=A0. o O ( IPv6 I=C3=B8T co= nsulting )
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Sandelman Software Works Inc, Otta= wa and Worldwide




_______________________________________________
core mailing list
core@ietf.org
https://www.ietf.org/mailman/listinfo/core
--000000000000873f7805c58c9ad8-- From nobody Thu Jun 24 18:05:33 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 049653A3278; Thu, 24 Jun 2021 18:05:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2A4XsDMp2Qcl; Thu, 24 Jun 2021 18:05:23 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 48B223A3273; Thu, 24 Jun 2021 18:05:23 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id F118338BAD; Thu, 24 Jun 2021 21:07:05 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 2YPC9PUeqzBG; Thu, 24 Jun 2021 21:07:03 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id BFF013898C; Thu, 24 Jun 2021 21:07:03 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 571701C6; Thu, 24 Jun 2021 21:05:18 -0400 (EDT) From: Michael Richardson to: Qin Wu , netconf@ietf.org, core@ietf.org In-Reply-To: <14286.1624562075@localhost> References: <5ba27e43a63e427091f3093b35be09a0@huawei.com> <14286.1624562075@localhost> X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [netconf] [core] some comments on netconf-adaptive-subscription X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jun 2021 01:05:28 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Michael Richardson wrote: > I had to back to RFC8641, which I don't know well at all, to be sure I > understood the xpath criteria. I guess I don't understand how RFC8641 > and this document can be used for non-XML serialized YANG interaction= s. > If bandwidth is at a premium, wouldn't you want to use > draft-ietf-core-comi-11 (YANG in CBOR) rather than XML? At which > point, the obvious interaction with RFC7641 would need to be explaine= d? > It seems that the netconf (RESTCONF) and CORECONF groups should spend > some more time together. I didn't finish my thought here. Specifically, it seems that the CORE WG is doing a lot of stuff with CoAP Observes and SENML and all sorts of interesting triggers. It seems that there ought to be more common work here. Routers are really the original Things Of Internet. =2D- Michael Richardson . o O ( IPv6 I=C3=B8T consulti= ng ) Sandelman Software Works Inc, Ottawa and Worldwide --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAmDVK84ACgkQgItw+93Q 3WWbOAf/aRp0QD6u5WY3667mQNqq7si7ue9gkL4OLn3PBQYgrfSM9cdTPrBDbXu0 3zBZMZENvg4KxE/XsBtXCS4wPIT0oDK5dh4oBs3W374nmzm9OufvMOUZTPnn0RQx vjpzaFn9XmNSEGycb+OxFgIGycIGWZ2/ZCspQvewb45XQoWfLQn3JjTHmfZ/D3FX N9CzcTtWAKHTg8HdeGAT+MX89aVaDPAq1z9HvjMNdK0IVTKcr8zr+ixT1M1tAT05 f75aklNp+jEdihZJmzrROkuvEJdfO+Wv+F056na0EEu7+gylyZdiN2COaW+GNkrj j46QREd66bvwSVEFrmPG+Ha/+P4IHw== =QvY9 -----END PGP SIGNATURE----- --=-=-=-- From nobody Fri Jun 25 03:27:33 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A196B3A1066; Fri, 25 Jun 2021 03:27:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.596 X-Spam-Level: X-Spam-Status: No, score=-9.596 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=illQBdrw; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=lhH24rnt Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OM6UraOhwp5I; Fri, 25 Jun 2021 03:27:23 -0700 (PDT) Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E841E3A1065; Fri, 25 Jun 2021 03:27:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4546; q=dns/txt; s=iport; t=1624616842; x=1625826442; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=Bqw2hz4YlrP9EjY0lgUqVPfFw8bcVqXNvUphj2naCQg=; b=illQBdrwK8UpBIjurVoZ8xUqEqFkL7oZP3Vl9wPaHgkaNLn9YAVxYSMy gHZ+zPDvNWSW2zCzsWBSDLLD1jqrDnhb4DQ6CLo9X6IGg5awKcnxOx+kR CCjZ1AwLXDi8PiWZYgQfA48v183VquPXv5e4LGkDN4GzVskrYbXlrBVXi Y=; IronPort-PHdr: =?us-ascii?q?A9a23=3A3P730BOwApAeQOoHdUkl6nfnWUAX0o4cdiYO4?= =?us-ascii?q?5wrhrZLe6Ll9J2xdEDc5PA4iljPUM2b7v9fkOPZvujmXnBI+peOtn0OMfkuH?= =?us-ascii?q?x8IgMkbhUosVciCD0CoN/fsYyE+Gc1EElRsrDm3NEFPE5P4YFvf6nS58T8VH?= =?us-ascii?q?ED5Mgx4buT4E4LflYK5zee3rpbSeA5PwjG6ZOAaEQ=3D=3D?= IronPort-HdrOrdr: =?us-ascii?q?A9a23=3AdalVDqqmIw6kl40+jef7AzAaV5uXL9V00z?= =?us-ascii?q?EX/kB9WHVpm5Oj9vxGzc506farslkssSkb6K+90KnpewK6yXcH2/huAV7EZn?= =?us-ascii?q?inhILIFvAi0WKG+V3d8kLFh5VgPMtbAs1D4ZjLfCRHZKXBkUqF+rQbsaO6Gc?= =?us-ascii?q?mT7I+0pRoAPGIaCZ2IrT0JdzpzeXcGIjWucKBJbKZ0kfA33gZIF05nCviTNz?= =?us-ascii?q?0gZazuttfLnJXpbVotHBg88jSDijuu9frTDwWY9g12aUIM/Z4StUz+1yDp7K?= =?us-ascii?q?SqtP+2jjXG0XXI0phQkNz9jvNeGc23jNQPIDmEsHfsWG0hYczHgNkGmpDo1L?= =?us-ascii?q?8YqqiUn/7mBbUq15rlRBDznfIq4Xi67N9h0Q659bbSuwqTnSWwfkNLNyMGv/?= =?us-ascii?q?MFTvMcgHBQ4+2VF8lwrj6kXtNsfGD9tTW46N7SWx5wkE2o5XIkjO4IlnRaFZ?= =?us-ascii?q?ATcblLsOUkjQ5o+bo7bWnHAbocYaNT5QDnlYBrWELfa2qcsnhkwdSqUHh2Fh?= =?us-ascii?q?CaQlIassjQ1zRNhnh2w0YR2cRaxx47hd0AYogB4/6BPrVjlblIQMNTZaVhBP?= =?us-ascii?q?0ZSc/yDmDWWxrDPG+bPFyiHqAaPHDGrYLx/dwOla2XkVwzvdMPcbH6IR1lXE?= =?us-ascii?q?IJCjbT4Py1rdR2G0r2MRCAtBzWu7ZjDrZCy8/BeIY=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AYDQDirtVg/5FdJa1agQmBV4FTKSg?= =?us-ascii?q?Hd1o3MQuEPYNIA4U5iHkDgQ2ZEIFCgREDVAsBAQENAQExDgIEAQGBXoJ0Ahe?= =?us-ascii?q?CWAIlNwYOAgQBAQESAQEFAQEBAgEGBHEThWgNhkUBAQEDARIREQwBATcBCwQ?= =?us-ascii?q?CAQgRBAEBAQICJgICAjAVCAgCBAENBQgaglCCVQMOIQEDmwMBgToCih96gTK?= =?us-ascii?q?BAYIHAQEGBASFLhiCMgmBECqCe4QOhUKBHyccgUlEgRVDgioHLz6CBIInARq?= =?us-ascii?q?DFTaCLoMcbjsID3IUEzQ5DQKRfScCgwuVQJIECoMgnikSpXyVZKRWAgICAgQ?= =?us-ascii?q?FAg4BAQaBaiWBWXAVgyQJRxcCDo4rFoECAQiBb1SKXnM4AgYBCQEBAwl8imk?= =?us-ascii?q?BgRABAQ?= X-IronPort-AV: E=Sophos;i="5.83,298,1616457600"; d="scan'208";a="906799766" Received: from rcdn-core-9.cisco.com ([173.37.93.145]) by rcdn-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 25 Jun 2021 10:27:21 +0000 Received: from mail.cisco.com (xbe-rcd-003.cisco.com [173.37.102.18]) by rcdn-core-9.cisco.com (8.15.2/8.15.2) with ESMTPS id 15PARHNb016987 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 25 Jun 2021 10:27:20 GMT Received: from xfe-aln-003.cisco.com (173.37.135.123) by xbe-rcd-003.cisco.com (173.37.102.18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.792.15; Fri, 25 Jun 2021 05:27:16 -0500 Received: from xhs-rtp-002.cisco.com (64.101.210.229) by xfe-aln-003.cisco.com (173.37.135.123) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.2.792.15; Fri, 25 Jun 2021 05:27:16 -0500 Received: from NAM11-BN8-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server (TLS) id 15.0.1497.18 via Frontend Transport; Fri, 25 Jun 2021 06:27:15 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=i7ZCxkw0fAml++HbnQV/soOwNuwJvAYt+as9n5/y2SBNQp80fmF7rW4wgOpG/xYgNNUh9qacszHmW2ps9QwyHTma6RtNM+Ql1JE4IGw6VhIWdnmJMBpJeWJIk7RfQs2jqIxoGAyThkumxUCozA0FeFWE10ZwiKIsT96cF3miygWIP3x2kG6JBdl3cSQMmtc/qatLLGeCqC04TuYGM6LanPkYPs/ruLnModt6XW7aWnxo4Y+G3CjhTmI2aouPCfV7ZWP4PZoMcutosmUrEK4ZGVRa6hKV3D3Kca5SRUsAUJo7jGfMgpZLJCh4NSOuINf2iJ7tpY17ToCzxsC1u+do1A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Bqw2hz4YlrP9EjY0lgUqVPfFw8bcVqXNvUphj2naCQg=; b=BnHa67X/trQdpUjZE1KX8Qf8Zw92eEH72wkC6IYQzhRBxlJLgzWQ+jUvd4t2amuyfAG+rZlw9P0/AV2MS1752F8zolf1ynOnkv9oKwh7TjVFiO6fC2Du1AMx0XUpMxAe2ZUfmDyUSg/U/VUNMaXJ+MjhF0+O3AZXFTO532QAn1a5m23ea6uyQaA7sD4pmJIhsgQjT7/bKfAPTsESUNrwq3thYb9Cqm44ty+CE/3wih/JpSKRs/ldaYWRRSBu0UFALpCOMCFIZsF08Hasqj3d5IHI8qkGVx3W6Hd8DaJVO4ywjpmbenv1qOnpO2oSx5xt4d/+Z1w2v1/bmljZ23mBDA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Bqw2hz4YlrP9EjY0lgUqVPfFw8bcVqXNvUphj2naCQg=; b=lhH24rnthx5pRSiWhawDfJBQWB0AxPCLpqGZ/Rwb5K4d+xGa0bekTxcgA+EBjVECmbI4ifGh3iGzPBnKF7yFmE37OneiDEYZ4CtR7EZIX4cp1/iZ/Q/a0M0NOPCW04Hp0YrDkjAjQ63X4T6GE9zDcikTn3SHozib0JUsg2zmPVs= Received: from DM4PR11MB5438.namprd11.prod.outlook.com (2603:10b6:5:399::21) by DM6PR11MB3131.namprd11.prod.outlook.com (2603:10b6:5:6d::32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4242.22; Fri, 25 Jun 2021 10:27:14 +0000 Received: from DM4PR11MB5438.namprd11.prod.outlook.com ([fe80::e14c:8880:1101:bb0c]) by DM4PR11MB5438.namprd11.prod.outlook.com ([fe80::e14c:8880:1101:bb0c%7]) with mapi id 15.20.4264.023; Fri, 25 Jun 2021 10:27:14 +0000 From: "Rob Wilton (rwilton)" To: Michael Richardson , Kent Watsen , "netconf@ietf.org" , "anima@ietf.org" CC: "Werner, Thomas" , "Fries, Steffen" Thread-Topic: [Anima] Reuse of SZTP-CSR YANG definition in BRSKI-AE Thread-Index: AQHXaHMv02/ZyJYgBk6FQT8B+ePWr6skg4MA Date: Fri, 25 Jun 2021 10:27:14 +0000 Message-ID: References: <3a31e33678484625b9f4f3810e673e56@siemens.com> <0100017a1b4d2e94-aeaaa06e-8dc0-4163-a747-692e72b0d75c-000000@email.amazonses.com> <8407.1624138175@localhost> <0100017a2e9f69ee-5d037ce3-62dd-4825-922c-8a08b545d166-000000@email.amazonses.com> <11325.1624482172@dooku> In-Reply-To: <11325.1624482172@dooku> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: sandelman.ca; dkim=none (message not signed) header.d=none;sandelman.ca; dmarc=none action=none header.from=cisco.com; x-originating-ip: [82.12.233.180] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: fb78fd65-88b5-4bde-fae4-08d937c3cd1e x-ms-traffictypediagnostic: DM6PR11MB3131: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: iRnJB2d4Nmt3yU1YWxzIFZHy3z/teKi1H4rtRj5UaP9spBvI4fs8OHbr2o5ehQCm4BYfvGbzj25AW56ClN18neHJ/02yW9ygX2d84ZFncaezAOnoJv8OiDoiNSL9vLxOccdUiyP+qSJK78HgJTXgb5H6rA4YrnqeJlq/yxRuxxruyiFNuWI7D7w1drr/I4H1AftqGwtg8eo9hRapVycd8a4Teyfm1JgXJ6M6uCFQGkhSeRN8H9jdVWIVP6miB0RJbqLHz4QuOe/plToaybUnxNwlJSgkwoSh8mdRaQ4olfrBfKl6lAgBClvIAs+0aiiHVZgj3/3LX4CvWLJucsGt4W3yPevPT9g9T+Yxa3KOGBEK/2tKm9qVU38zpjlNv0YS//N9c7noG2OpSc3zqbWVh2oC1xF5F3WYIc0752WH89WBlx5ZLW+XQ0IXZkhGCduVzMEaINEMhv6t2+CciXvDXBi5+1mna2Viz1kmOsxyq8UwQZj8VfKriebpdpDQNsqYgqgdjUuPuj0H1IxtNEh+mLm/jS+7ueqfzn+4PWdV5X71ABq965VaYFYf7E26U8CxBnbbYUdRnScGmXg8CNBMVR7SOLVBF3CyUugDxkhxSg2mkLAXdKE65T6U0y6ss+Ja9rzkcokwr5YdhBCU0GWkQTLfhysGNE4LTPrpudvVPc4eATmCwrx7vknhVmMRWnt+SMdtLO2Kr+hGCdQsX2sM9jhCTYRoLLYifybFtIR7RMePCzlxwoa/F2/hMDm0qgZp8v/Cx3UWYXp2YpbLTsxWgg== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DM4PR11MB5438.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(366004)(39860400002)(136003)(396003)(346002)(376002)(71200400001)(86362001)(38100700002)(26005)(53546011)(6506007)(54906003)(7696005)(186003)(316002)(122000001)(33656002)(2906002)(110136005)(966005)(9686003)(478600001)(4326008)(83380400001)(66476007)(64756008)(66946007)(66446008)(52536014)(55016002)(8676002)(66556008)(5660300002)(76116006)(8936002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?b3lPVmFqdktrRnNqTGZtbjBIMFZia0FYem5Ba3pscTFxTVVtUWtiMkU5NlZD?= =?utf-8?B?dXdWUDJxUXY2TEhRWFdmV0dPUXhWTmNJemFuZmxFZ0RadEFiY0JjOEFyZ0RY?= =?utf-8?B?dGV6REpjbzlFcXB2bjBuSHdhUk1WK3owQ3ZBeHVSeHE3TXkwUXRTd2FkZkFY?= =?utf-8?B?c3JQREZDbkY2Wm9SYnNVZDk0V2c4YnBuTVk0c1c2MVd5UTdqUXVDanM2aHlD?= =?utf-8?B?Qy9DU0ZYRTUxT2t6eStQWDdPaEgwU0c4MGlSQ0hnY0d2OXBrcy8yUjIvTmtF?= =?utf-8?B?dHhLVkhVYlZjR0hUNHcwK2NyT2hHM29FSkRiN1FsTVAraElxR2FtZXFwRk95?= =?utf-8?B?ZHlqcXVHeWRZMTNyTnV3ZEpCck9wVzZHK0ZYOXU0eWZhVzRDYkpBUC9KbW03?= =?utf-8?B?cGVaSjhVQXhsczN5Qm9Rcit1cE16dUdCaGZrZk5QeGllNWE2SXlRaTlyWlNr?= =?utf-8?B?d1NSdUJ4UTBPTllyaFpnb20xbFlISDRJNFE4SWtaUXJFTXNrOE9teUMvMktN?= =?utf-8?B?WFIxZDl0RXVNM0VFbGR5ZHp2clROazgrYldzZjlBRWxPVndXK2FvZGZQc2dK?= =?utf-8?B?YS9SZEZqSjFrZEl6cWIwNjlCZUdQbVV3RlZKVzZuNE90V3ZoL0N4ZDZWcTRi?= =?utf-8?B?QkhvYzdDZDl6Sms4ajg5dklzY3V5c0R0RTBnYWsrd1FPK3FQbzBSa3JNSktr?= =?utf-8?B?YXdZZ1k5SXRqVEVrRy8zU0ZRTjRjMVNXb0pRVytkVFg1TDcwMGp5VDZNRmpN?= =?utf-8?B?R1lJUE54ZTUxclZvQVdUY0N3UVMyUkU3VHZqbXN5WU9uTWVibkxjZnNUajBs?= =?utf-8?B?MUFIZUhMSVFtVndBMFlKZ1BRdGFzV2lrSHFMY0kxOFhlc3RicjRsZlBOTStR?= =?utf-8?B?eG9pdlZYTGQ4dklRNHYvNGwweG96MllrUHlRU2d2bER2V24ycWxxbmttb2h2?= =?utf-8?B?THlzbjNQcmhGKy9NcWRPWkdhYXZHc0E4Yk1aN2phVXZPWkZpaXNOdlgyeFpH?= =?utf-8?B?cFd6a0xVOW8yVWRuUFd5UWtQbGVtUWtLaEs3VFExWEpNbFpkMWxDOHl1ZHkz?= =?utf-8?B?VnNmclRYVkFFWVdWcTRMSzNERWt3MjVtR1ZKaUFBYmJqVVFuYVlGOUpJbm9p?= =?utf-8?B?UVh3YnU5OTdHbjZaWUx3M3ViRWNoR0tyOXFsYTdqMFNUeDY5WTBlWFhOTTRn?= =?utf-8?B?T2YwdVNsNmNLajI3Z1ZSRGJNV2M3Z3QzZkp6UWtraXBQVkkzeEM5a1RMdEZT?= =?utf-8?B?ZmNIRncwT0M0aFZQbUlUbEl6L05heXNJUklCK2xYN0NZcnE0MTFJT2pTdEhX?= =?utf-8?B?ZkZ5N0RhZHk2RzhXTTFnTzNpdkFPKzFmdjRSckxWdnUwSUt4OC9mUWhFa3dH?= =?utf-8?B?eGN3dmJUamlaR29yVDdaelo3ZE9ZRlpyeWFHYndrU2ZpZWhFdllxRmI2eGRi?= =?utf-8?B?dm00WnQ5aytuMjkvSUhZYjBmODBrd2duM1FRMTlXUFRBRTYvUFI3RWtFaWZx?= =?utf-8?B?b0Y3amVsbEJqcHl4Rm1lRXZOcjJHdzdDQ2Y4ZytnOXBCalo1MmhBdGJZM241?= =?utf-8?B?djJzbWRMeGZDUE1sSVhITFdJZGllVEtEeDNYNy83VXRoTFhsMFE4T21vWEFp?= =?utf-8?B?aXFHdjRydmg1anBRN3RtZ09iL1hMeTBKd3R4VlVFUTljcGRkVzY5Z2lNUFZH?= =?utf-8?B?VENjSi9uRU1BdXp3a0xkRWJhRCtoQ0dkRmFHOERjTGFOS2sxQWthTEpKS1Y0?= =?utf-8?Q?qjBr7yZZo6bY7wG3IsvGW+1PmVJhiAM/nksMOjX?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM4PR11MB5438.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: fb78fd65-88b5-4bde-fae4-08d937c3cd1e X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Jun 2021 10:27:14.8000 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 8lvZxZLJHQq0OlB4L2EFk7yaHvswDOpGw2A5T8EgUe5R8ozK+t68vmld2tAqovlU8wYDynPxxNn96yO57O/qhQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR11MB3131 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.18, xbe-rcd-003.cisco.com X-Outbound-Node: rcdn-core-9.cisco.com Archived-At: Subject: Re: [netconf] [Anima] Reuse of SZTP-CSR YANG definition in BRSKI-AE X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jun 2021 10:27:28 -0000 SGkgS2VudCwgTWljaGFlbCwNCg0KUmU6DQo+IElzIGl0IHByb3BlciB0byByZXNldCBhIE5FVENP TkYgcHVibGljYXRpb24gZm9yIGFub3RoZXIgV0c/ICBSb2I/DQoNCk5vLCBidXQgaWYgdGhlcmUg YXJlIHNpbXBsZS9xdWljayBjaGFuZ2VzIHRoYXQgd2UgY2FuIG1ha2UgdG8gdGhlIE5FVENPTkYg ZHJhZnQgdG8gbWFrZSBpdCBtb3JlIHJldXNhYmxlIHRoZW4gSSB0aGluayB0aGF0IGlzIGEgZ29v ZCB0aGluZy4NCg0KSW4gdGhpcyBjYXNlLCBJIHRoaW5rIHRoYXQgdGhpcyBzaG91bGQgY29tZSBk b3duIHRvIHRoZSBkaXNjcmV0aW9uIG9mIHRoZSBzWlRQLUNTUiBhdXRob3JzLCBnaXZlbiB0aGF0 IEJSU0tJLUFFIGFsc28gaGF2ZSB0aGUgY2hvaWNlIG9mIGp1c3QgY29weWluZyB0aGUgWUFORyB0 aGF0IHRoZXkgbmVlZC4NCg0KSSB3b3VsZCBiZSBva2F5IHNlZWluZyB0aGUgY3NyIHN0cnVjdHVy ZSBwdXQgaW50byBhIGdyb3VwaW5nLCBidXQgSSB3b3VsZCBzdHJvbmdseSBwcmVmZXIgdGhhdCB0 aGV5IGdldCBtb3ZlZCBvdXQgb2YgdGhlIGlldGYtc3p0cC1jc3IueWFuZyBtb2R1bGUsIHNvIHRo YXQgdGhlIENTUiBncm91cGluZ3MgY2FuIGJlIGltcG9ydGVkIHdpdGhvdXQgcmVxdWlyaW5nIGFu eSBpbXBvcnQtb25seSBpbXBvcnQgZGVwZW5kZW5jeSBvbiBpZXRmLXN6dHAtY3NyIChhbmQgcG9z c2libHkgaWV0Zi1zenRwLWJvb3RzdHJhcC1zZXJ2ZXIpLg0KDQpIZW5jZSwgbXkgc3VnZ2VzdGlv biwgaWYgeW91IHdlcmUgdG8gZG8gdGhpcywgd291bGQgYmUgZm9yIGEgc2VwYXJhdGUgaWV0Zi1j c3ItdHlwZXMueWFuZyBtb2R1bGUgZGVmaW5lZCBhcyBwYXJ0IG9mIHRoZSBTWlRQLUNTUiBkcmFm dC4NCg0KVGhhbmtzLA0KUm9iDQoNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206 IEFuaW1hIDxhbmltYS1ib3VuY2VzQGlldGYub3JnPiBPbiBCZWhhbGYgT2YgTWljaGFlbCBSaWNo YXJkc29uDQpTZW50OiAyMyBKdW5lIDIwMjEgMjI6MDMNClRvOiBLZW50IFdhdHNlbiA8a2VudCtp ZXRmQHdhdHNlbi5uZXQ+OyBuZXRjb25mQGlldGYub3JnOyBhbmltYUBpZXRmLm9yZw0KQ2M6IFdl cm5lciwgVGhvbWFzIDx0aG9tYXMtd2VybmVyQHNpZW1lbnMuY29tPjsgRnJpZXMsIFN0ZWZmZW4g PHN0ZWZmZW4uZnJpZXNAc2llbWVucy5jb20+DQpTdWJqZWN0OiBSZTogW0FuaW1hXSBSZXVzZSBv ZiBTWlRQLUNTUiBZQU5HIGRlZmluaXRpb24gaW4gQlJTS0ktQUUNCg0KDQpLZW50IFdhdHNlbiA8 a2VudCtpZXRmQHdhdHNlbi5uZXQ+IHdyb3RlOg0KICAgID4+IFdlIHJlYWxseSBqdXN0IHdhbnQg Y29udGFpbmVyIGNzci1zdXBwb3J0LCBjc3ItZ2VuZXJhdGlvbiwgY3NyLCA/Pz8NCiAgICA+PiAN CiAgICA+PiBNYXliZSB3ZSBjb3VsZCBjaGF0IGFib3V0IHRoaXMgbW9yZS4NCiAgICA+PiBXZSBo YXZlIGEgcmVndWxhciBUaHVyc2RheSA5OjMwIEVTVCBkZXNpZ24gdGVhbS4NCiAgICA+PiANCiAg ICA+Pj4+IFRoZSBhbHRlcm5hdGl2ZSB3b3VsZCBiZSB0byBkZWZpbmUgYW4gb3duIG1vZHVsZSBt b2RlbGVkIGluIGEgc2ltaWxhci4NCiAgICA+PiANCiAgICA+Pj4gWW91IGNhbiBkbyB0aGlzLg0K ICAgID4+IA0KICAgID4+IEkgdGhpbmsgdGhhdCB3ZSBjYW4gaGF2ZSBzb21lIGNvbW1vbiBtaW5k c2hhcmUgaGVyZS4NCg0KICAgID4gT25lIG9wdGlvbiB3b3VsZCBiZSB0byBtb3ZlIHN0dWZmIGlu dG8gaWV0Zi1jcnlwdG8tdHlwZXPigKZhcyB0aGF0IG1vZHVsZQ0KICAgID4gYWxyZWFkeSBkZWZp bmVzIGEgbnVtYmVyIG9mIGdyb3VwaW5nIHN0YXRlbWVudHMgZm9yIGhhbmR5IHN0cnVjdHVyZXMu DQogICAgPiBUaGF0IHNhaWQsIHRoZXNlIHN0cnVjdHVyZXMgYXJlIG5vdCBjb250ZXh0LWZyZWXi gKZ0aGV5IGFyZSB2ZXJ5IG11Y2gNCiAgICA+IGVudHdpbmVkIGluIGEgc3BlY2lmaWMgZGlhbG9n IHRoYXQgaXMgcmF0aGVyIHNwZWNpZmljIHRvIGJvb3RzdHJhcHBpbmcNCiAgICA+IHByb2Nlc3Nl cy4gIFtGV0lXLCAganVzdCBhZGRpbmcg4oCcY21j4oCdIGFuZCDigJxjbXAiIHR5cGVkZWZzIHRv DQogICAgPiBjcnlwdG8tdHlwZXMsIGFsb25nc2lkZSB0aGUgZXhpc3Rpbmcg4oCcY3Ny4oCdIChl LmcuLCDigJxwMTDigJ0pIHR5cGVkZWYsIG1pZ2h0DQogICAgPiBiZSBhIGdvb2QgdGhpbmddDQoN ClVuZGVyc3Rvb2QuDQoNCiAgICA+IEFub3RoZXIgb3B0aW9uIHdvdWxkIGJlIHRvIG1vdmUgc3R1 ZmYgaW50byBncm91cGluZyBzdGF0ZW1lbnRzLCBpbiB0aGUNCiAgICA+IHNhbWUgbW9kdWxlLCB0 aGF0IGFyZSBpbW1lZGlhdGVseS4gIEluIHRoZW9yeSB0aGlzIHdvdWxkIGhhdmUgbm8gaW1wYWN0 DQogICAgPiB0byB0aGUgb24tdGhlLXdpcmUgZm9ybWF0LiAgSG93ZXZlciwgaXTigJlzIHNvbWV3 aGF0IGxhdGUgaW4gdGhlIHByb2Nlc3MNCiAgICA+IHRvIGVudGVydGFpbiB0aGlzLCBhcyB0aGUg ZHJhZnQgaXMgaW4gdGhlIEFEIHF1ZXVlIChBRC1yZXZpZXcgd2FzIGp1c3QNCiAgICA+IHBvc3Rl ZCB0b2RheSkgYW5kIG5vIGRvdWJ0IHdlIHdvdWxkIGRpY2tlciBvdmVyIGhvdyBtYW55IGdyb3Vw aW5ncyB0bw0KICAgID4gY3JlYXRlIGFuZCB3aGV0aGVyIHRoZXkgc2hvdWxkIGJlIHB1dCBpbnRv IGFub3RoZXIgZHJhZnQgdG8gd2hpdGV3YXNoDQogICAgPiBvdXQgdGhlIFNaVFAtc3RpbnQuICBJ cyBpdCBwcm9wZXIgdG8gcmVzZXQgYSBORVRDT05GIHB1YmxpY2F0aW9uIGZvcg0KICAgID4gYW5v dGhlciBXRz8gIFJvYj8NCg0KSWYgd2UgY2FuIGRvIHRoaXMgYXQgdGhpcyBwb2ludCwgdGhhdCB3 b3VsZCBJIHRoaW5rLCBiZSBiZXN0IGZvciBhbGwgb2YgdXMuDQoNCklmIGl0J3MganVzdCBhdCBB RCwgdGhlbiBpdCBoYXNuJ3QgZ290dGVuIElFU0cgcmV2aWV3cyB5ZXQsIGFuZCB0aGVyZSBjb3Vs ZA0KYmUgbWFueSB3ZWVrcyBvZiBiYWNrIGFuZCBmb3J0aCB5ZXQgdG8gZ28uDQoNClRoZSBob3Jz ZSB0cmFkaW5nIHNob3VsZG4ndCB0YWtlIG1vcmUgdGhhbiAzMCBtaW51dGVzIG9mIHJlYWwtdGlt ZQ0KZGlzY3Vzc2lvbiwgbWF5YmUgd2F5IGxlc3MuICANCg0KLS0gDQpdICAgICAgICAgICAgICAg TmV2ZXIgdGVsbCBtZSB0aGUgb2RkcyEgICAgICAgICAgICAgICAgIHwgaXB2NiBtZXNoIG5ldHdv cmtzIFsgDQpdICAgTWljaGFlbCBSaWNoYXJkc29uLCBTYW5kZWxtYW4gU29mdHdhcmUgV29ya3Mg ICAgICAgIHwgbmV0d29yayBhcmNoaXRlY3QgIFsgDQpdICAgICBtY3JAc2FuZGVsbWFuLmNhICBo dHRwOi8vd3d3LnNhbmRlbG1hbi5jYS8gICAgICAgIHwgICBydWJ5IG9uIHJhaWxzICAgIFsgDQoJ DQoNCg0KDQoNCg0KDQo= From nobody Fri Jun 25 03:51:24 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6FB223A115A; Fri, 25 Jun 2021 03:51:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.595 X-Spam-Level: X-Spam-Status: No, score=-9.595 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=i+HSxhTf; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=dBHug9Cq Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Mmf9820jm2jc; Fri, 25 Jun 2021 03:51:18 -0700 (PDT) Received: from alln-iport-1.cisco.com (alln-iport-1.cisco.com [173.37.142.88]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B61C13A1158; Fri, 25 Jun 2021 03:51:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=53472; q=dns/txt; s=iport; t=1624618277; x=1625827877; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=6TSF6iqJI2fsh4puA59z7QgnPwUjrtGxfNHc/7b75J0=; b=i+HSxhTfrmnO48yzITiwdCltxqUCzvJdb6Ggzu+ssLbTp+O1uiuUpgGG WU7ILZT9IxbiPUlfKCUWuK5B4euC+bTJoeJ01tPUEusUK4FJrgFiMGgUv k0ynfdFp9fauSpZ8JHVESswEXqL2qIQe2xsr4P2woqKDofDEiFS1+UHhr 8=; X-IPAS-Result: =?us-ascii?q?A0AhAgDmtNVgl5xdJa1aHgEBCxIMggwLgSMwIy5+WjcxC?= =?us-ascii?q?4Q9g0gDhTmIeQOBDY5OikKBLhSBEQNUCwEBAQ0BAT8CBAEBhFICF4JYAiU0C?= =?us-ascii?q?Q4CBAEBAQEDAgMBAQEBBQEBBQEBAQIBBgQUAQEBAQEBAQFohWgNhkUBAQEEE?= =?us-ascii?q?hEKEwEBNwEPAgEIEQQBASEBCQICAjAdCAIEDgUIGoJPAYF+VwMvAQOaewGBO?= =?us-ascii?q?gKKH3qBMoEBggcBAQYEBIUuGIIyCYE6gnuEDAEBhmEnHIFJRIEVQ4IqNj6ED?= =?us-ascii?q?wESAQkagxU2gi6CQUIZBgI8JAIBAxQvD3QeIyUEDQ0LAQ8fAUKQbhMPNoMLi?= =?us-ascii?q?Bs2jG+SBAqDIJFKjF8Sg1+LLoYykD2XfJ1RBAmBW4MFAgICAgQFAg4BAQaBV?= =?us-ascii?q?DlrcHAVgyRQFwIOjh8MDQmDTopeczgCBgEJAQEDCXyKaQGBEAEB?= IronPort-PHdr: A9a23:zl84KxIIjAkH5OUW6NmcuXkyDhhOgF28FhEc9oEqjfRIf7jwt5jhP UmK4/JrgReJWIjA8PtLhqLQtLyoQm0P55uN8RVgOJxBXhMIk4MaygonBsPWFkTnN/PsKSo3A JcKWFps5XruN09TFY73bEHTpXvn6zkUF13/OAN5K/6zFJTVipG81vu5/NvYZAAb7Ac= IronPort-HdrOrdr: A9a23:kpYRaaoAAMurJ1fySZZpYYMaV5utL9V00zEX/kB9WHVpm5Oj9v xGzc506farslkssSkb6K+90KnpewK6yXcH2/huAV7CZnimhILMFuFfBOTZskbd8kHFh4tgPO JbAtRD4b7LfBhHZKTBkXOF+r8bqbHtms3F9ISurUuFDzsaFp2IhD0JbDpzZ3cGPDWucqBJba Z0iPA3wwaISDAyVICWF3MFV+/Mq5ngj5T9eyMLABYh9U2nkS6owKSSKWna4j4uFxd0hZsy+2 nMlAL0oo+5teug9xPa32jPq7xLhdrazMdZDsDksLlWFtyssHfsWG1SYczEgNkHmpDo1L/sqq iUn/4UBbU215oWRBDsnfKi4Xi67N9k0Q6S9bbRuwqSnSW+fkNhNyKE7rgpLicwLCEbzYxBOe twrhGknosSAhXakCvn4d/UExlsi0qvuHIn1fUelnpFTOIlGfJsRKEkjQho+a07bWjHAUEcYZ 9TJdCZ4OwTfUKRbnjfsGUqyNuwXm4rFhPDRkQZoMSa3zVfgXg8liIjtYMit2ZF8Ih4R4hP5u zCPKgtnLZSTtUOZaY4AOsaW8O4BmHEXBqJOmOPJlbsEr0BJhv22tLKCXUOlamXkbkzvdUPcb j6ISdlXF8JCgvT4Je1reh2Gzj2MRKAtBrWu7Nj26Q= X-IronPort-Anti-Spam-Filtered: true X-IronPort-AV: E=Sophos;i="5.83,298,1616457600"; d="scan'208,217";a="712671885" Received: from rcdn-core-5.cisco.com ([173.37.93.156]) by alln-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 25 Jun 2021 10:51:15 +0000 Received: from mail.cisco.com (xbe-aln-007.cisco.com [173.36.7.22]) by rcdn-core-5.cisco.com (8.15.2/8.15.2) with ESMTPS id 15PApBfS004322 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 25 Jun 2021 10:51:14 GMT Received: from xfe-rtp-002.cisco.com (64.101.210.232) by xbe-aln-007.cisco.com (173.36.7.22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.792.15; Fri, 25 Jun 2021 05:51:11 -0500 Received: from xhs-rtp-003.cisco.com (64.101.210.230) by xfe-rtp-002.cisco.com (64.101.210.232) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.2.792.15; Fri, 25 Jun 2021 06:51:10 -0400 Received: from NAM11-DM6-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-003.cisco.com (64.101.210.230) with Microsoft SMTP Server (TLS) id 15.0.1497.18 via Frontend Transport; Fri, 25 Jun 2021 06:51:10 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=gXy5iNXj0MAyWPj/oOA0vZ2CgV25OvbC5xXVl+qo6GSvnRfMDBwWXpbbMop4jyi6uxOzm/BotLM3WY0G6kdY3S/28INkvxOx0WnrJ7nyiwZNYjuTKskjMXQ0b3ooX/S6vrWSqGn/YeK1d7IA83BeDQrLGsqLFBc3IwnX+EE84pHL9h3ZwprbBMeWn42yRWktjA9OxDlkSpGF8SjnwklxnUzui+tnGXRWByVI4YlYZQ7n/ctYmkUhNU6q1hxPI+rB/8eqjcivi1w7zZmbvnBlV/dDsF3JylUMHuo20tUfk3LMOI2OoSDs8Sznbl5iTTekGufeDvXz2fCTM9R1hGGE0g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=6TSF6iqJI2fsh4puA59z7QgnPwUjrtGxfNHc/7b75J0=; b=Fo6K/NMYnZMlia8MVb7ajAlr32eSz14xlXDO2Y0lJNwARUm0jtqe94DgM9TBRHdu/8cA6p0AN2zjDLsaU6Eo4masNa//RCDh/ZZ0Aq7yNrHHxC179Ncs7/6dtXM7HelqadS8qceanMRM5BkyHjDW2SRMOukEbKw4mrxA+CPOBcDujShhYXDBz5D6VwfzfY9OJdiobS4pz412mhbskcvf5HeRAPNwcmKi7OsgkmCHsnUlaqhRKQSspuLACi33HT5lFtlye+3lSubb37BXa5zvb0koIbQhmkiChU3+9r8fdVk9bROesluAWd803MzXAY+c3WfkdCn+FK3aR+orWjFSpw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=6TSF6iqJI2fsh4puA59z7QgnPwUjrtGxfNHc/7b75J0=; b=dBHug9Cqp7V4C+SpwSdR+RPveXKivWio2zodWHBEPcjWa4wlJ4JZRK6RMENK/5UIyrzX7zdlVnK5huNVN+t94OPSPLCSfKHfjfjJPzOegkE93syZiLleIoN/7VPJy0B4nF9eGsXRXC7wXPCixPR5cMJyJJRPCUi+1CEdmISg36Y= Received: from DM4PR11MB5438.namprd11.prod.outlook.com (2603:10b6:5:399::21) by DM5PR1101MB2252.namprd11.prod.outlook.com (2603:10b6:4:52::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4242.22; Fri, 25 Jun 2021 10:51:08 +0000 Received: from DM4PR11MB5438.namprd11.prod.outlook.com ([fe80::e14c:8880:1101:bb0c]) by DM4PR11MB5438.namprd11.prod.outlook.com ([fe80::e14c:8880:1101:bb0c%7]) with mapi id 15.20.4264.023; Fri, 25 Jun 2021 10:51:08 +0000 From: "Rob Wilton (rwilton)" To: Kent Watsen CC: "netconf@ietf.org" , "draft-ietf-netconf-sztp-csr@ietf.org" , "netconf-chairs@ietf.org" Thread-Topic: AD review of draft-ietf-netconf-sztp-csr Thread-Index: Addmei+76OsPA+grSaqUN2qOgkG4uAAMdT6AAAAewWAAmDJOgAABKWhQAAo/EwAAGKZHcA== Date: Fri, 25 Jun 2021 10:51:08 +0000 Message-ID: References: <0100017a2f082e6a-1197e3c8-f8be-4d59-ba1c-8d39029a31fc-000000@email.amazonses.com> <0100017a3ea111a8-680c5610-bc55-4a82-b7fd-7715656f4924-000000@email.amazonses.com> <0100017a3fcc223f-c6d25440-0346-4b41-9fa4-fad32b3e3b75-000000@email.amazonses.com> In-Reply-To: <0100017a3fcc223f-c6d25440-0346-4b41-9fa4-fad32b3e3b75-000000@email.amazonses.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: watsen.net; dkim=none (message not signed) header.d=none;watsen.net; dmarc=none action=none header.from=cisco.com; x-originating-ip: [82.12.233.180] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 93b3fc9d-7e3c-4e48-f3b1-08d937c723c2 x-ms-traffictypediagnostic: DM5PR1101MB2252: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DM4PR11MB5438.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(366004)(396003)(346002)(39860400002)(136003)(376002)(122000001)(316002)(8676002)(83380400001)(5660300002)(8936002)(7696005)(52536014)(9686003)(54906003)(38100700002)(186003)(55016002)(26005)(6506007)(478600001)(66946007)(76116006)(53546011)(71200400001)(4326008)(2906002)(66446008)(64756008)(66556008)(86362001)(66476007)(9326002)(33656002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?ZE50YlVGY2tFSlpOVUZOODQ0Yml6NDB4SVUvOE93NG5XekNBcGExbE8vdDNE?= =?utf-8?B?aktOeForY05JZndMU1pycEhFWEVpR1pJZXZRbHRyZUlkQi83dm5hYTBjaUVa?= =?utf-8?B?K250cE1qdXFzS3NhalQ1cG9VZXU2ZnVSWHlJcTQwYnRIYXlpc2FYM202M0NP?= =?utf-8?B?VlhZS0NQcS9UZEc4QlFHcjhTZm9yNUdVQlY4aEtxZkJlQ1RnKzZHdjNtMU9X?= =?utf-8?B?Y29MR0t1OHVFU1dRS2xOZ2liaFNPeDVLREJJUzJ2bGlnSEpSamRMZTlpTldu?= =?utf-8?B?SHFRUUw2TGpKT3F1MDdNajdncE9jeTkrcFVGc2FldWpZY29TME80aXFCcDdQ?= =?utf-8?B?M3BaQkMvSCsrbXFhU3c1SmJlQ0o2aGx5L05hNEFCVUt4amV5SCs5dTByVjAy?= =?utf-8?B?TjNxZEdWbkJYdE9Ob2tRVzhzZzVvVHVlK3JCaXQxZjFoL1FDUnNIa2RCVytK?= =?utf-8?B?OWd6dDdtZFBQTi9uSmZjQjJVYzJiTGVtL3lxb3gxcy9nNmNTQTlXVExGYW15?= =?utf-8?B?V3dyU29iNVcxUk9oOVZsV1ZyUTYxai9vUWNxTTNHMm1qUm5SakxoN1NXMHZQ?= =?utf-8?B?b1NFRVNvOC81WWtrZnk0ckFuN0YrRkNpSW44bXBGdFhCQ1lpcGdwR21xdnRy?= =?utf-8?B?eENnODg4K3RTVm9IRGJZeUZiUGJNQ3RkWEE5V0kzejV4OHJJeFRGTW41U09E?= =?utf-8?B?aDVNdTVlTkcvelJ0Y1Z6VDAyQUFwL0NYZWlGenI4UlM0RTdIaEVjSCtRK2FQ?= =?utf-8?B?VlNBYldtcU5rN0lqWW9tZktXN292OGlVbFg3T3Q0aU1PN3BCQThrdkhwK0xF?= =?utf-8?B?MWtpQjhPTnZmcEl1SmdQSHVUZmhvUlplUnBuZEZkTy9QK21udlFRd0o1U0tr?= =?utf-8?B?NEFhMDBLMzFBaEJmaVJtMFlNUDI1ZGNSREpGbTU4VTZCbkg0cHJWS0Y4aVBR?= =?utf-8?B?NU1EUnRBVkVRQkx4ZjhpY3VmQTd5M0FZREswSE1mZnJqQnVobWxiNUNNUXJu?= =?utf-8?B?UFUrMXUzUHN0aWVidGEvelpqTlRnQ1E5bzZkbmI2aUQyZTh0L2RWdzJUWmZM?= =?utf-8?B?czVyOTV0Z2Q2WXZYQjJldFFEdHNQOU1EeERHdy9LS1NpTkRpUjRsck85ZXNF?= =?utf-8?B?TmZCTTI3TmZOa1p4SmIwUVBKUjY1NmtPbVZkS01RU2ZQc0g5NmpYclN4aW5o?= =?utf-8?B?WHVjTmp0RUFWRVFTY2NYSzl3K3hyYlVwVEhxL3k4VDlJSVhheGhmcHQwVVVm?= =?utf-8?B?TmswQy8wbTF4YVplWUs4N2J5N0VFMFFyQ0ExbFZYUG5ZZ1MxUS9KMGhyL09O?= =?utf-8?B?dTUraStnV2ZSKzVxdENUeWJmL2lIcDEveEdXU1BXMXZVUTBDekhFL2d6S21F?= =?utf-8?B?dUV1SWcyVEFnZnZkN3NNL21IRUxvV3kvZXRUL2s2d2FmN3NrUnp0MHFaR3NY?= =?utf-8?B?UFJYYlVuRUpNZWRQZWhUZnV5bVhQZzRJdU5HSTBCMUVhZktHUTVmYUFhNGt1?= =?utf-8?B?U1Y5QVBQZ3BjZHpkR2xVRVM4bXVSMVppSWZQZlZvS3dEUHpXV3Boem5OR1pl?= =?utf-8?B?bVk0Y3U2dzE5TC9tMVZLWDFuUEVqd2N4aTNpeis1L3RkQ2tsUU9STWk0Qmgz?= =?utf-8?B?U1dkL0hxTTdWeHB1OXdNYTFEa25heXQ0VWFsbWlTSVdEQThsWG0rdE0rVFJx?= =?utf-8?B?QlUzR1N2ZElLNzlLYTM0Q0pJRk5yRW5CcGdKUGpLa0tabkRaZUNhYXpwWktt?= =?utf-8?Q?nG9wwkhCC4qCoUoe66V4v0IPrgxlVkUWNRM4i8t?= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_DM4PR11MB5438CA53561F81165429C3ABB5069DM4PR11MB5438namp_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM4PR11MB5438.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 93b3fc9d-7e3c-4e48-f3b1-08d937c723c2 X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Jun 2021 10:51:08.6638 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: ePh+pYUnhTGMSiVeSm+RT7ndfN4HsXff7u1Kcf2G27b+H5svyCNp4BfvT4jm+Il9Ot3+5ogH+emK5dGNfMZDiw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR1101MB2252 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.22, xbe-aln-007.cisco.com X-Outbound-Node: rcdn-core-5.cisco.com Archived-At: Subject: Re: [netconf] AD review of draft-ietf-netconf-sztp-csr X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jun 2021 10:51:23 -0000 --_000_DM4PR11MB5438CA53561F81165429C3ABB5069DM4PR11MB5438namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgS2VudCwNCg0KVGhhbmtzIGZvciB0aGUgZXh0cmEgZGV0YWlscy9leHBsYW5hdGlvbi4gIFBs ZWFzZSBzZWUgaW5saW5lIOKApg0KDQpGcm9tOiBLZW50IFdhdHNlbiA8a2VudCtpZXRmQHdhdHNl bi5uZXQ+DQpTZW50OiAyNCBKdW5lIDIwMjEgMjE6NTMNClRvOiBSb2IgV2lsdG9uIChyd2lsdG9u KSA8cndpbHRvbkBjaXNjby5jb20+DQpDYzogbmV0Y29uZkBpZXRmLm9yZzsgZHJhZnQtaWV0Zi1u ZXRjb25mLXN6dHAtY3NyQGlldGYub3JnOyBuZXRjb25mLWNoYWlyc0BpZXRmLm9yZw0KU3ViamVj dDogUmU6IEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLW5ldGNvbmYtc3p0cC1jc3INCg0KUm9iLA0K DQpJ4oCZbSBub3Qgc3VyZS4gIEl0IGZlZWxzIGxlc3MgUkVTVGZ1bCAoYXQgbGVhc3QgdG8gbWUp IHRvIG5vdCBhbGxvdyB0aGUgZGF0YSB0byBiZSBwcm92aWRlZCBhcyBhIHNpbmdsZSBtZXNzYWdl LCBldmVuIGlmIGluIHByYWN0aWNlIHRoYXQgbWlnaHQgbm90IG1ha2Ugc2Vuc2UgaW4gbW9zdCAo YWxtb3N0IGFsbCkgY2FzZXMuICBJZiB5b3Ugd2VyZSB1c2luZyBhIHNlcGFyYXRlIFlBTkcgUlBD IHRvIHNlbmQgdGhlIGNycy1zdXBwb3J0IGFuZCBnZXQgdGhlIHJlcXVlc3QtaW5mbyB0aGVuIG9u bHkgaW5jbHVkaW5nIHRoZSBjcnMgbm9kZSBpbiB0aGUgYm9vdHN0cmFwcGluZyBkYXRhIFJQQyB0 aGVuIEkgd291bGQgaGF2ZSBubyBjb21wbGFpbnRzLiAgSS5lLiwgaXQgb25seSBmZWVscyBzdHJh bmdlIHRvIGhhbmRsZSBhIHRyYW5zYWN0aW9uYWwgZGVwZW5kZW5jeSB3aXRoaW4gdGhlIGRhdGEg c3RydWN0dXJlcyBvZiBhIHNpbmdsZSBSUEMgb24gd2hhdCBpcyBub21pbmFsbHkgYSBzdGF0ZWxl c3MgQVBJLg0KDQpBbHNvLCB3b3J0aCBub3RpbmcgdGhhdCB1c2luZyBhIHNlcGFyYXRlIFlBTkcg UlBDIHRvIHRyYW5zbWl0IHRoZSBjYXBhYmlsaXRpZXMgYXZvaWRzIHRoZSBuZWVkIHRvIHJldHVy biBhbiBlcnJvci4gIEl0IGNvdWxkIGp1c3QgcmV0dXJuIHN1Y2Nlc3Mgd2l0aCB0aGUgcmVxdWly ZWQgaW5mb3JtYXRpb24uICBXYXMgdGhpcyBhcHByb2FjaCBjb25zaWRlcmVkIGF0IGFsbCwgYW5k IHdvdWxkIHRoaXMgYmUgdG9vIGJpZyBhIGNoYW5nZT8gIEnigJltIG5vdCB0cnlpbmcgdG8gY3Jl YXRlIGV4dHJhIHdvcmsgZm9yIHlvdSwgb3IgZGVsYXkgdGhpcyBkb2N1bWVudCDigKYNCg0KSWYg YSBzZXBhcmF0ZSBSUEMgdG8gZ2V0IHRoZSBjYXBhYmlsaXRpZXMgaW4gdW5kZXNpcmFibGUgb3Ig aW5mZWFzaWJsZSB0aGVuIGNoYW5naW5nIHRvIGEgY2hvaWNlIHNlZW1zIHJlYXNvbmFibGUsIGJ1 dCBJIHdvdWxkIHByb2JhYmx5IHN1Z2dlc3Qga2VlcGluZyDigJxpbnRlbmRlZOKAnSBhbmQgcHJv YmFibHkga2VlcGluZyB0aGUgbGFuZ3VhZ2Ugb24gcGFnZSA0IHNvbWV3aGF0IG9wZW4sIGkuZS4s IG5vdCBzdHJpY3RseSBsb2NraW5nIGl0IGRvd24gdG8gZG9pbmcgYSBoYW5kc2hha2UuDQoNCkni gJltIHVuc3VyZSBpdCBpdCBtYWtlcyBzZW5zZSB0byBiZSBjb25jZXJuZWQgYWJvdXQgdGhlIFJF U1RmdWxuZXNzIG9mIHRoaXMgQVBJLiAgWWVzLCBpdCB1c2VzIFJFU1RDT05GLCBidXQgdGhhdCBp cyBtb3JlIG91dCBvZiBjb252ZW5pZW5jZSB0aGFuIGFueSBpbmhlcmVudCBuZWVkIG9yIGRlc2ly ZSBmb3IgdGhlIEFQSSB0byBiZSAiUkVTVGZ1bOKAnS4gIEZvciBpbnN0YW5jZSwgbm90ZSB0aGF0 IG5ldmVyIGNvdWxkIEhUVFAgY2FjaGVzIGJlIHVzZWQsIGFzIGVhY2ggbWVzc2FnZSBpcyBkaXN0 aW5jdCBmcm9tIGFueSBvdGhlci4NCg0KVGhhdCBzYWlkLCB0aGUg4oCcZ2V0LWJvb3RzdHJhcHBp bmctZGF0YeKAnSBSUEMgKmlzKiBpZGVtcG90ZW50LCBhcyB0aGUgc2FtZSBQT1NUIChnZXQtYm9v dHN0cmFwcGluZy1kYXRhKSByZXR1cm5zIHRoZSBzYW1lIHJlc3BvbnNlIChhc3N1bWluZyB0aGUg c2VydmVyIGlzbuKAmXQgdXBkYXRlZCBieSBhbiBvcGVyYXRvciBpbiB0aGUgaW50ZXJpbSkuICBU aGlzIGlzIHRydWUgYWxzbyBmb3Igd2hlbiBzZW5kaW5nIHRoZSDigJxjc3Itc3VwcG9ydOKAnSBh bmQg4oCcY3Ny4oCdIG5vZGVzLCBhcyBkZXNjcmliZWQgaW4gdGhlIGN1cnJlbnQgZG9jdW1lbnQu ICAgT2YgY291cnNlLCB0aGUgaWRlbXBvdGVuY3kgb2YgYSBZQU5HIOKAnHJwY+KAnSBzdGF0ZW1l bnQgaXNu4oCZdCB0aGF0IG1lYW5pbmdmdWwsIHJlbGF0aXZlIHRvIGEgUkVTVENPTkYgIlBPU1Ti gJ0gdXNlZCB0byBlZGl0IGNvbmZpZ3VyYXRpb24gKGUuZy4sIGxpa2UgPGVkaXQtY29uZmlnPini gKZpdOKAmXMgbGlrZWx5IGZhaXIgdG8gc2F5IHRoYXQgWUFORyBSUENzIGFyZSBnZW5lcmFsbHkg Tk9UIFJFU1RmdWwuDQoNClJlZ2FyZGluZyB1c2luZyBhIHNlcGFyYXRlIFJQQyAocmV0dXJuaW5n IGEgMlhYKSwgIHllcyBpdCB3YXMgY29uc2lkZXJlZCwgaG93ZXZlciBub3RlIHRoYXQgaXQgaXMg aW1wb3NzaWJsZSBmb3IgYSBnZW5lcmljIGRldmljZSB0byBhbnRpY2lwYXRlIHdoYXQgdGhlIHNw ZWNpZmljIGRlcGxveW1lbnTigJlzIENBIGluZnJhc3RydWN0dXJlIHdpbGwgcmVxdWlyZSBpbiB0 ZXJtcyBvZiAxKSBpZiAqYW55KiBDU1IgaXMgZGVzaXJlZCAobW9zdCBvZnRlbiBub3QpIGFuZCAy KSB3aGVuIGRlc2lyZWQsIHdoYXQga2V5LWFsZ29yaXRobSBhbmQgQ1NSLWF0dHJpYnV0ZXMgdG8g dXNlIChyYXJlbHkgd291bGQgdGhlIG5lYXJseS1lbXB0eSBDU1IgYSBkZXZpY2UgY291bGQgcHJv YWN0aXZlbHkgc2VuZCBiZSB2aWFibGUpLg0KDQpGV0lXLCBpZiBhbiBvdXQtb2YtYmFuZCBSUEMg d2VyZSB1c2VkLCBtb3N0IG9mIHRoZSB0aW1lIGl0IHdvdWxkIGJlIGEgcm91bmR0cmlwIGZvciBh IG5vLW9wLiAgVGhlIGluLWJhbmQgYXBwcm9hY2ggY3VycmVudGx5IGRlc2NyaWJlZCBpcyBpZGVh bCBpbiB0aGF0IGl0IG9ubHkgY29uc3VtZXMgZXh0cmEgcmVzb3VyY2VzIHdoZW4gbmVlZGVkLg0K DQpJIGhhZG7igJl0IHBpY2tlZCB1cCBvbiB0aGF0IG51YW5jZSwgYW5kIEkgYWdyZWUgdGhhdCB0 aGlzIG1ha2VzIGFuIG91dCBvZiBiYW5kIGFwcHJvYWNoIGxlc3MgZWZmaWNpZW50IGFuZCBsZXNz IGhlbHBmdWwuDQoNCg0KVGhhdCBzYWlkLCBpdCBkb2VzIGxpdHRsZSBoYXJtIGZvciB0aGUgZHJh ZnQgdG8gc2F5IChpbiBhZGRpdGlvbiB0byBzdXBwb3J0aW5nIHRoZSDigJxpbi1iYW5k4oCdIG1l Y2hhbmlzbSkg4oCcYSBkZXZpY2UgTUFZIG9idGFpbiB0aGUg4oCYcmVxdWVzdC1pbmZv4oCZIHRo cm91Z2ggYW4gb3V0LW9mLWJhbmQgbWVjaGFuaXNtIG91dHNpZGUgdGhlIHNjb3BlIG9mIHRoaXMg ZG9jdW1lbnTigJ0uICBJZiB0aGlzIHJlc29sdmVzIHlvdXIgY29uY2VybiwgdGhlbiBpdOKAmXMg YW4gZWFzeSB0aGluZyB0byBhZGQsIGFuZCBpdCBtYXkgKHRvIHlvdXIgcG9pbnQpIHByb3ZpZGUg c29tZSBmbGV4aWJpbGl0eS4gIEkgdGhpbmsgdGhhdCBpdCBpcyBjb25zaXN0ZW50IHdpdGggeW91 ciBsYXN0IHBhcmFncmFwaCBhYm92ZS4NCg0KTm90IG5lY2Vzc2FyeS4gIEnigJltIGhhcHB5IHdp dGggeW91ciBleHBsYW5hdGlvbiBhcyB0byB3aHkgaGF2aW5nIGl0IGluYmFuZCBwcmFnbWF0aWNh bGx5IG1ha2VzIG1vcmUgc2Vuc2UuDQoNCg0KSSBzdGlsbCB0aGluayB3ZSBzaG91bGQgcHV0IOKA nGNzci1zdXBwb3J04oCdIGFuZCDigJxjc3LigJ0gdW5kZXIgYSAiY2hvaWNl4oCdIHRob3VnaCwg YXMgdGhlIHVzZS1jYXNlIGZvciBzZW5kaW5nIGJvdGggYXQgdGhlIHNhbWUgdGltZSBpcyB2ZXJ5 IHNtYWxsIGFuZCBpdCBzZWVtcyB3cm9uZyB0byBlbmNvdXJhZ2Uvc3VnZ2VzdCBpdOKAmXMgYSBn b29kIGlkZWEgb3IgdG8gYXNrIHNlcnZlcnMgdG8gaGF2ZSB0byBzdXBwb3J0IHRoZSBjYXNlLg0K DQpBZ3JlZWQuDQoNCg0KDQo0LiBSZWZlcmVuY2VzLiAgUkZDIDM2ODggcHJvYmFibHkgc2hvdWxk IGJlIG5vcm1hdGl2ZSBmb3IgdGhlIFhNTA0KcmVnaXN0cnksIG5vdGluZyB0aGF0DQoNCg0KUkZD IDYwMjAgaXMgbm9ybWF0aXZlbHkgcmVmZXJlbmNlZC4NCg0KUmVhbGx5PyAgSSB0ZW5kIHRvIGRp c2FncmVlIGFzIEkgdGhvdWdodCB0aGUgbGl0bXVzIHRlc3QgZm9yIGlmIHNvbWV0aGluZyB3ZXJl DQpub3JtYXRpdmUgd2FzIGlmIGl0IGhhZCB0byBiZSB1bmRlcnN0b29kIGluIG9yZGVyIHRvIGlt cGxlbWVudCB0aGUgUkZDLg0KDQpJIGd1ZXNzIHRoZSBsb2dpYyBoZXJlIGlzIHRoYXQgeW91IG5l ZWQgdG8gdW5kZXJzdGFuZCBSRkMgNjAyMCB0byB1bmRlcnN0YW5kIHRoZSByZWdpc3RyeSB0aGF0 IGlzIGhhdmluZyBlbnRyaWVzIGFkZGVkIChnaXZlbiB0aGF0IFJGQyA3OTUwIGRvZXNuJ3QgZGVm aW5lIHRoZSByZWdpc3RyeSkuDQoNCkJ1dCwgYXMgcGVyIGJlbG93LCBJJ2xsIGNoZWNrIHdpdGgg dGhlIElFU0cgb24gdGhpcyBvbmUuDQoNCg0KDQoNCllvdSByYWlzZSBhbiBpbnRlcmVzdGluZyBw b2ludCBhYm91dCBSRkMgNjAyMCBiZWluZyBOb3JtYXRpdmUsIGFzIEkgc2VlIHRoYXQNCml0IGlz IE5PVCBub3JtYXRpdmUgaW4gYXQgbGVhc3Qgb25lIG9mIG15IG90aGVyIGRyYWZ0cy4gIEkgdGhp bmsgdGhhdCBpdCBpcyBhDQpyZWFzb25hYmxlIHBvc2l0aW9uIHRoYXQsIGlmIHRoZSBSRkMgNjAy MCByZWZlcmVuY2UgaXMgb25seSBwcmVzZW50IGluIHRoZQ0KSUFOQSBDb25zaWRlcmF0aW9ucyBz ZWN0aW9uLCB0aGVuIGl0IGlzIElORk9STUFUSVZFIGFzIGZhciBhcyB0aGUgZHJhZnQgYXMgYQ0K d2hvbGUgZ29lcy4gIFRob3VnaHRzPw0KDQpMZXQgbWUgY2hlY2sgd2l0aCB0aGUgSUVTRyBhbmQg Z2V0IGJhY2sgdG8geW91IG9uIHRoaXMgb25lLiAgQWx0aG91Z2gsIHBlcmhhcHMgd29ydGggbm90 aW5nIHRoYXQgYm90aCB0aGVzZSByZWZlcmVuY2VzIGFyZSBub3JtYXRpdmUgaW4gUkZDIDgzNDMg KGFuZCB0aGV5IGFyZSBvbmx5IHJlZmVyZW5jZWQgZnJvbSB0aGUgSUFOQSByZWdpc3RyeSBlbnRy aWVzKS4NCg0KQWNrLCBJIHdpbGwgd2FpdCBmb3IgeW91ciByZXNwb25zZSBvbiB0aGlzIGl0ZW0u DQoNCkkgZGlkbuKAmXQgcmVhbGx5IGdldCBhIHN0cm9uZyBhbnN3ZXIgZnJvbSBvdGhlciBBRHMg b24gdGhpcy4NCg0KU29tZSBvZiB1cyBmZWx0IHRoYXQgYSBub3JtYXRpdmUgcmVmZXJlbmNlIGlz IGFwcHJvcHJpYXRlIChiZWNhdXNlIHlvdSBuZWVkIHRvIHVuZGVyc3RhbmQgdGhlIG1lYW5pbmcg b2YgdGhlIHJlZ2lzdHJ5IHRoYXQgaXMgYmVpbmcgdXBkYXRlZCksIGFuZCBub2JvZHkgb2JqZWN0 ZWQgdG8gdGhhdCBjaGFyYWN0ZXJpemF0aW9uLCBidXQgZXF1YWxseSwgc29tZSBBRHMgZGlkbuKA mXQgdGhpbmsgdGhhdCBJbmZvcm1hdGl2ZSBpcyBuZWNlc3NhcmlseSB3cm9uZyBhbmQgaXQgaXMg cHJvYmFibHkgbm90IHdvcnRoIHdvcnJ5aW5nIGFib3V0Lg0KDQpNeSByZWNvbW1lbmRhdGlvbiBp cyB0byBtYWtlIHRoZW0gbm9ybWF0aXZlLCBiZWNhdXNlIHRoYXQgaXMgd2hhdCBoYXMgYmVlbiBk b25lIGZvciBvdGhlciBSRkNzIHdpdGggWUFORyBtb2R1bGVzIChhbmQgY29uc2lzdGVuY3kgaXMg Z29vZCksIGFuZCBJIGRvbuKAmXQgc2VlIGFueSBvdGhlciBBRHMgb2JqZWN0aW5nIHRvIHRoaXMg YXBwcm9hY2guICBJIHdvdWxkIHJlZ2FyZCB0aGlzIGFzIHRoZSBwYXRoIG9mIGxlYXN0IHJlc2lz dGFuY2UuDQoNClJlZ2FyZGluZyAiYmVjYXVzZSB5b3UgbmVlZCB0byB1bmRlcnN0YW5kIHRoZSBt ZWFuaW5nIG9mIHRoZSByZWdpc3RyeSB0aGF0IGlzIGJlaW5nIHVwZGF0ZWTigJ0sIOKAnHlvdSIg b25seSByZWZlcnMgdG8gSUFOQSwgcmlnaHQ/ICAgSSBkb27igJl0IHRoaW5rIFNaVFAtY2xpZW50 IGFuZC9vciBTWlRQLXNlcnZlciBkZXZlbG9wZXJzIG5lZWQgdG8ga25vdyBhYm91dCBJQU5BIHJl Z2lzdHJpZXMgdG8gaW1wbGVtZW50IHRoZSBkb2N1bWVudCwgcmlnaHQgYWdhaW4/ICAgQ29uc2lz dGVuY3kgaXMgZ29vZCwgeWVzLCBidXQgbm90IHdoZW4gY29uc2lzdGVudGx5LXdyb25nICA7KSAg IFtJ4oCZbSBzcGVha2luZyB0aGVvcmV0aWNhbGx5IGhlcmUsIG5vdCB0byBhbnkgcGFydGljdWxh ciBncm91cCBvZiBwZW9wbGVdDQoNCk15IHVuZGVyc3RhbmRpbmcgaXMgbW9yZSBhbG9uZyB0aGVz ZSBsaW5lczoNCg0KVG8gZnVsbHkgdW5kZXJzdGFuZCBldmVyeXRoaW5nIGluIHRoZSBSRkMgKGku ZS4sIGRlZmluaXRpb24gb2YgYSBub3JtYXRpdmUgcmVmZXJlbmNlKSwgYSByZWFkZXIgb2YgdGhl IFJGQyB3b3VsZCBuZWVkIHRvIHVuZGVyc3RhbmQgd2hhdCBpcyBtZWFudCBieSB0aGUgZHJhZnQg YWRkaW5nIGFuIGVudHJ5IHRvIGEgcmVnaXN0cnkuICBJLmUuLCBJ4oCZbSBub3Qgc2F5aW5nIHRo YXQgYSBub3JtYXRpdmUgcmVmZXJlbmNlIGlzIG5lZWRlZCB0byB1bmRlcnN0YW5kIHRoZSBhY3Qg b2YgYWRkaW5nIGEgZmllbGQgdG8gYSByZWdpc3RyeSwgYnV0IGl0IGlzIG5lY2Vzc2FyeSB0byB1 bmRlcnN0YW5kIHRoZSBzaWduaWZpY2FuY2Ugb2Ygd2h5IHRoYXQgbWF0dGVycy4gIEluIHRoaXMg Y2FzZSwgdGhlIGF1dGhvciBzaG91bGQgdW5kZXJzdGFuZCB0aGF0IGFkZGluZyBhbiBlbnRyeSB0 byBtb2R1bGUgbmFtZSByZWdpc3RyeSBtZWFucyB0aGF0IGl0IHNob3VsZCBiZSBhIChob3BlZnVs bHkgZ2xvYmFsbHkpIHVuaXF1ZSBuYW1lIGZvciB0aGF0IG1vZHVsZSBhbmQgbm90IGRlZmluZWQg aW4gYW5vdGhlciBSRkMgd2l0aCBhbiBlbnRpcmVseSBkaWZmZXJlbnQgZGVmaW5pdGlvbi4gIEku ZS4sIGl0IHNob3VsZCBiZSBwb3NzaWJsZSB0byBmZXRjaCB0aGUgbW9kdWxlIGZyb20gYSByZXB1 dGFibGUgc291cmNlIGJ5IChuYW1lLCByZXZpc2lvbikgd2l0aG91dCBoYXZpbmcgdG8gZXh0cmFj dCBpdCBmcm9tIHRoZSBSRkMgKHdoaWNoIHdvdWxkIGJlIHJlcXVpcmVkIGlmIGl0IHdhcyBub3Qg dW5pcXVlbHkgbmFtZWQpLg0KDQpBIHNlcGFyYXRlIGFyZ3VtZW50IGlzIHRoYXQgdGhpcyBkb2N1 bWVudCBsb2dpY2FsbHkgaGFzIGEgZGVwZW5kZW5jeSBvbiB0aGF0IElBTkEgcmVnaXN0cnkgZXhp c3RpbmcsIGFuZCBvZnRlbiB0aG9zZSBkZXBlbmRlbmNpZXMgYmV0d2VlbiBkb2N1bWVudHMgYXJl IG9mdGVuIGluZGljYXRlZCBhcyBub3JtYXRpdmUgcmVmZXJlbmNlcyB0byBpbmRpY2F0ZSB0aGUg ZGVwZW5kZW5jeS4NCg0KTm90ZSwgdGhlcmUgaXMgYWxzbyBhIGJpdCBvZiB0ZXh0IGluIHNlY3Rp b24gMy4xIG9mIFJGQyA4MjE2IHdoaWNoIGluZGljYXRlcyB0aGF0IGEgcmVmZXJlbmNlIHRvIHRo ZSBSRkMgZGVmaW5pdGlvbiB0aGUgcmVnaXN0cnkgaXMgZXhwZWN0ZWQsIGJ1dCBub3Qgd2hhdCBz b3J0IG9mIHJlZmVyZW5jZSB0aGF0IHNob3VsZCBiZS4NCg0KDQpUaGlzIGlzIG5vdCBzb21ldGhp bmcgSSBjYXJlIHRvIGJsb2NrIG9uLCBidXQgSSBkbyB3YW50IE5vcm1hdGl2ZSByZWZlcmVuY2Vz IHRvIGFkaGVyZSB0byB0aGUgcHJpbmNpcGxlIG9mIHRoZXkgYXJlIGZvciAgKmltcGxlbWVudG9y cyogKHdoaWNoIGRvZXNu4oCZdCBpbmNsdWRlIElBTkEsIElNTykuICBSZWxhdGVkLCB0aGVyZeKA mXMgYWxzbyB0aGUgWE1MIFJlZ2lzdHJ5IChSRkMgMzY4OCk7IHNob3VsZCBhbGwgZG9jdW1lbnRz IHB1Ymxpc2hpbmcgYSBZQU5HIG1vZHVsZSBoYXZlIGEgTm9ybWF0aXZlIHJlZmVyZW5jZSBkdWUg dG8gYW4gSUFOQSBpbnN0cnVjdGlvbj8gIFtQUzogc29tZSBSRkNzIGV4aXN0IChpLmUuLCBwdWJs aXNoZWQpIGFscmVhZHkgaGF2aW5nIFJGQyAzNjg4IGFzIEluZm9ybWF0aXZl4oCmSSB3b3VsZG7i gJl0IGJ5IHN1cnByaXNlZCBpZiBzb21lIGFsc28gZXhpc3QgaGF2aW5nIFJGQyA2MDIwIGFzIElu Zm9ybWF0aXZlLCBidXQgYSBxdWljayBzZWFyY2ggZGlkbuKAmXQgZmluZCBhbnldDQpJIGFsc28g ZG8gbm90IGludGVuZCB0byBibG9jayB0aGUgZG9jdW1lbnQgb24gdGhpcyBwb2ludC4gIEJ1dCBJ IGRvbuKAmXQgdGhpbmsgdGhhdCBub3JtYXRpdmUgcmVmZXJlbmNlcyBhcmUganVzdCBmb3IgaW1w bGVtZW50b3JzLCB0aGV5IGFsc28gZGVmaW5lIGFueXRoaW5nIHRoYXQgaXMgcmVxdWlyZWQgdG8g YmUgc3RhYmxlIGZvciB0aGUgcHVibGlzaGVkIHN0YW5kYXJkIHRvIGJlIHN0YWJsZSwgaS5lLiwg dG8gYXZvaWQgcmVseWluZyBvbiBzb21ldGhpbmcgdGhhdCBjb3VsZCBjaGFuZ2UgdW5kZXIgb3Vy IGZlZXQuDQpPbiB0aGUgWE1MIHJlZ2lzdHJ5IHF1ZXN0aW9uLCB0aGUgYW5zd2VyIGlzIHllcy4g ICBJ4oCZbSBzdWdnZXN0aW5nIHRoYXQgYWxsIGRvY3VtZW50cyB0aGF0IHVwZGF0ZSByZWdpc3Ry aWVzIHNob3VsZCBub3JtYXRpdmVseSByZWZlcmVuY2UgdGhlIGRvY3VtZW50IHRoYXQgZGVmaW5l cyB0aGUgcmVnaXN0cnkuDQpNb3JlIGdlbmVyYWxseSwgSeKAmW0gbm90IGVudGlyZWx5IHN1cmUg dGhhdCB0aGUgc3BsaXQgYmV0d2VlbiBub3JtYXRpdmUgYW5kIGluZm9ybWF0aXZlIHJlZmVyZW5j ZXMgaXMgdGhhdCBoZWxwZnVsIGFuZCBzZWVtcyB0byBjYXVzZSBtb3JlIGRpc2N1c3Npb24gdGhh dCBpdCBpcyB3b3J0aC4gIEkgd291bGQgcmVhbGx5IHByZWZlciB0aGF0IHRoZXJlIHdlcmUgMyBj YXRlZ29yaWVzIG9mIHJlZmVyZW5jZXMgKG9yIHBlcmhhcHMgb25lIG9mIHRoZSBleGlzdGluZyBj YXRlZ29yaWVzIGFyZSBzcGxpdCBpbnRvIDIpLg0KDQogIDEuICBEb2NzIHRoYXQgYW4gYXV0aG9y IGlzIHJlY29tbWVuZGVkIHRvIHJlYWQgYmVmb3JlIHJlYWRpbmcgdGhpcyBkb2MuDQogIDIuICBE b2NzIHRoYXQgdGhpcyBkb2N1bWVudCByZWxpZXMgb24gZm9yIHRoaXMgc3BlY2lmaWNhdGlvbiB0 byBiZSBjb3JyZWN0Lg0KICAzLiAgT3RoZXIgcmVsYXRlZCBkb2NzIHRoYXQgcmVhZGVycyBvZiB0 aGlzIGRvY3VtZW50IG1pZ2h0IGZpbmQgaGVscGZ1bC4NClRvZGF5LCBJIHNlZSB0aGF0IG5vcm1h dGl2ZSByZWZlcmVuY2VzIGNvdmVyIGJvdGggKDEpIGFuZCAoMiksIGJ1dCBmb3IgbW9zdCByZWFk ZXJzIEkgc3VzcGVjdCB0aGF0IGlzIG9ubHkgKDEpIHRoYXQgaXMgcmVhbGx5IHVzZWZ1bCB0byB0 aGVtLiAgRldJVywgSSB3b3VsZCBwdXQgdGhlIDYwMjAgYW5kIDM2ODggcmVmZXJlbmNlcyBpbnRv IHRoZSBzZWNvbmQgY2F0ZWdvcnkuDQpBbm90aGVyIHF1ZXN0aW9uIHRoYXQgY29tZXMgdXAgYXJl IHJlZmVyZW5jZXMgZm9yIG9wdGlvbmFsIGZlYXR1cmVzICh3aGljaCBhY2NvcmRpbmcgdG8gdGhl IGN1cnJlbnQgcnVsZXMgbmVlZCB0byBiZSBub3JtYXRpdmUpLiAgSWYgdGhlc2UgYXJlIGZlYXR1 cmVzIHRoYXQgcmVhZGVycyBhcmUgdW5saWtlbHkgdG8gY2FyZSBhYm91dCwgdGhlbiBhZ2FpbiBJ IHNlZSB0aGVtIGFzIGZpdHRpbmcgaW50byAoMikgcmF0aGVyIHRoYW4gKDEpLg0KSSBzdXNwZWN0 IHRoYXQgbW9zdCBSRkNzIHRvZGF5LCBoYW5kbGUgdGhlIHNwbGl0IGJldHdlZW4gKDEpIGFuZCAo MikgaW4gYW4gYWRob2Mgd2F5LCBieSBoYXZpbmcgdGhlIGludHJvZHVjdGlvbiBkZXNjcmliZSBi cmllZmx5IHJlZmVyZW5jZSB0aGUgZG9jcyB0aGF0IGZpdCBpbnRvICgxKS4NCg0KDQpCVFcsIG90 aGVyIGRyYWZ0cyBpbiB5b3VyIHF1ZXVlIGhhdmUgIkluZm9ybWF0aXZl4oCdIHNldCBmb3IgUkZD IDYwMjAsIGFuZCBvbmUgKG5ldGNvbmYtbm90aWZpY2F0aW9uLWNhcGFiaWxpdGllcykgaW5jb3Jy ZWN0bHkgcmVmZXJlbmNlcyBSRkMgNzk1MCBpbnN0ZWFkIG9mIFJGQyA2MDIwIChBcyBzaGVwaGVy ZCwgSSBhcG9sb2dpemUgZm9yIG1pc3NpbmcgaXQsIGJ1dCBpdOKAmXMgb25lIHRoaW5nIHRvIHRl c3QgaWYgYWxsIHRoZSByZWZlcmVuY2VzIHByb3ZpZGVkIGFyZSBhY2N1cmF0ZSBbaS5lLiwgdGhl IGRvYyAqZG9lcyogaGF2ZSBhIG5vcm1hdGl2ZSBkZXBlbmRlbmN5IG9uIDc5NTBdLCBhbmQgYW5v dGhlciB0byBzZWUgaWYgYW55IHJlZmVyZW5jZXMgd2VyZSBtaXNzaW5nIGFsdG9nZXRoZXLigKZp LmUuLCBmaW5kaW5nIHRoZSBnYXBzKS4NClRoYW5rcy4gIEkgdGhpbmsgdGhhdCBJIHBpY2tlZCB1 cCBvbiB0aGlzIGluIG15IEFEIHJldmlldy4NCg0KDQpQUzogdGhlcmXigJlzIGEgc2VwYXJhdGUg ZW1haWwgdGhyZWFkIChSZXVzZSBvZiBTWlRQLUNTUiBZQU5HIGRlZmluaXRpb24gaW4gQlJTS0kt QUUpIHJlZ2FyZGluZyB0aGlzIGRvY3VtZW50IHRoYXQgaXMgcGVuZGluZyB5b3VyIGZlZWRiYWNr LiAgSWRlYWxseSBJIGNhbiBjb2xsZWN0IHRoYXQgYW5kIHRodXMgYXBwbHkgYWxsIHVwZGF0ZXMg aW4gb25lIHNob3QuDQpTb3JyeSwgSSBoYWQgbWlzc2VkIHRoaXMgdGhyZWFkLiAgSeKAmXZlIG5v dyByZXBsaWVkLg0KVGhhbmtzLA0KUm9iDQoNCksuDQoNCg== --_000_DM4PR11MB5438CA53561F81165429C3ABB5069DM4PR11MB5438namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7 fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToy IDQgNSAzIDUgNCA2IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsN CglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAq Lw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGNt Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7 fQ0KcC5Nc29MaXN0UGFyYWdyYXBoLCBsaS5Nc29MaXN0UGFyYWdyYXBoLCBkaXYuTXNvTGlzdFBh cmFncmFwaA0KCXttc28tc3R5bGUtcHJpb3JpdHk6MzQ7DQoJbWFyZ2luLXRvcDowY207DQoJbWFy Z2luLXJpZ2h0OjBjbTsNCgltYXJnaW4tYm90dG9tOjBjbTsNCgltYXJnaW4tbGVmdDozNi4wcHQ7 DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9 DQpzcGFuLkVtYWlsU3R5bGUxOQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglm b250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5N c29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZTox MC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6NjEyLjBwdCA3OTIuMHB0Ow0KCW1h cmdpbjo3Mi4wcHQgNzIuMHB0IDcyLjBwdCA3Mi4wcHQ7fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtw YWdlOldvcmRTZWN0aW9uMTt9DQovKiBMaXN0IERlZmluaXRpb25zICovDQpAbGlzdCBsMA0KCXtt c28tbGlzdC1pZDoyMzk1NjA4OTY7DQoJbXNvLWxpc3QtdHlwZTpoeWJyaWQ7DQoJbXNvLWxpc3Qt dGVtcGxhdGUtaWRzOi0yOTE3MjI2NiAxMzQ4MDc1NjkgMTM0ODA3NTc3IDEzNDgwNzU3OSAxMzQ4 MDc1NjcgMTM0ODA3NTc3IDEzNDgwNzU3OSAxMzQ4MDc1NjcgMTM0ODA3NTc3IDEzNDgwNzU3OTt9 DQpAbGlzdCBsMDpsZXZlbDENCgl7bXNvLWxldmVsLXRleHQ6IiUxXCkiOw0KCW1zby1sZXZlbC10 YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWlu ZGVudDotMTguMHB0O30NCkBsaXN0IGwwOmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1h dDphbHBoYS1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVt YmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDt9DQpAbGlzdCBsMDpsZXZl bDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6cm9tYW4tbG93ZXI7DQoJbXNvLWxldmVsLXRh Yi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpyaWdodDsNCgl0ZXh0LWlu ZGVudDotOS4wcHQ7fQ0KQGxpc3QgbDA6bGV2ZWw0DQoJe21zby1sZXZlbC10YWItc3RvcDpub25l Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0 O30NCkBsaXN0IGwwOmxldmVsNQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS1sb3dl cjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9u OmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDt9DQpAbGlzdCBsMDpsZXZlbDYNCgl7bXNvLWxl dmVsLW51bWJlci1mb3JtYXQ6cm9tYW4tbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7 DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpyaWdodDsNCgl0ZXh0LWluZGVudDotOS4wcHQ7 fQ0KQGxpc3QgbDA6bGV2ZWw3DQoJe21zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZl bC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0O30NCkBsaXN0IGww OmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS1sb3dlcjsNCgltc28tbGV2 ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4 dC1pbmRlbnQ6LTE4LjBwdDt9DQpAbGlzdCBsMDpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1m b3JtYXQ6cm9tYW4tbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVs LW51bWJlci1wb3NpdGlvbjpyaWdodDsNCgl0ZXh0LWluZGVudDotOS4wcHQ7fQ0KQGxpc3QgbDEN Cgl7bXNvLWxpc3QtaWQ6MzM1MzUwNjY1Ow0KCW1zby1saXN0LXR5cGU6aHlicmlkOw0KCW1zby1s aXN0LXRlbXBsYXRlLWlkczo2MzMyNDQ5MCAtNDkzMTcxMTc2IDEzNDgwNzU1NSAxMzQ4MDc1NTcg MTM0ODA3NTUzIDEzNDgwNzU1NSAxMzQ4MDc1NTcgMTM0ODA3NTUzIDEzNDgwNzU1NSAxMzQ4MDc1 NTc7fQ0KQGxpc3QgbDE6bGV2ZWwxDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsN Cgltc28tbGV2ZWwtdGV4dDotOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZl bC1udW1iZXItcG9zaXRpb246bGVmdDsNCgltYXJnaW4tbGVmdDoyMC41cHQ7DQoJdGV4dC1pbmRl bnQ6LTE4LjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgltc28tZmFy ZWFzdC1mb250LWZhbWlseTpDYWxpYnJpO30NCkBsaXN0IGwxOmxldmVsMg0KCXttc28tbGV2ZWwt bnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFi LXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJbWFyZ2luLWxl ZnQ6NTYuNXB0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIg TmV3Ijt9DQpAbGlzdCBsMTpsZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0 Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28t bGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJbWFyZ2luLWxlZnQ6OTIuNXB0Ow0KCXRleHQt aW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0IGwxOmxldmVs NA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3 Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246 bGVmdDsNCgltYXJnaW4tbGVmdDoxMjguNXB0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9u dC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwxOmxldmVsNQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZv cm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9u ZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJbWFyZ2luLWxlZnQ6MTY0LjVw dDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0K QGxpc3QgbDE6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28t bGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51 bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCW1hcmdpbi1sZWZ0OjIwMC41cHQ7DQoJdGV4dC1pbmRlbnQ6 LTE4LjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDE6bGV2ZWw3DQoJe21z by1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNv LWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CW1hcmdpbi1sZWZ0OjIzNi41cHQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWls eTpTeW1ib2w7fQ0KQGxpc3QgbDE6bGV2ZWw4DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1 bGxldDsNCgltc28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1z by1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgltYXJnaW4tbGVmdDoyNzIuNXB0Ow0KCXRl eHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBs MTpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10 ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBv c2l0aW9uOmxlZnQ7DQoJbWFyZ2luLWxlZnQ6MzA4LjVwdDsNCgl0ZXh0LWluZGVudDotMTguMHB0 Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMg0KCXttc28tbGlzdC1pZDo0MDgx NTk4MjY7DQoJbXNvLWxpc3QtdHlwZTpoeWJyaWQ7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOjE5 MTkyMDU1ODAgMTUyMDkxMTAgMTM0ODA3NTU1IDEzNDgwNzU1NyAxMzQ4MDc1NTMgMTM0ODA3NTU1 IDEzNDgwNzU1NyAxMzQ4MDc1NTMgMTM0ODA3NTU1IDEzNDgwNzU1Nzt9DQpAbGlzdCBsMjpsZXZl bDENCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Oi07 DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjps ZWZ0Ow0KCW1hcmdpbi1sZWZ0OjIwLjVwdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQt ZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCW1zby1mYXJlYXN0LWZvbnQtZmFtaWx5OkNh bGlicmk7fQ0KQGxpc3QgbDI6bGV2ZWwyDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxl dDsNCgltc28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgltYXJnaW4tbGVmdDo1Ni41cHQ7DQoJdGV4dC1p bmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCkBsaXN0IGwyOmxl dmVsMw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6 74KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgltYXJnaW4tbGVmdDo5Mi41cHQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglm b250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDI6bGV2ZWw0DQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1z dG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCW1hcmdpbi1sZWZ0 OjEyOC41cHQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0K QGxpc3QgbDI6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28t bGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgltYXJnaW4tbGVmdDoxNjQuNXB0Ow0KCXRleHQtaW5kZW50Oi0x OC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMjpsZXZlbDYNCgl7 bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCglt c28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7 DQoJbWFyZ2luLWxlZnQ6MjAwLjVwdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFt aWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMjpsZXZlbDcNCgl7bXNvLWxldmVsLW51bWJlci1mb3Jt YXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9u ZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJbWFyZ2luLWxlZnQ6MjM2LjVw dDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBs MjpsZXZlbDgNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10 ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3Np dGlvbjpsZWZ0Ow0KCW1hcmdpbi1sZWZ0OjI3Mi41cHQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsN Cglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCkBsaXN0IGwyOmxldmVsOQ0KCXttc28tbGV2 ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZl bC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgltYXJn aW4tbGVmdDozMDguNXB0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6V2lu Z2RpbmdzO30NCkBsaXN0IGwzDQoJe21zby1saXN0LWlkOjE0MDc5OTg0NzA7DQoJbXNvLWxpc3Qt dHlwZTpoeWJyaWQ7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOi00ODUzMDkxMTAgNTAwMDg3MDM0 IDEzNDgwNzU1NSAxMzQ4MDc1NTcgMTM0ODA3NTUzIDEzNDgwNzU1NSAxMzQ4MDc1NTcgMTM0ODA3 NTUzIDEzNDgwNzU1NSAxMzQ4MDc1NTc7fQ0KQGxpc3QgbDM6bGV2ZWwxDQoJe21zby1sZXZlbC1u dW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDotOw0KCW1zby1sZXZlbC10YWIt c3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu dDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCW1zby1mYXJl YXN0LWZvbnQtZmFtaWx5OkNhbGlicmk7fQ0KQGxpc3QgbDM6bGV2ZWwyDQoJe21zby1sZXZlbC1u dW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWIt c3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu dDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDM6bGV2ZWwz DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7 DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjps ZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCkBs aXN0IGwzOmxldmVsNA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxl dmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OlN5 bWJvbDt9DQpAbGlzdCBsMzpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0 Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxl dmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1m YW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMzpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJl ci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0 b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6 LTE4LjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDM6bGV2ZWw3DQoJe21z by1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNv LWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwzOmxl dmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6 bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9u OmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWlseToiQ291cmllciBOZXci O30NCkBsaXN0IGwzOmxldmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJ bXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZl bC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFt aWx5OldpbmdkaW5nczt9DQpvbA0KCXttYXJnaW4tYm90dG9tOjBjbTt9DQp1bA0KCXttYXJnaW4t Ym90dG9tOjBjbTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hh cGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlm XS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQi Pg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94 bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1HQiIgbGluaz0iIzA1NjND MSIgdmxpbms9IiM5NTRGNzIiIHN0eWxlPSJ3b3JkLXdyYXA6YnJlYWstd29yZCI+DQo8ZGl2IGNs YXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1z by1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj5IaSBLZW50LDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpF Ti1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj5UaGFua3MgZm9yIHRoZSBl eHRyYSBkZXRhaWxzL2V4cGxhbmF0aW9uLiZuYnNwOyBQbGVhc2Ugc2VlIGlubGluZSDigKY8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNv LWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxk aXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4w cHQ7cGFkZGluZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48Yj48c3BhbiBsYW5nPSJFTi1VUyI+RnJvbTo8L3NwYW4+ PC9iPjxzcGFuIGxhbmc9IkVOLVVTIj4gS2VudCBXYXRzZW4gJmx0O2tlbnQraWV0ZkB3YXRzZW4u bmV0Jmd0Ow0KPGJyPg0KPGI+U2VudDo8L2I+IDI0IEp1bmUgMjAyMSAyMTo1Mzxicj4NCjxiPlRv OjwvYj4gUm9iIFdpbHRvbiAocndpbHRvbikgJmx0O3J3aWx0b25AY2lzY28uY29tJmd0Ozxicj4N CjxiPkNjOjwvYj4gbmV0Y29uZkBpZXRmLm9yZzsgZHJhZnQtaWV0Zi1uZXRjb25mLXN6dHAtY3Ny QGlldGYub3JnOyBuZXRjb25mLWNoYWlyc0BpZXRmLm9yZzxicj4NCjxiPlN1YmplY3Q6PC9iPiBS ZTogQUQgcmV2aWV3IG9mIGRyYWZ0LWlldGYtbmV0Y29uZi1zenRwLWNzcjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPlJvYiw8bzpwPjwvbzpwPjwvcD4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0i bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPGRp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCkni gJltIG5vdCBzdXJlLiZuYnNwOyBJdCBmZWVscyBsZXNzIFJFU1RmdWwgKGF0IGxlYXN0IHRvIG1l KSB0byBub3QgYWxsb3cgdGhlIGRhdGEgdG8gYmUgcHJvdmlkZWQgYXMgYSBzaW5nbGUgbWVzc2Fn ZSwgZXZlbiBpZiBpbiBwcmFjdGljZSB0aGF0IG1pZ2h0IG5vdCBtYWtlIHNlbnNlIGluIG1vc3Qg KGFsbW9zdCBhbGwpIGNhc2VzLiZuYnNwOyBJZiB5b3Ugd2VyZSB1c2luZyBhIHNlcGFyYXRlIFlB TkcgUlBDIHRvIHNlbmQgdGhlIGNycy1zdXBwb3J0IGFuZCBnZXQNCiB0aGUgcmVxdWVzdC1pbmZv IHRoZW4gb25seSBpbmNsdWRpbmcgdGhlIGNycyBub2RlIGluIHRoZSBib290c3RyYXBwaW5nIGRh dGEgUlBDIHRoZW4gSSB3b3VsZCBoYXZlIG5vIGNvbXBsYWludHMuJm5ic3A7IEkuZS4sIGl0IG9u bHkgZmVlbHMgc3RyYW5nZSB0byBoYW5kbGUgYSB0cmFuc2FjdGlvbmFsIGRlcGVuZGVuY3kgd2l0 aGluIHRoZSBkYXRhIHN0cnVjdHVyZXMgb2YgYSBzaW5nbGUgUlBDIG9uIHdoYXQgaXMgbm9taW5h bGx5IGEgc3RhdGVsZXNzIEFQSS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6 NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttYXJnaW4tbGVmdDozNi4wcHQiPg0KJm5ic3A7 PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bWFyZ2luLWxlZnQ6MzYuMHB0 Ij4NCkFsc28sIHdvcnRoIG5vdGluZyB0aGF0IHVzaW5nIGEgc2VwYXJhdGUgWUFORyBSUEMgdG8g dHJhbnNtaXQgdGhlIGNhcGFiaWxpdGllcyBhdm9pZHMgdGhlIG5lZWQgdG8gcmV0dXJuIGFuIGVy cm9yLiZuYnNwOyBJdCBjb3VsZCBqdXN0IHJldHVybiBzdWNjZXNzIHdpdGggdGhlIHJlcXVpcmVk IGluZm9ybWF0aW9uLiZuYnNwOyBXYXMgdGhpcyBhcHByb2FjaCBjb25zaWRlcmVkIGF0IGFsbCwg YW5kIHdvdWxkIHRoaXMgYmUgdG9vIGJpZyBhIGNoYW5nZT8mbmJzcDsgSeKAmW0gbm90DQogdHJ5 aW5nIHRvIGNyZWF0ZSBleHRyYSB3b3JrIGZvciB5b3UsIG9yIGRlbGF5IHRoaXMgZG9jdW1lbnQg 4oCmPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bWFyZ2luLWxlZnQ6MzYu MHB0Ij4NCiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvO21hcmdpbi1sZWZ0OjM2LjBwdCI+DQpJZiBhIHNlcGFyYXRlIFJQQyB0byBnZXQg dGhlIGNhcGFiaWxpdGllcyBpbiB1bmRlc2lyYWJsZSBvciBpbmZlYXNpYmxlIHRoZW4gY2hhbmdp bmcgdG8gYSBjaG9pY2Ugc2VlbXMgcmVhc29uYWJsZSwgYnV0IEkgd291bGQgcHJvYmFibHkgc3Vn Z2VzdCBrZWVwaW5nIOKAnGludGVuZGVk4oCdIGFuZCBwcm9iYWJseSBrZWVwaW5nIHRoZSBsYW5n dWFnZSBvbiBwYWdlIDQgc29tZXdoYXQgb3BlbiwgaS5lLiwgbm90IHN0cmljdGx5IGxvY2tpbmcg aXQgZG93bg0KIHRvIGRvaW5nIGEgaGFuZHNoYWtlLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDozNi4wcHQiPknigJltIHVuc3VyZSBpdCBpdCBtYWtlcyBzZW5zZSB0byBiZSBjb25j ZXJuZWQgYWJvdXQgdGhlIFJFU1RmdWxuZXNzIG9mIHRoaXMgQVBJLiAmbmJzcDtZZXMsIGl0IHVz ZXMgUkVTVENPTkYsIGJ1dCB0aGF0IGlzIG1vcmUgb3V0IG9mIGNvbnZlbmllbmNlIHRoYW4gYW55 IGluaGVyZW50IG5lZWQgb3IgZGVzaXJlIGZvciB0aGUgQVBJIHRvIGJlICZxdW90O1JFU1RmdWzi gJ0uICZuYnNwO0ZvciBpbnN0YW5jZSwNCiBub3RlIHRoYXQgbmV2ZXIgY291bGQgSFRUUCBjYWNo ZXMgYmUgdXNlZCwgYXMgZWFjaCBtZXNzYWdlIGlzIGRpc3RpbmN0IGZyb20gYW55IG90aGVyLjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5UaGF0IHNh aWQsIHRoZSDigJxnZXQtYm9vdHN0cmFwcGluZy1kYXRh4oCdIFJQQyAqaXMqIGlkZW1wb3RlbnQs IGFzIHRoZSBzYW1lIFBPU1QgKGdldC1ib290c3RyYXBwaW5nLWRhdGEpIHJldHVybnMgdGhlIHNh bWUgcmVzcG9uc2UgKGFzc3VtaW5nIHRoZSBzZXJ2ZXIgaXNu4oCZdCB1cGRhdGVkIGJ5IGFuIG9w ZXJhdG9yIGluIHRoZSBpbnRlcmltKS4gJm5ic3A7VGhpcyBpcyB0cnVlDQogYWxzbyBmb3Igd2hl biBzZW5kaW5nIHRoZSDigJxjc3Itc3VwcG9ydOKAnSBhbmQg4oCcY3Ny4oCdIG5vZGVzLCBhcyBk ZXNjcmliZWQgaW4gdGhlIGN1cnJlbnQgZG9jdW1lbnQuICZuYnNwOyBPZiBjb3Vyc2UsIHRoZSBp ZGVtcG90ZW5jeSBvZiBhIFlBTkcg4oCccnBj4oCdIHN0YXRlbWVudCBpc27igJl0IHRoYXQgbWVh bmluZ2Z1bCwgcmVsYXRpdmUgdG8gYSBSRVNUQ09ORiAmcXVvdDtQT1NU4oCdIHVzZWQgdG8gZWRp dCBjb25maWd1cmF0aW9uIChlLmcuLCBsaWtlICZsdDtlZGl0LWNvbmZpZyZndDsp4oCmaXTigJlz DQogbGlrZWx5IGZhaXIgdG8gc2F5IHRoYXQgWUFORyBSUENzIGFyZSBnZW5lcmFsbHkgTk9UIFJF U1RmdWwuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi PlJlZ2FyZGluZyB1c2luZyBhIHNlcGFyYXRlIFJQQyAocmV0dXJuaW5nIGEgMlhYKSwmbmJzcDs8 c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPiZuYnNwO3llcyBpdCB3YXMgY29uc2lkZXJlZCwgaG93 ZXZlciBub3RlIHRoYXQgaXQgaXMgaW1wb3NzaWJsZSBmb3IgYSZuYnNwO2dlbmVyaWMmbmJzcDtk ZXZpY2UgdG8gYW50aWNpcGF0ZSB3aGF0IHRoZSZuYnNwO3NwZWNpZmljJm5ic3A7ZGVwbG95bWVu dOKAmXMgQ0EgaW5mcmFzdHJ1Y3R1cmUNCiB3aWxsIHJlcXVpcmUgaW4gdGVybXMgb2YgMSkgaWYg KmFueSogQ1NSIGlzIGRlc2lyZWQgKG1vc3Qgb2Z0ZW4gbm90KSBhbmQgMikgd2hlbiBkZXNpcmVk LCB3aGF0IGtleS1hbGdvcml0aG0gYW5kJm5ic3A7Q1NSPC9zcGFuPi08c3BhbiBzdHlsZT0iY29s b3I6YmxhY2siPmF0dHJpYnV0ZXMgdG8gdXNlIChyYXJlbHkgd291bGQgdGhlIG5lYXJseS1lbXB0 eSZuYnNwO0NTUiBhIGRldmljZSBjb3VsZCBwcm9hY3RpdmVseSBzZW5kIGJlIHZpYWJsZSkuICZu YnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2 LjBwdCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5GV0lXLCBpZiBhbiBvdXQtb2YtYmFuZCBS UEMgd2VyZSB1c2VkLCBtb3N0IG9mIHRoZSB0aW1lIGl0IHdvdWxkIGJlIGEgcm91bmR0cmlwIGZv ciBhIG5vLW9wLiAmbmJzcDtUaGUmbmJzcDtpbi1iYW5kJm5ic3A7YXBwcm9hY2ggY3VycmVudGx5 IGRlc2NyaWJlZCBpcyBpZGVhbCBpbiB0aGF0IGl0IG9ubHkgY29uc3VtZXMgZXh0cmEgcmVzb3Vy Y2VzDQogd2hlbiBuZWVkZWQuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIGhhZG7i gJl0IHBpY2tlZCB1cCBvbiB0aGF0IG51YW5jZSwgYW5kIEkgYWdyZWUgdGhhdCB0aGlzIG1ha2Vz IGFuIG91dCBvZiBiYW5kIGFwcHJvYWNoIGxlc3MgZWZmaWNpZW50IGFuZCBsZXNzIGhlbHBmdWwu PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+VGhhdCBzYWlkLCBpdCBkb2Vz IGxpdHRsZSBoYXJtIGZvciB0aGUgZHJhZnQgdG8gc2F5IChpbiBhZGRpdGlvbiB0byBzdXBwb3J0 aW5nIHRoZSDigJxpbi1iYW5k4oCdIG1lY2hhbmlzbSkg4oCcYSBkZXZpY2UgTUFZIG9idGFpbiB0 aGUg4oCYcmVxdWVzdC1pbmZv4oCZIHRocm91Z2ggYW4gb3V0LW9mLWJhbmQgbWVjaGFuaXNtIG91 dHNpZGUgdGhlIHNjb3BlIG9mIHRoaXMgZG9jdW1lbnTigJ0uDQogJm5ic3A7SWYgdGhpcyByZXNv bHZlcyB5b3VyIGNvbmNlcm4sIHRoZW4gaXTigJlzIGFuIGVhc3kgdGhpbmcgdG8gYWRkLCBhbmQg aXQgbWF5ICh0byB5b3VyIHBvaW50KSBwcm92aWRlIHNvbWUgZmxleGliaWxpdHkuICZuYnNwO0kg dGhpbmsgdGhhdCBpdCBpcyBjb25zaXN0ZW50IHdpdGggeW91ciBsYXN0IHBhcmFncmFwaCBhYm92 ZS4gJm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk5vdCBuZWNlc3NhcnkuJm5ic3A7IEni gJltIGhhcHB5IHdpdGggeW91ciBleHBsYW5hdGlvbiBhcyB0byB3aHkgaGF2aW5nIGl0IGluYmFu ZCBwcmFnbWF0aWNhbGx5IG1ha2VzIG1vcmUgc2Vuc2UuPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjM2LjBwdCI+SSBzdGlsbCB0aGluayB3ZSBzaG91bGQgcHV0IOKAnGNzci1zdXBwb3J0 4oCdIGFuZCDigJxjc3LigJ0gdW5kZXIgYSAmcXVvdDtjaG9pY2XigJ0gdGhvdWdoLCBhcyB0aGUg dXNlLWNhc2UgZm9yIHNlbmRpbmcgYm90aCBhdCB0aGUgc2FtZSB0aW1lIGlzIHZlcnkgc21hbGwg YW5kIGl0IHNlZW1zIHdyb25nIHRvIGVuY291cmFnZS9zdWdnZXN0IGl04oCZcyBhIGdvb2QgaWRl YSBvciB0byBhc2sgc2VydmVycw0KIHRvIGhhdmUgdG8gc3VwcG9ydCB0aGUgY2FzZS48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+QWdyZWVkLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxi cj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6 NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0K PGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+ DQo8ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRv bTo1LjBwdCI+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90 dG9tOjUuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttYXJnaW4tbGVmdDo3Mi4wcHQiPg0K PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNh JnF1b3Q7LHNhbnMtc2VyaWYiPjQuIFJlZmVyZW5jZXMuICZuYnNwO1JGQyAzNjg4IHByb2JhYmx5 IHNob3VsZCBiZSBub3JtYXRpdmUgZm9yIHRoZSBYTUw8L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bWFyZ2luLWxlZnQ6NzIuMHB0Ij4N CjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGlj YSZxdW90OyxzYW5zLXNlcmlmIj5yZWdpc3RyeSwgbm90aW5nIHRoYXQ8YnI+DQo8YnI+DQo8YnI+ DQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1 LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttYXJnaW4t bGVmdDo3Mi4wcHQiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPlJGQyA2MDIwIGlzIG5vcm1hdGl2ZWx5 IHJlZmVyZW5jZWQuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvO21hcmdpbi1sZWZ0OjcyLjBwdCI+DQo8c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+ PGJyPg0KUmVhbGx5PyAmbmJzcDtJIHRlbmQgdG8gZGlzYWdyZWUgYXMgSSB0aG91Z2h0IHRoZSBs aXRtdXMgdGVzdCBmb3IgaWYgc29tZXRoaW5nIHdlcmU8YnI+DQpub3JtYXRpdmUgd2FzIGlmIGl0 IGhhZCB0byBiZSB1bmRlcnN0b29kIGluIG9yZGVyIHRvIGltcGxlbWVudCB0aGUgUkZDLjwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjwvYmxvY2txdW90ZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bztt YXJnaW4tbGVmdDo3Mi4wcHQiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1m YW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPjxicj4NCkkgZ3Vlc3MgdGhl IGxvZ2ljIGhlcmUgaXMgdGhhdCB5b3UgbmVlZCB0byB1bmRlcnN0YW5kIFJGQyA2MDIwIHRvIHVu ZGVyc3RhbmQgdGhlIHJlZ2lzdHJ5IHRoYXQgaXMgaGF2aW5nIGVudHJpZXMgYWRkZWQgKGdpdmVu IHRoYXQgUkZDIDc5NTAgZG9lc24ndCBkZWZpbmUgdGhlIHJlZ2lzdHJ5KS48YnI+DQo8YnI+DQpC dXQsIGFzIHBlciBiZWxvdywgSSdsbCBjaGVjayB3aXRoIHRoZSBJRVNHIG9uIHRoaXMgb25lLjxi cj4NCjxicj4NCjxicj4NCjxicj4NCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxibG9ja3F1b3Rl IHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvO21hcmdpbi1sZWZ0OjcyLjBwdCI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+PGJy Pg0KWW91IHJhaXNlIGFuIGludGVyZXN0aW5nIHBvaW50IGFib3V0IFJGQyA2MDIwIGJlaW5nIE5v cm1hdGl2ZSwgYXMgSSBzZWUgdGhhdDxicj4NCml0IGlzIE5PVCBub3JtYXRpdmUgaW4gYXQgbGVh c3Qgb25lIG9mIG15IG90aGVyIGRyYWZ0cy4gJm5ic3A7SSB0aGluayB0aGF0IGl0IGlzIGE8YnI+ DQpyZWFzb25hYmxlIHBvc2l0aW9uIHRoYXQsIGlmIHRoZSBSRkMgNjAyMCByZWZlcmVuY2UgaXMg b25seSBwcmVzZW50IGluIHRoZTxicj4NCklBTkEgQ29uc2lkZXJhdGlvbnMgc2VjdGlvbiwgdGhl biBpdCBpcyBJTkZPUk1BVElWRSBhcyBmYXIgYXMgdGhlIGRyYWZ0IGFzIGE8YnI+DQp3aG9sZSBn b2VzLiAmbmJzcDtUaG91Z2h0cz88L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Jsb2NrcXVvdGU+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bWFyZ2luLWxlZnQ6NzIuMHB0Ij4NCjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5z LXNlcmlmIj48YnI+DQpMZXQgbWUgY2hlY2sgd2l0aCB0aGUgSUVTRyBhbmQgZ2V0IGJhY2sgdG8g eW91IG9uIHRoaXMgb25lLiAmbmJzcDtBbHRob3VnaCwgcGVyaGFwcyB3b3J0aCBub3RpbmcgdGhh dCBib3RoIHRoZXNlIHJlZmVyZW5jZXMgYXJlIG5vcm1hdGl2ZSBpbiBSRkMgODM0MyAoYW5kIHRo ZXkgYXJlIG9ubHkgcmVmZXJlbmNlZCBmcm9tIHRoZSBJQU5BIHJlZ2lzdHJ5IGVudHJpZXMpLjwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0bzttYXJnaW4tbGVmdDo3Mi4wcHQiPg0KJm5ic3A7PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bWFyZ2luLWxlZnQ6NzIu MHB0Ij4NCkFjaywgSSB3aWxsIHdhaXQgZm9yIHlvdXIgcmVzcG9uc2Ugb24gdGhpcyBpdGVtLjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21hcmdpbi1sZWZ0OjM2LjBwdCI+ DQombmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttYXJnaW4tbGVm dDozNi4wcHQiPg0KSSBkaWRu4oCZdCByZWFsbHkgZ2V0IGEgc3Ryb25nIGFuc3dlciBmcm9tIG90 aGVyIEFEcyBvbiB0aGlzLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21h cmdpbi1sZWZ0OjM2LjBwdCI+DQombmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0bzttYXJnaW4tbGVmdDozNi4wcHQiPg0KU29tZSBvZiB1cyBmZWx0IHRoYXQgYSBub3Jt YXRpdmUgcmVmZXJlbmNlIGlzIGFwcHJvcHJpYXRlIChiZWNhdXNlIHlvdSBuZWVkIHRvIHVuZGVy c3RhbmQgdGhlIG1lYW5pbmcgb2YgdGhlIHJlZ2lzdHJ5IHRoYXQgaXMgYmVpbmcgdXBkYXRlZCks IGFuZCBub2JvZHkgb2JqZWN0ZWQgdG8gdGhhdCBjaGFyYWN0ZXJpemF0aW9uLCBidXQgZXF1YWxs eSwgc29tZSBBRHMgZGlkbuKAmXQgdGhpbmsgdGhhdCBJbmZvcm1hdGl2ZSBpcyBuZWNlc3Nhcmls eSB3cm9uZw0KIGFuZCBpdCBpcyBwcm9iYWJseSBub3Qgd29ydGggd29ycnlpbmcgYWJvdXQuPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bWFyZ2luLWxlZnQ6MzYuMHB0Ij4N CiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21hcmdpbi1sZWZ0 OjM2LjBwdCI+DQpNeSByZWNvbW1lbmRhdGlvbiBpcyB0byBtYWtlIHRoZW0gbm9ybWF0aXZlLCBi ZWNhdXNlIHRoYXQgaXMgd2hhdCBoYXMgYmVlbiBkb25lIGZvciBvdGhlciBSRkNzIHdpdGggWUFO RyBtb2R1bGVzIChhbmQgY29uc2lzdGVuY3kgaXMgZ29vZCksIGFuZCBJIGRvbuKAmXQgc2VlIGFu eSBvdGhlciBBRHMgb2JqZWN0aW5nIHRvIHRoaXMgYXBwcm9hY2guJm5ic3A7IEkgd291bGQgcmVn YXJkIHRoaXMgYXMgdGhlIHBhdGggb2YgbGVhc3QgcmVzaXN0YW5jZS48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5SZWdhcmRpbmcgJnF1b3Q7YmVjYXVzZSB5b3UgbmVl ZCB0byB1bmRlcnN0YW5kIHRoZSBtZWFuaW5nIG9mIHRoZSByZWdpc3RyeSB0aGF0IGlzIGJlaW5n IHVwZGF0ZWTigJ0sJm5ic3A74oCceW91JnF1b3Q7Jm5ic3A7b25seSByZWZlcnMgdG8gSUFOQSwg cmlnaHQ/ICZuYnNwOyBJIGRvbuKAmXQgdGhpbmsgU1pUUC1jbGllbnQgYW5kL29yIFNaVFAtc2Vy dmVyIGRldmVsb3BlcnMgbmVlZCB0byBrbm93IGFib3V0IElBTkENCiByZWdpc3RyaWVzIHRvIGlt cGxlbWVudCB0aGUgZG9jdW1lbnQsIHJpZ2h0IGFnYWluPyAmbmJzcDsgQ29uc2lzdGVuY3kgaXMg Z29vZCwgeWVzLCZuYnNwO2J1dCBub3Qgd2hlbiZuYnNwO2NvbnNpc3RlbnRseS13cm9uZyAmbmJz cDs7KSAmbmJzcDsgW0nigJltIHNwZWFraW5nJm5ic3A7dGhlb3JldGljYWxseSZuYnNwO2hlcmUs IG5vdCB0byBhbnkgcGFydGljdWxhciBncm91cCBvZiBwZW9wbGVdJm5ic3A7PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPk15IHVuZGVyc3RhbmRpbmcgaXMgbW9yZSBhbG9uZyB0aGVzZSBsaW5lczo8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VG8gZnVsbHkgdW5kZXJzdGFuZCBldmVyeXRoaW5nIGlu IHRoZSBSRkMgKGkuZS4sIGRlZmluaXRpb24gb2YgYSBub3JtYXRpdmUgcmVmZXJlbmNlKSwgYSBy ZWFkZXIgb2YgdGhlIFJGQyB3b3VsZCBuZWVkIHRvIHVuZGVyc3RhbmQgd2hhdCBpcyBtZWFudCBi eSB0aGUgZHJhZnQgYWRkaW5nIGFuIGVudHJ5IHRvIGEgcmVnaXN0cnkuJm5ic3A7IEkuZS4sIEni gJltIG5vdCBzYXlpbmcgdGhhdCBhIG5vcm1hdGl2ZSByZWZlcmVuY2UNCiBpcyBuZWVkZWQgdG8g dW5kZXJzdGFuZCB0aGUgYWN0IG9mIGFkZGluZyBhIGZpZWxkIHRvIGEgcmVnaXN0cnksIGJ1dCBp dCBpcyBuZWNlc3NhcnkgdG8gdW5kZXJzdGFuZCB0aGUgc2lnbmlmaWNhbmNlIG9mIHdoeSB0aGF0 IG1hdHRlcnMuJm5ic3A7IEluIHRoaXMgY2FzZSwgdGhlIGF1dGhvciBzaG91bGQgdW5kZXJzdGFu ZCB0aGF0IGFkZGluZyBhbiBlbnRyeSB0byBtb2R1bGUgbmFtZSByZWdpc3RyeSBtZWFucyB0aGF0 IGl0IHNob3VsZCBiZSBhIChob3BlZnVsbHkNCiBnbG9iYWxseSkgdW5pcXVlIG5hbWUgZm9yIHRo YXQgbW9kdWxlIGFuZCBub3QgZGVmaW5lZCBpbiBhbm90aGVyIFJGQyB3aXRoIGFuIGVudGlyZWx5 IGRpZmZlcmVudCBkZWZpbml0aW9uLiZuYnNwOyBJLmUuLCBpdCBzaG91bGQgYmUgcG9zc2libGUg dG8gZmV0Y2ggdGhlIG1vZHVsZSBmcm9tIGEgcmVwdXRhYmxlIHNvdXJjZSBieSAobmFtZSwgcmV2 aXNpb24pIHdpdGhvdXQgaGF2aW5nIHRvIGV4dHJhY3QgaXQgZnJvbSB0aGUgUkZDICh3aGljaCB3 b3VsZA0KIGJlIHJlcXVpcmVkIGlmIGl0IHdhcyBub3QgdW5pcXVlbHkgbmFtZWQpLjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5BIHNlcGFyYXRlIGFyZ3VtZW50IGlzIHRoYXQgdGhpcyBkb2N1bWVu dCBsb2dpY2FsbHkgaGFzIGEgZGVwZW5kZW5jeSBvbiB0aGF0IElBTkEgcmVnaXN0cnkgZXhpc3Rp bmcsIGFuZCBvZnRlbiB0aG9zZSBkZXBlbmRlbmNpZXMgYmV0d2VlbiBkb2N1bWVudHMgYXJlIG9m dGVuIGluZGljYXRlZCBhcyBub3JtYXRpdmUgcmVmZXJlbmNlcyB0byBpbmRpY2F0ZSB0aGUgZGVw ZW5kZW5jeS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Tm90ZSwgdGhlcmUgaXMgYWxzbyBhIGJp dCBvZiB0ZXh0IGluIHNlY3Rpb24gMy4xIG9mIFJGQyA4MjE2IHdoaWNoIGluZGljYXRlcyB0aGF0 IGEgcmVmZXJlbmNlIHRvIHRoZSBSRkMgZGVmaW5pdGlvbiB0aGUgcmVnaXN0cnkgaXMgZXhwZWN0 ZWQsIGJ1dCBub3Qgd2hhdCBzb3J0IG9mIHJlZmVyZW5jZSB0aGF0IHNob3VsZCBiZS48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBw dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjBjbTttYXJnaW4tcmlnaHQ6MGNtO21hcmdp bi1ib3R0b206MTIuMHB0O21hcmdpbi1sZWZ0OjM2LjBwdCI+DQpUaGlzIGlzIG5vdCBzb21ldGhp bmcgSSBjYXJlIHRvIGJsb2NrIG9uLCBidXQgSSBkbyB3YW50IE5vcm1hdGl2ZSByZWZlcmVuY2Vz IHRvIGFkaGVyZSB0byB0aGUgcHJpbmNpcGxlIG9mIHRoZXkgYXJlIGZvciZuYnNwOyZuYnNwOypp bXBsZW1lbnRvcnMqICh3aGljaCBkb2VzbuKAmXQgaW5jbHVkZSBJQU5BLCBJTU8pLiAmbmJzcDtS ZWxhdGVkLCB0aGVyZeKAmXMgYWxzbyB0aGUgWE1MIFJlZ2lzdHJ5IChSRkMgMzY4OCk7IHNob3Vs ZCZuYnNwO2FsbCBkb2N1bWVudHMgcHVibGlzaGluZyBhDQogWUFORyBtb2R1bGUgaGF2ZSBhIE5v cm1hdGl2ZSByZWZlcmVuY2UgZHVlIHRvIGFuIElBTkEgaW5zdHJ1Y3Rpb24/ICZuYnNwO1tQUzog c29tZSZuYnNwO1JGQ3MgZXhpc3QgKGkuZS4sIHB1Ymxpc2hlZCkgYWxyZWFkeSBoYXZpbmcgUkZD IDM2ODggYXMgSW5mb3JtYXRpdmXigKZJIHdvdWxkbuKAmXQgYnkgc3VycHJpc2VkIGlmIHNvbWUg YWxzbyBleGlzdCBoYXZpbmcgUkZDIDYwMjAgYXMmbmJzcDtJbmZvcm1hdGl2ZSwgYnV0IGEgcXVp Y2sgc2VhcmNoIGRpZG7igJl0IGZpbmQgYW55XTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij5JIGFsc28gZG8gbm90IGludGVu ZCB0byBibG9jayB0aGUgZG9jdW1lbnQgb24gdGhpcyBwb2ludC4mbmJzcDsgQnV0IEkgZG9u4oCZ dCB0aGluayB0aGF0IG5vcm1hdGl2ZSByZWZlcmVuY2VzIGFyZSBqdXN0IGZvciBpbXBsZW1lbnRv cnMsIHRoZXkgYWxzbyBkZWZpbmUgYW55dGhpbmcgdGhhdCBpcyByZXF1aXJlZCB0byBiZSBzdGFi bGUgZm9yIHRoZSBwdWJsaXNoZWQgc3RhbmRhcmQNCiB0byBiZSBzdGFibGUsIGkuZS4sIHRvIGF2 b2lkIHJlbHlpbmcgb24gc29tZXRoaW5nIHRoYXQgY291bGQgY2hhbmdlIHVuZGVyIG91ciBmZWV0 LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0 b206MTIuMHB0Ij5PbiB0aGUgWE1MIHJlZ2lzdHJ5IHF1ZXN0aW9uLCB0aGUgYW5zd2VyIGlzIHll cy4gJm5ic3A7Jm5ic3A7SeKAmW0gc3VnZ2VzdGluZyB0aGF0IGFsbCBkb2N1bWVudHMgdGhhdCB1 cGRhdGUgcmVnaXN0cmllcyBzaG91bGQgbm9ybWF0aXZlbHkgcmVmZXJlbmNlIHRoZSBkb2N1bWVu dCB0aGF0IGRlZmluZXMgdGhlIHJlZ2lzdHJ5LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij5Nb3JlIGdlbmVyYWxseSwgSeKA mW0gbm90IGVudGlyZWx5IHN1cmUgdGhhdCB0aGUgc3BsaXQgYmV0d2VlbiBub3JtYXRpdmUgYW5k IGluZm9ybWF0aXZlIHJlZmVyZW5jZXMgaXMgdGhhdCBoZWxwZnVsIGFuZCBzZWVtcyB0byBjYXVz ZSBtb3JlIGRpc2N1c3Npb24gdGhhdCBpdCBpcyB3b3J0aC4mbmJzcDsgSSB3b3VsZCByZWFsbHkg cHJlZmVyIHRoYXQgdGhlcmUgd2VyZSAzDQogY2F0ZWdvcmllcyBvZiByZWZlcmVuY2VzIChvciBw ZXJoYXBzIG9uZSBvZiB0aGUgZXhpc3RpbmcgY2F0ZWdvcmllcyBhcmUgc3BsaXQgaW50byAyKS48 bzpwPjwvbzpwPjwvcD4NCjxvbCBzdHlsZT0ibWFyZ2luLXRvcDowY20iIHN0YXJ0PSIxIiB0eXBl PSIxIj4NCjxsaSBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1hcmdpbi1ib3R0b206 MTIuMHB0O21hcmdpbi1sZWZ0OjBjbTttc28tbGlzdDpsMCBsZXZlbDEgbGZvNCI+DQpEb2NzIHRo YXQgYW4gYXV0aG9yIGlzIHJlY29tbWVuZGVkIHRvIHJlYWQgYmVmb3JlIHJlYWRpbmcgdGhpcyBk b2MuPG86cD48L286cD48L2xpPjxsaSBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1h cmdpbi1ib3R0b206MTIuMHB0O21hcmdpbi1sZWZ0OjBjbTttc28tbGlzdDpsMCBsZXZlbDEgbGZv NCI+DQpEb2NzIHRoYXQgdGhpcyBkb2N1bWVudCByZWxpZXMgb24gZm9yIHRoaXMgc3BlY2lmaWNh dGlvbiB0byBiZSBjb3JyZWN0LjxvOnA+PC9vOnA+PC9saT48bGkgY2xhc3M9Ik1zb0xpc3RQYXJh Z3JhcGgiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdDttYXJnaW4tbGVmdDowY207bXNvLWxp c3Q6bDAgbGV2ZWwxIGxmbzQiPg0KT3RoZXIgcmVsYXRlZCBkb2NzIHRoYXQgcmVhZGVycyBvZiB0 aGlzIGRvY3VtZW50IG1pZ2h0IGZpbmQgaGVscGZ1bC48bzpwPjwvbzpwPjwvbGk+PC9vbD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+VG9kYXksIEkg c2VlIHRoYXQgbm9ybWF0aXZlIHJlZmVyZW5jZXMgY292ZXIgYm90aCAoMSkgYW5kICgyKSwgYnV0 IGZvciBtb3N0IHJlYWRlcnMgSSBzdXNwZWN0IHRoYXQgaXMgb25seSAoMSkgdGhhdCBpcyByZWFs bHkgdXNlZnVsIHRvIHRoZW0uJm5ic3A7IEZXSVcsIEkgd291bGQgcHV0IHRoZSA2MDIwIGFuZCAz Njg4IHJlZmVyZW5jZXMgaW50byB0aGUgc2Vjb25kIGNhdGVnb3J5LjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij5Bbm90aGVy IHF1ZXN0aW9uIHRoYXQgY29tZXMgdXAgYXJlIHJlZmVyZW5jZXMgZm9yIG9wdGlvbmFsIGZlYXR1 cmVzICh3aGljaCBhY2NvcmRpbmcgdG8gdGhlIGN1cnJlbnQgcnVsZXMgbmVlZCB0byBiZSBub3Jt YXRpdmUpLiZuYnNwOyBJZiB0aGVzZSBhcmUgZmVhdHVyZXMgdGhhdCByZWFkZXJzIGFyZSB1bmxp a2VseSB0byBjYXJlIGFib3V0LCB0aGVuIGFnYWluIEkgc2VlDQogdGhlbSBhcyBmaXR0aW5nIGlu dG8gKDIpIHJhdGhlciB0aGFuICgxKS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+SSBzdXNwZWN0IHRoYXQgbW9zdCBSRkNz IHRvZGF5LCBoYW5kbGUgdGhlIHNwbGl0IGJldHdlZW4gKDEpIGFuZCAoMikgaW4gYW4gYWRob2Mg d2F5LCBieSBoYXZpbmcgdGhlIGludHJvZHVjdGlvbiBkZXNjcmliZSBicmllZmx5IHJlZmVyZW5j ZSB0aGUgZG9jcyB0aGF0IGZpdCBpbnRvICgxKS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MGNtO21hcmdpbi1yaWdodDowY207 bWFyZ2luLWJvdHRvbToxMi4wcHQ7bWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxicj4NCjxicj4NCkJU Vywgb3RoZXIgZHJhZnRzIGluIHlvdXIgcXVldWUgaGF2ZSAmcXVvdDtJbmZvcm1hdGl2ZeKAnSBz ZXQgZm9yIFJGQyA2MDIwLCBhbmQgb25lIChuZXRjb25mLW5vdGlmaWNhdGlvbi1jYXBhYmlsaXRp ZXMpJm5ic3A7aW5jb3JyZWN0bHkgcmVmZXJlbmNlcyBSRkMgNzk1MCBpbnN0ZWFkIG9mIFJGQyA2 MDIwIChBcyBzaGVwaGVyZCwgSSBhcG9sb2dpemUgZm9yIG1pc3NpbmcgaXQsIGJ1dCBpdOKAmXMg b25lIHRoaW5nJm5ic3A7dG8gdGVzdCBpZiBhbGwgdGhlIHJlZmVyZW5jZXMgcHJvdmlkZWQNCiBh cmUgYWNjdXJhdGUgW2kuZS4sIHRoZSBkb2MgKmRvZXMqIGhhdmUgYSBub3JtYXRpdmUgZGVwZW5k ZW5jeSBvbiA3OTUwXSwmbmJzcDthbmQgYW5vdGhlciB0byBzZWUgaWYgYW55IHJlZmVyZW5jZXMg d2VyZSBtaXNzaW5nIGFsdG9nZXRoZXLigKZpLmUuLCBmaW5kaW5nIHRoZSBnYXBzKS48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBw dCI+VGhhbmtzLiZuYnNwOyBJIHRoaW5rIHRoYXQgSSBwaWNrZWQgdXAgb24gdGhpcyBpbiBteSBB RCByZXZpZXcuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OjBjbTttYXJnaW4tcmlnaHQ6MGNtO21hcmdpbi1ib3R0b206MTIuMHB0 O21hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8YnI+DQo8YnI+DQpQUzogdGhlcmXigJlzIGEgc2VwYXJh dGUgZW1haWwgdGhyZWFkIChSZXVzZSBvZiBTWlRQLUNTUiBZQU5HIGRlZmluaXRpb24gaW4gQlJT S0ktQUUpIHJlZ2FyZGluZyB0aGlzJm5ic3A7ZG9jdW1lbnQgdGhhdCBpcyBwZW5kaW5nIHlvdXIg ZmVlZGJhY2suICZuYnNwO0lkZWFsbHkgSSBjYW4gY29sbGVjdCB0aGF0IGFuZCB0aHVzIGFwcGx5 IGFsbCB1cGRhdGVzIGluIG9uZSBzaG90LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij5Tb3JyeSwgSSBoYWQgbWlzc2VkIHRo aXMgdGhyZWFkLiZuYnNwOyBJ4oCZdmUgbm93IHJlcGxpZWQuPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPlRoYW5rcyw8YnI+ DQpSb2I8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t Ym90dG9tOjEyLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Sy48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9k eT4NCjwvaHRtbD4NCg== --_000_DM4PR11MB5438CA53561F81165429C3ABB5069DM4PR11MB5438namp_-- From nobody Fri Jun 25 03:57:44 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA5813A1193 for ; Fri, 25 Jun 2021 03:57:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=btconnect.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3s9UFrevFtCV for ; Fri, 25 Jun 2021 03:57:38 -0700 (PDT) Received: from EUR05-DB8-obe.outbound.protection.outlook.com (mail-db8eur05on2104.outbound.protection.outlook.com [40.107.20.104]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 62E823A118F for ; Fri, 25 Jun 2021 03:57:37 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=F2ub0Td5O8FIiAQzPkczxvN36H6kxDXJvjkebGafk1j8WgdlvQR8oeBJ7J+Syp7Vkvu1oLjthIeYKGLx/m3buCvc3v0pOn164HyTmQKszd5Dcge/Ag+7afDSVxTkzA3X53dJLRUQVW4QP7RtKXC47x7lxlLNs2E55PsfHw2wUKfXCnhFGL7v5FF096u2UeE4SaJuWtzmfZdP2qFWwbqvWlUEtHTi0JH5z5r1omrUC+lvdXU48z9UhI8wY9iBjo+QkY8JMhokYJkYfy3rUpz9VZaS3qT24/vhCTOrrih/qxVXRxwYXsbXWtAjRaduyJ/tYOfLtfKXBkhi0IsQJz7j5g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=z2vVfrQEgq00cSSDMvESS/J9JfeZQlIH7jIu60bOloE=; b=YZydtcwyqBCsd2Rccqyz8tV+DIh5s7GHn0fZRG+RqrLUwGonmHPXdtIGTjdsX68MasIug9QbcTK24QoQK6wQ/dGqPSu4x5+2SZ9vSs1F1XFZJWY52aoAcQRiKWtrZCnLYNjSJOxdWmY32OIyzYo+05MQDRlrAT5TCrl55jFBelcDHMQGh94TfJVzg12V1Zl8eu6/zcaZKiXYzYlNXmKWiWifXiFSq3RDbJKJBnOOftL8B4lcywubE231OenLYEf8J5w7NqIq++rzRqP2exeT/kZ51qB/b2UviC/ks0kMqcFaFR1s+AWeikBaM6j0G4ZSzyI684wyDaxuISOzug/k3w== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=btconnect.com; dmarc=pass action=none header.from=btconnect.com; dkim=pass header.d=btconnect.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btconnect.onmicrosoft.com; s=selector2-btconnect-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=z2vVfrQEgq00cSSDMvESS/J9JfeZQlIH7jIu60bOloE=; b=ol6RIxtHknSOXf9akje9FdVl8hfUneLj/8NO/nhVGoIv3KSZiD7UH9xLtAmG4wrFLR61dFegyEqWKggT/lt/QnW+Te1VzxRpi1zOHOQ9rO8Byb28C++b9Vi8n0C2Zo4kxy54hhak/mfS/kHlB/SbeCM5pOl3sHFWkhDGN4YWGgI= Received: from AM7PR07MB6248.eurprd07.prod.outlook.com (2603:10a6:20b:134::11) by AM5PR0701MB2290.eurprd07.prod.outlook.com (2603:10a6:203:f::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4287.12; Fri, 25 Jun 2021 10:57:35 +0000 Received: from AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::a05a:a474:bf78:f0a9]) by AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::a05a:a474:bf78:f0a9%8]) with mapi id 15.20.4264.020; Fri, 25 Jun 2021 10:57:35 +0000 From: tom petch To: Kent Watsen , "netconf@ietf.org" Thread-Topic: X.690 was Re: [netconf] [ssh/tls]-client-server updates Thread-Index: AQHXZGnnc2uiywZU1ECol5V47erwAqskl41e Date: Fri, 25 Jun 2021 10:57:35 +0000 Message-ID: References: <0100017a203b3fbe-94e25349-4cf7-4b3a-b726-9d837f4c0841-000000@email.amazonses.com> In-Reply-To: <0100017a203b3fbe-94e25349-4cf7-4b3a-b726-9d837f4c0841-000000@email.amazonses.com> Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: watsen.net; dkim=none (message not signed) header.d=none;watsen.net; dmarc=none action=none header.from=btconnect.com; x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 85997786-8a36-4ec1-3b63-08d937c80a48 x-ms-traffictypediagnostic: AM5PR0701MB2290: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM7PR07MB6248.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(346002)(396003)(136003)(366004)(376002)(39860400002)(66946007)(9686003)(5660300002)(110136005)(4744005)(66476007)(91956017)(478600001)(76116006)(66446008)(33656002)(66556008)(86362001)(26005)(122000001)(8676002)(38100700002)(52536014)(71200400001)(8936002)(2906002)(15650500001)(316002)(6506007)(7696005)(186003)(55016002)(83380400001)(53546011)(64756008); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?iso-8859-1?Q?v1GcX6AwJjQaAhvI4EhkkTG5sGU7mPo0N9O4Y1N4BskrmY4UOPRg8rmoEK?= =?iso-8859-1?Q?J/Zzk7mRuyBp1x747TGxP2eMn8m7ip1DJLVCP0L9JPjWSyzX0uZlADMqLR?= =?iso-8859-1?Q?IT5fLa0+00QF/fIRVGERfB6UjjTWOvXqljvSBmDXb7BrgpxKJ5NhKQdePw?= =?iso-8859-1?Q?yWg0K3bVFvEmgEtBBazeQ9y4AWr/9d2cQhwddDpsJE/NGrB6UV3hWVR4sg?= =?iso-8859-1?Q?RF50dCD0AibDljN7/IwIypKnR65/zwicPhgw+1TBL8BQ/Ccer4f1dyPORO?= =?iso-8859-1?Q?1cqSj+8GYlaL+zLFSQhtuSUKIRszUs+TvmcaEaQJU9SQ2nEHA3UbhEhmmy?= =?iso-8859-1?Q?R4sE/KYEtEUz4he8cPxpgQKqNnG/6ijvVKeLNtc1Gt7rlDcfW6U5H/0qXA?= =?iso-8859-1?Q?ZVL78a5ySFMYuPXfi9TyWNdjDB8S/CGQRgD3iS5u23yBzQ1+0Us2ekEKKG?= =?iso-8859-1?Q?Md+ZFielGlDNWAjq86f1iSR5IpYz/a3UITGvpW72VGnhqZY9munN3sDwQM?= =?iso-8859-1?Q?vDeLnmlxpuszunZAuS5cU3DOtfB+xvsw+7UzVdReTV7Q9flTx1LFZrrM7Q?= =?iso-8859-1?Q?7XSM7P+RYw4MIa93B2TrUKRtAtq+v6VCn4MThRHDIUNlaXKx+0mDDnRhd+?= =?iso-8859-1?Q?FJjniwgh1nV+dbl47uOnTSCylKIPac1Tqqh94IFhF0oApwphHj3hY2KkLv?= =?iso-8859-1?Q?B1SngjepMArgTXk1pXA+CC8hyO/lgXeSwNMo2UsHuHWfqdMyHLqM/ovKBD?= =?iso-8859-1?Q?lODMlPo4PeLHhiW25toPFrcuIUVzwiS3XRHD81SkD3qQsPjdESoA9q/5QY?= =?iso-8859-1?Q?gU81YpnjbhmRqOMrsVqD0V5FFPHbdk5htJdGyJh2k33Vst/VLEzZ4JAgs2?= =?iso-8859-1?Q?vNLMPprVbUufcSzokgOY5EIH30ySV1p5yA4Tga7eCV49OMalSvG51eXMf9?= =?iso-8859-1?Q?96wJi8ZATxBnEy02LYPOwMPsfZHlOd0TeXTFvdFHnlum9ZWcowtg/pXGts?= =?iso-8859-1?Q?FC9aL9EA22doRiO/jWkTN3eea5sHCQCmeNt0amngieNyDL8/2WNLGPZuDj?= =?iso-8859-1?Q?x3naoG9Vidll94gjb28raALjnWnclx42SfqULQYTHxqc0WTuC4XhDUieo/?= =?iso-8859-1?Q?4RZxLCrMFX9OPnIo4J21E2dPCG7nELvbyR+y/XNGaxRhStuU1zdqhQlyrU?= =?iso-8859-1?Q?rSpwHQa+Hy1mrpcXUGKEVjM1TdHuAuPFlEW+vVEcoGbrfPenKHSxiwuCpx?= =?iso-8859-1?Q?pkvqUvMtAGXLY62139lBAfDJO+wK77kf99nVAkxooMNCWC9QFBaKcDRsev?= =?iso-8859-1?Q?hQJBh+Jc6sEW7WQ7vyvoVYbUXspYmZ06DsMKBIvfEshgdfFM5lGayfq2u8?= =?iso-8859-1?Q?QizoaZ1Yfe?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: btconnect.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AM7PR07MB6248.eurprd07.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 85997786-8a36-4ec1-3b63-08d937c80a48 X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Jun 2021 10:57:35.4282 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: cf8853ed-96e5-465b-9185-806bfe185e30 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 0mhqci4wa1vgk92wAMJa6EpnR/NS/4JsrtxODzIRPNQjrgphC5LeNjT0h9DZZmpWFBGGNBkDuMKOtKVTpcHWOg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5PR0701MB2290 Archived-At: Subject: [netconf] X.690 was Re: [ssh/tls]-client-server updates X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jun 2021 10:57:43 -0000 From: netconf on behalf of Kent Watsen =0A= Sent: 18 June 2021 18:46=0A= To: netconf@ietf.org=0A= Subject: [netconf] [ssh/tls]-client-server updates=0A= =0A= More a comment for crypto-types or keystore but I have not seen an e-mail a= bout those lately.=0A= =0A= I see, courtesy of the RFC Editor, that X.690 has been updated to a 2021 ve= rsion (which the RFC Editor would like to use).=0A= =0A= Any one know what the differences are?=0A= =0A= Assuming we know those, should we use it as a reference? Sometimes the ne= w-fangled version of another SDO's work is not right for the IETF and we st= ay with the previous versions.=0A= =0A= Tom Petch=0A= =0A= Detailed change logs for the just-published updates are at bottom, but the = primary update is the creation of IANA-maintained modules for protocol-spec= ific algorithms. Key points:=0A= =0A= = From nobody Fri Jun 25 07:16:43 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 63F903A19F6; Fri, 25 Jun 2021 07:16:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t_OgDO5fwtIc; Fri, 25 Jun 2021 07:16:24 -0700 (PDT) Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 57E943A19F7; Fri, 25 Jun 2021 07:16:24 -0700 (PDT) Received: from fraeml743-chm.china.huawei.com (unknown [172.18.147.206]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4GBJc74ktdz6L52F; Fri, 25 Jun 2021 22:02:47 +0800 (CST) Received: from dggeml752-chm.china.huawei.com (10.1.199.151) by fraeml743-chm.china.huawei.com (10.206.15.224) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.1.2176.2; Fri, 25 Jun 2021 16:16:20 +0200 Received: from dggeml753-chm.china.huawei.com (10.1.199.152) by dggeml752-chm.china.huawei.com (10.1.199.151) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2176.2; Fri, 25 Jun 2021 22:16:18 +0800 Received: from dggeml753-chm.china.huawei.com ([10.1.199.152]) by dggeml753-chm.china.huawei.com ([10.1.199.152]) with mapi id 15.01.2176.012; Fri, 25 Jun 2021 22:16:18 +0800 From: Qin Wu To: Michael Richardson , "netconf@ietf.org" CC: "core@ietf.org" Thread-Topic: some comments on netconf-adaptive-subscription Thread-Index: AddpxCmbKxamTYjtQFuNdpDeReFPpQ== Date: Fri, 25 Jun 2021 14:16:17 +0000 Message-ID: <0ded93e29090419dabc5551e49dac97d@huawei.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.52.202.106] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [netconf] some comments on netconf-adaptive-subscription X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jun 2021 14:16:30 -0000 VGhhbmtzIE1pY2hhZWwgZm9yIHZhbHVhYmxlIGNvbW1lbnRzLCBzZWUgcmVwbHkgaW5saW5lIGJl bG93Lg0KLS0tLS3pgq7ku7bljp/ku7YtLS0tLQ0K5Y+R5Lu25Lq6OiBNaWNoYWVsIFJpY2hhcmRz b24gW21haWx0bzptY3IraWV0ZkBzYW5kZWxtYW4uY2FdIA0K5Y+R6YCB5pe26Ze0OiAyMDIx5bm0 NuaciDI15pelIDM6MTUNCuaUtuS7tuS6ujogUWluIFd1IDxiaWxsLnd1QGh1YXdlaS5jb20+OyBu ZXRjb25mQGlldGYub3JnDQrmioTpgIE6IGNvcmVAaWV0Zi5vcmcNCuS4u+mimDogc29tZSBjb21t ZW50cyBvbiBuZXRjb25mLWFkYXB0aXZlLXN1YnNjcmlwdGlvbg0KDQoNCj5JIHJlYWQ6DQo+ICAg ICAgICBUaXRsZSAgICAgICAgICAgOiBBZGFwdGl2ZSBTdWJzY3JpcHRpb24gdG8gWUFORyBOb3Rp ZmljYXRpb24NCj4JRmlsZW5hbWUgICAgICAgIDogZHJhZnQtd2FuZy1uZXRjb25mLWFkYXB0aXZl LXN1YnNjcmlwdGlvbi0wNS50eHQNCg0KPnRvZGF5LiAgSSB1bmRlcnN0YW5kIHRoZSBuZWVkIGZv ciBzb21lIGtpbmQgb2Ygd2F5IHRvIHN3aXRjaCBiZXR3ZWVuIHNvbWUga2luZCBvZiBwZXJpb2Rp YyBjYXB0dXJlIG9mIHZhbHVlIHZzIGEgZWRnZS10cmlnZ2VyZWQvb24tY2hhbmdlIHByb2Nlc3Mu DQoNCj5JJ20gYSBiaXQgc3VycHJpc2VkIHRoYXQgdGhlIGV4YW1wbGUtd2lmaS1tYWMgbW9kdWxl IGhhZCB0byBiZSBjcmVhdGVkIGluIHRoZSBhcHBlbmRpeCB0byBwcm92aWRlIGFuIGV4YW1wbGUu ICBTdXJlbHkgd2Ugc2hvdWxkIGFscmVhZHkgaGF2ZSBsaWtlbHkgbW9kdWxlcyB0aGF0IGFyZSBy ZWFsbHkgYmVpbmcgdXNlZCBhbmQgbmVlZCB0aGlzIA0KDQo+a2luZCBvZiB0aGluZy4NCj5TbyBv bmUgcmVjb21tZW5kYXRpb24gaXMgdGhhdCB0aGUgZG9jdW1lbnQgZm9jdXMgb24gYWxyZWFkeSBw dWJsaXNoZWQgWUFORyBtb2RlbHMgdGhhdCBjb3VsZCBiZW5lZml0IGZyb20gdGhpcyBraW5kIG9m IHN1YnNjcmlwdGlvbi4NCg0KW1Fpbl06IFRoYXQncyBhIGdvb2Qgc3VnZ2VzdGlvbiwgV2lGaSBw cm92aWRlcyBhIGdvb2QgdXNlIGNhc2UgZm9yIHRoaXMgYWRhcHRpdmUgc3Vic2NyaXB0aW9uIG1l Y2hhbmlzbS4gd2UgZGlkIHRyeSBzb21lIGV4aXN0aW5nIHB1Ymxpc2hlZCBZQU5HIG1vZGVscywg YnV0IGl0IHNlZW1zIFlBTkcgbW9kZWxzIHNpemUgaXMgdG9vIGJpZy4NClRoYXQncyB3aHkgd2Ug Y3JlYXRlIHNpbXBsaWZpZWQgV2lmaSBtYWMgZXhhbXBsZSBNb2R1bGUuIElmIHlvdSBjYW4gcHJv dmlkZSBhIGxpbmsgdG8gQ0hJUC9NQVRURVIgV0lGSSBzdGF0aXN0aWNzIG1vZHVsZSwgd2UgYXJl IGhhcHB5IHRvIHF1b3RlIHRoYXQgZXhpc3RpbmcgbW9kdWxlLg0KDQo+KFBlcmhhcHMgdGhlIHdp ZmktbWFjIG1vZHVsZSBpcyBzb21ldGhpbmcgdGhhdCBhbHNvIG5lZWRzIHRvIGV4aXN0LCBhbmQg ZG9lcyBub3QuICBJIHdpbGwgbm90ZSB0aGF0IENISVAvTUFUVEVSIGhhcyBzb21lIGtpbmQgb2Yg V0lGSSBzdGF0aXN0aWNzIG1vZHVsZSwgYnV0IGl0J3Mgbm90IHByZXNlbnRseSB3cml0dGVuIHVw IGluIFlBTkcpDQoNCj5JIGhhZCB0byBiYWNrIHRvIFJGQzg2NDEsIHdoaWNoIEkgZG9uJ3Qga25v dyB3ZWxsIGF0IGFsbCwgdG8gYmUgc3VyZSBJIHVuZGVyc3Rvb2QgdGhlIHhwYXRoIGNyaXRlcmlh LiAgSSBndWVzcyBJIGRvbid0IHVuZGVyc3RhbmQgaG93IFJGQzg2NDEgYW5kIHRoaXMgZG9jdW1l bnQgY2FuIGJlIHVzZWQgZm9yIG5vbi1YTUwgc2VyaWFsaXplZCANCg0KPllBTkcgaW50ZXJhY3Rp b25zLg0KW1Fpbl06IFJGQzg2NDEgaXMgYnVpbHQgb24gdG9wIG9mIFJGQzg2MzksIFJGQzg2Mzkg U3Vic2NyaWJlIE5vdGlmaWNhdGlvbiBtb2R1bGUgYWxsb3cgeW91IHNwZWNpZnkgZW5jb2Rpbmcs IHRha2UgUkVTVENPTkYgYXMgYW4gZXhhbXBsZSwgeW91IGNhbiBzcGVjaWZ5IGFueSBlbmNvZGlu ZyB5b3UgbGlrZS4NCg0KPklmIGJhbmR3aWR0aCBpcyBhdCBhIHByZW1pdW0sIHdvdWxkbid0IHlv dSB3YW50IHRvIHVzZSBkcmFmdC1pZXRmLWNvcmUtY29taS0xMSAoWUFORyBpbiBDQk9SKSByYXRo ZXIgdGhhbiBYTUw/DQpbUWluXTogVGhlIGludGVudGlvbiBpcyB0byBvcHRpbWl6ZSB0aGUgZXhp c3RpbmcgWUFORyBwdXNoIG1lY2hhbmlzbSBmb3IgTkVUQ09ORi9SRVNUQ09ORiBhbmQgb3RoZXIg bWFuYWdlbWVudCBwcm90b2NvbHMuIEFuZCB0aGUgbmV0d29yayBkZXZpY2UgY2FuIHN1cHBvcnQg bXVsdGlwbGUgY2FwdHVyZSBwZXJpb2RpYyBpbnRlcnZhbHMsIHRoZSBtZWNoYW5pc20gd2UgaW50 cm9kdWNlIGlzIHRvIGFsbG93IHRoZSBuZXR3b3JrIGRldmljZSBzd2l0Y2ggdG8gZGlmZmVyZW50 IGNhcHR1cmUgcGVyaW9kaWMgaW50ZXJ2YWwgYXV0b21hdGljYWxseSB3aXRob3V0IGFza2luZyB0 aGUgTk1TIGZvciBwZXJtaXNzaW9uIGVhY2ggdGltZS4gSSBob3BlIHRoaXMgY2xhcmlmaWVzLg0K PkF0IHdoaWNoIHBvaW50LCB0aGUgb2J2aW91cyBpbnRlcmFjdGlvbiB3aXRoIFJGQzc2NDEgd291 bGQgbmVlZCB0byBiZSBleHBsYWluZWQ/DQoNCj5JdCBzZWVtcyB0aGF0IHRoZSBuZXRjb25mIChS RVNUQ09ORikgYW5kIENPUkVDT05GIGdyb3VwcyBzaG91bGQgc3BlbmQgc29tZSBtb3JlIHRpbWUg dG9nZXRoZXIuDQoNCltRaW5dOiBJIGFtIGFsc28gaG9waW5nIFJFU1RDT05GIGFuZCBDT1JFQ09O RiBjYW4gd29yayB0b2dldGhlciwgYnV0IHRoZXkgc2VlbXMgdG8gbG9vayBpbnRvIGRpZmZlcmVu dCB1c2UgY2FzZXMgKGNvbnN0cmFpbmVkIGRldmljZSBtYW5hZ2VtZW50IHZzIHVuY29uc3RyYWlu ZWQgZGV2aWNlIG1hbmFnZW1lbnQpIC4NCkkgYW0gbm90IHN1cmUgd2Ugc2hvdWxkIGdlbmVyYWxp emVkIFJFU1RDT05GIGFuZCBDT1JFQ09ORiBpbnRvIGEgc2luZ2xlIHByb3RvY29sLg0KTXkgdW5k ZXJzdGFuZGluZyB0aGV5IGhhdmUgYSBkaWZmZXJlbnQgYmFzaXMsIGZvciBDT1JFQ09ORiwgdGhl IGJhc2lzIGlzIENPTUksIHNob3VsZCBpdCBiZSBleHRlbmRlZCB0byBzdXBwb3J0IHB1YiBzdWI/ LCB0aGVyZSBpcyBvbmUgcmVsZXZhbnQgZHJhZnQsIGkuZS4sDQpEcmFmdC1iaXJraG9sZHoteWFu Zy1jb3JlLXRlbGVtZXRyeSwgDQpSRkM3NjQxIGhhdmUgZGlmZmVyZW50IGJhc2lzLCB3aGljaCBp cyBjb2FwLCBpdCBzZWVtcyBpbnRyb2R1Y2Ugc2ltaWxhciBwdWIgc3ViIG1lY2hhbmlzbSwgYnV0 IEkgY29uZnVzZWQgdGhpcyB3b3JrIHdpdGggZHJhZnQtaWV0Zi1jb3JlLWNvYXAtcHVic3ViLiBT byB3aGF0IGFib3V0IG90aGVyIElvVCBwcm90b2NvbCBzdWNoIGFzIE1RVFQ/IEl0IGFsc28gc3Vw cG9ydCBwdWIgc3ViIG1lY2hhbmlzbS4NCkkgdGhpbmsgd2Ugc2hvdWxkIG5vdCBtaXggY29hcCB3 aXRoIGNvbWksIG90aGVyd2lzZSwgd2Ugd2lsbCBzZWUgYSBsb3Qgb2YgbWVzcyBhbmQgY29uZnVz aW9uLiBBbSBJIHJpZ2h0Pw0KDQotLQ0KXSAgICAgICAgICAgICAgIE5ldmVyIHRlbGwgbWUgdGhl IG9kZHMhICAgICAgICAgICAgICAgICB8IGlwdjYgbWVzaCBuZXR3b3JrcyBbDQpdICAgTWljaGFl bCBSaWNoYXJkc29uLCBTYW5kZWxtYW4gU29mdHdhcmUgV29ya3MgICAgICAgIHwgICAgSW9UIGFy Y2hpdGVjdCAgIFsNCl0gICAgIG1jckBzYW5kZWxtYW4uY2EgIGh0dHA6Ly93d3cuc2FuZGVsbWFu LmNhLyAgICAgICAgfCAgIHJ1Ynkgb24gcmFpbHMgICAgWw0KDQoNCg0KDQoNCg0KLS0NCk1pY2hh ZWwgUmljaGFyZHNvbiA8bWNyK0lFVEZAc2FuZGVsbWFuLmNhPiAgIC4gbyBPICggSVB2NiBJw7hU IGNvbnN1bHRpbmcgKQ0KICAgICAgICAgICBTYW5kZWxtYW4gU29mdHdhcmUgV29ya3MgSW5jLCBP dHRhd2EgYW5kIFdvcmxkd2lkZQ0KDQoNCg0KDQo= From nobody Fri Jun 25 07:31:34 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E21DD3A1A66; Fri, 25 Jun 2021 07:31:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jBDqsABis7-l; Fri, 25 Jun 2021 07:31:24 -0700 (PDT) Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CAF8C3A1A60; Fri, 25 Jun 2021 07:31:23 -0700 (PDT) Received: from fraeml739-chm.china.huawei.com (unknown [172.18.147.200]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4GBK4P0TGwz6DBYt; Fri, 25 Jun 2021 22:23:49 +0800 (CST) Received: from dggeml704-chm.china.huawei.com (10.3.17.142) by fraeml739-chm.china.huawei.com (10.206.15.220) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.1.2176.2; Fri, 25 Jun 2021 16:31:19 +0200 Received: from dggeml753-chm.china.huawei.com (10.1.199.152) by dggeml704-chm.china.huawei.com (10.3.17.142) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2176.2; Fri, 25 Jun 2021 22:31:17 +0800 Received: from dggeml753-chm.china.huawei.com ([10.1.199.152]) by dggeml753-chm.china.huawei.com ([10.1.199.152]) with mapi id 15.01.2176.012; Fri, 25 Jun 2021 22:31:16 +0800 From: Qin Wu To: Michael Richardson , "netconf@ietf.org" , "core@ietf.org" Thread-Topic: [core] some comments on netconf-adaptive-subscription Thread-Index: AddpzM/nht0jvow6SDipme2i6FvtBQ== Date: Fri, 25 Jun 2021 14:31:16 +0000 Message-ID: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.52.202.106] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [netconf] [core] some comments on netconf-adaptive-subscription X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jun 2021 14:31:29 -0000 LS0tLS3pgq7ku7bljp/ku7YtLS0tLQ0K5Y+R5Lu25Lq6OiBNaWNoYWVsIFJpY2hhcmRzb24gW21h aWx0bzptY3IraWV0ZkBzYW5kZWxtYW4uY2FdIA0K5Y+R6YCB5pe26Ze0OiAyMDIx5bm0NuaciDI1 5pelIDk6MDUNCuaUtuS7tuS6ujogUWluIFd1IDxiaWxsLnd1QGh1YXdlaS5jb20+OyBuZXRjb25m QGlldGYub3JnOyBjb3JlQGlldGYub3JnDQrkuLvpopg6IFJlOiBbY29yZV0gc29tZSBjb21tZW50 cyBvbiBuZXRjb25mLWFkYXB0aXZlLXN1YnNjcmlwdGlvbg0KDQoNCk1pY2hhZWwgUmljaGFyZHNv biA8bWNyK2lldGZAc2FuZGVsbWFuLmNhPiB3cm90ZToNCiAgICA+IEkgaGFkIHRvIGJhY2sgdG8g UkZDODY0MSwgd2hpY2ggSSBkb24ndCBrbm93IHdlbGwgYXQgYWxsLCB0byBiZSBzdXJlIEkNCiAg ICA+IHVuZGVyc3Rvb2QgdGhlIHhwYXRoIGNyaXRlcmlhLiAgSSBndWVzcyBJIGRvbid0IHVuZGVy c3RhbmQgaG93IFJGQzg2NDENCiAgICA+IGFuZCB0aGlzIGRvY3VtZW50IGNhbiBiZSB1c2VkIGZv ciBub24tWE1MIHNlcmlhbGl6ZWQgWUFORyBpbnRlcmFjdGlvbnMuDQoNCiAgICA+IElmIGJhbmR3 aWR0aCBpcyBhdCBhIHByZW1pdW0sIHdvdWxkbid0IHlvdSB3YW50IHRvIHVzZQ0KICAgID4gZHJh ZnQtaWV0Zi1jb3JlLWNvbWktMTEgKFlBTkcgaW4gQ0JPUikgcmF0aGVyIHRoYW4gWE1MPyAgQXQg d2hpY2gNCiAgICA+IHBvaW50LCB0aGUgb2J2aW91cyBpbnRlcmFjdGlvbiB3aXRoIFJGQzc2NDEg d291bGQgbmVlZCB0byBiZSBleHBsYWluZWQ/DQoNCiAgICA+IEl0IHNlZW1zIHRoYXQgdGhlIG5l dGNvbmYgKFJFU1RDT05GKSBhbmQgQ09SRUNPTkYgZ3JvdXBzIHNob3VsZCBzcGVuZA0KICAgID4g c29tZSBtb3JlIHRpbWUgdG9nZXRoZXIuDQoNCkkgZGlkbid0IGZpbmlzaCBteSB0aG91Z2h0IGhl cmUuDQpTcGVjaWZpY2FsbHksIGl0IHNlZW1zIHRoYXQgdGhlIENPUkUgV0cgaXMgZG9pbmcgYSBs b3Qgb2Ygc3R1ZmYgd2l0aCBDb0FQIE9ic2VydmVzIGFuZCBTRU5NTCBhbmQgYWxsIHNvcnRzIG9m IGludGVyZXN0aW5nIHRyaWdnZXJzLg0KDQpJdCBzZWVtcyB0aGF0IHRoZXJlIG91Z2h0IHRvIGJl IG1vcmUgY29tbW9uIHdvcmsgaGVyZS4NClJvdXRlcnMgYXJlIHJlYWxseSB0aGUgb3JpZ2luYWwg VGhpbmdzIE9mIEludGVybmV0Lg0KW1Fpbl06IGRhdGEgbW9kZWxpbmcgbGFuZ3VhZ2Ugc3VjaCBh cyBZQU5HIGNhbiBiZSBjb21tb24gd29yayBmb3IgYm90aCBDT1JFIFdHIGFuZCBORVRDT05GIFdH LA0KQnV0IHRoZXkgbWF5IGNob29zZSBkaWZmZXJlbnQgdHJhbnNwb3J0IHByb3RvY29sLCBzdWNo IGFzIE5FVENPTkYsIFJFU1RDT05GLCBIVFRQIDIuMCwgQ09BUCwgTVFUVCwgQ09NSQ0KU2Vjb25k bHksIEkgdGhpbmsgaXQgd2lsbCBiZSBuaWNlIHRvIHNlcGFyYXRlIGNvbnN0cmFpbmVkIGRldmlj ZSBtYW5hZ2VtZW50IGZyb20gcmVzb3VyY2UgdW5jb25zdHJhaW5lZCBuZXR3b3JrIGRldmljZSBt YW5hZ2VtZW50LA0KQ29uc3RyYWludCBkZXZpY2UgYXMgSW9UIGRldmljZSBjYW4gYmUgdGVtcGVy YXR1cmUgc2Vuc29yLCBjdXJyZW50LCB2b2x0YWdlIHNlbnNvciB3aGljaCBjYW4gYmUgc2VlbiBh cyBhZmZpbGlhdGVkIGRldmljZXMgcGVydGFpbmluZyB0byByZXNvdXJjZSB1bnN0cmFpbmVkIG5l dHdvcmsgZGV2aWNlLg0KSW4gZGF0YSBjZW50ZXIgc2NlbmFyaW9zLCB3ZSBkbyBhIGxvdCBvZiBz dWNoIGFmZmlsaWF0ZWQgZGV2aWNlcyBvciBzZW5zb3JzIHN1Y2ggYXMgYWlyIGNvbmRpdGlvbmVy LCB3YXRlciBsZWFrYWdlIGFsYXJtIHNlbnNvciBkZXBsb3llZCB0b2dldGhlciB3aXRoIGRhdGEg Y2VudGVyIHN3aXRjaCBkZXZpY2VzLg0KVGhlc2UgSW9UIGRldmljZXMgb25seSB1c2UgTVFUVC9D T0FQL0hUVFAgdG8gY29tbXVuaWNhdGUgd2l0aCB0aGVpciBJb1QgcGxhdGZvcm0sIGZvciBkYXRh IGNlbnRlciBzd2l0Y2ggZGV2aWNlcywgeW91IG1heSBzdGlsbCByZWx5IG9uIG5ldHdvcmsgbWFu YWdlbWVudCBwcm90b2NvbHMgc3VjaCBhcyBORVRDT05GLA0KU05NUCwgZ1JQQywgZXRjLg0KRG8g eW91IHNlZSB0aGlzIGRpZmZlcmVudGx5PyBNaWNoYWVsPw0KLS0NCk1pY2hhZWwgUmljaGFyZHNv biA8bWNyK0lFVEZAc2FuZGVsbWFuLmNhPiAgIC4gbyBPICggSVB2NiBJw7hUIGNvbnN1bHRpbmcg KQ0KICAgICAgICAgICBTYW5kZWxtYW4gU29mdHdhcmUgV29ya3MgSW5jLCBPdHRhd2EgYW5kIFdv cmxkd2lkZQ0KDQoNCg0KDQo= From nobody Fri Jun 25 07:49:28 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 396ED3A1AE9; Fri, 25 Jun 2021 07:49:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gxNb9oCVxY30; Fri, 25 Jun 2021 07:49:18 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B4D133A1AE8; Fri, 25 Jun 2021 07:49:18 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id E681538B97; Fri, 25 Jun 2021 10:51:03 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 5jriCkkNL3WR; Fri, 25 Jun 2021 10:51:01 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id B1C1538B95; Fri, 25 Jun 2021 10:51:01 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 28FF0553; Fri, 25 Jun 2021 10:49:14 -0400 (EDT) From: Michael Richardson To: Andy Bierman , Qin Wu , Netconf , Core In-Reply-To: References: <5ba27e43a63e427091f3093b35be09a0@huawei.com> <14286.1624562075@localhost> X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [netconf] [core] some comments on netconf-adaptive-subscription X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jun 2021 14:49:23 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Andy Bierman wrote: >> If bandwidth is at a premium, wouldn't you want to use >> draft-ietf-core-comi-11 (YANG in CBOR) rather than XML? At which >> point, the obvious interaction with RFC7641 would need to be >> explained? > Commenting only on the use of CORECONF, not this draft... IMO CORECO= NF > is for constrained devices, possibly on constrained networks. But if > only the network is constrained, then perhaps only CBOR is really > needed. CoAP/CBOR/etc. work well in less-constrained devices. ESP32 now have several megabytes of flash, almost, but not quite 640K of RA= M (520K). Meanwhile router control plane CPUs are often way beyond this today. > I first raised these issues in NETCONF WG in 2013 > https://datatracker.ietf.org/doc/html/draft-bierman-netconf-efficienc= y-extensions-00 ... > IMO the WG missed the point of this draft, which was to preserve the > massive and expensive investment in the NETCONF application layer > already deployed. Just optimize the network traffic and not rewrite a= ny > feature code. I don't think it's too late, but I don't really understand the NETCONF investment right now. While I'm sure that each major router vendor has a management platform like JUNOS, I've not seen it cross-vendor for real. I also know ISPs who try stuff like JUNOS, and get frustrated and go back t= o CLI. (Often without the discipline to do it well) =2D- Michael Richardson . o O ( IPv6 I=C3=B8T consulti= ng ) Sandelman Software Works Inc, Ottawa and Worldwide --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAmDV7OkACgkQgItw+93Q 3WUAnwf/Tq8r45WUlyj0S5OnPz4YNQa1qWHuF8sT62gR/zgqneuUL/Dzkz9j8nEE DXdqKGiskOYCIihqHWzxKeQCzTXktxTe/B5Ifzxzs4lQv26AbLUl5xYyQHYzqrtA i/v7TT5y3cESmyDwyrXRzC3f/+EerPp4tfVZQ79V8cZOQccPTbI/gYexAR7/b0IS cCqSCc5otZ1gPMJfejiovgLg/ISd3AiJJW6VcnCOl9gLTunFdUjRZcIP66lyqIVu FM2RroaaDv5iNfaHgRPFXVbZfKKqeO+ZvJCHi8D7r/L/fiKSC44BPuVjeywzr9cD eafiKCSPSYEZQs/ZsrZK6n2sClwVxw== =Xw3k -----END PGP SIGNATURE----- --=-=-=-- From nobody Fri Jun 25 08:57:19 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 23A433A03EF; Fri, 25 Jun 2021 08:57:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cYLIeyDU53y8; Fri, 25 Jun 2021 08:57:11 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 436043A0406; Fri, 25 Jun 2021 08:57:11 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 465C838B97; Fri, 25 Jun 2021 11:58:57 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id KHDhDuc7lm55; Fri, 25 Jun 2021 11:58:55 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [209.87.249.21]) by tuna.sandelman.ca (Postfix) with ESMTP id 6308F38B96; Fri, 25 Jun 2021 11:58:55 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id A39D6553; Fri, 25 Jun 2021 11:57:07 -0400 (EDT) From: Michael Richardson To: "Rob Wilton \(rwilton\)" cc: Kent Watsen , "netconf\@ietf.org" , "anima\@ietf.org" , "Werner\, Thomas" , "Fries\, Steffen" In-Reply-To: References: <3a31e33678484625b9f4f3810e673e56@siemens.com> <0100017a1b4d2e94-aeaaa06e-8dc0-4163-a747-692e72b0d75c-000000@email.amazonses.com> <8407.1624138175@localhost> <0100017a2e9f69ee-5d037ce3-62dd-4825-922c-8a08b545d166-000000@email.amazonses.com> <11325.1624482172@dooku> X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [netconf] [Anima] Reuse of SZTP-CSR YANG definition in BRSKI-AE X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jun 2021 15:57:16 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Rob Wilton (rwilton) wrote: > Hi Kent, Michael, Hi! > In this case, I think that this should come down to the discretion of > the sZTP-CSR authors, given that BRSKI-AE also have the choice of just > copying the YANG that they need. Yes, we can go via copy and paste method, but it seems so distastful. > I would be okay seeing the csr structure put into a grouping, but I > would strongly prefer that they get moved out of the ietf-sztp-csr.ya= ng > module, so that the CSR groupings can be imported without requiring a= ny > import-only import dependency on ietf-sztp-csr (and possibly > ietf-sztp-bootstrap-server). > Hence, my suggestion, if you were to do this, would be for a separate > ietf-csr-types.yang module defined as part of the SZTP-CSR draft. That would be very cool. =2D- Michael Richardson . o O ( IPv6 I=C3=B8T consulti= ng ) Sandelman Software Works Inc, Ottawa and Worldwide --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAmDV/NMACgkQgItw+93Q 3WWdjAf/U6shVzeum7JVXq10G+8Jz6UMm434m7dIjyp/pCgqQYy3gHrocW9ybswQ vIRIfiQ119IS9gQ2h4PLj+3YyMQAIaEvQbgt6fSnHqRYMEQ+fM6TbIWmO4SZUmvk SZWyAOFnC/4ZS73thg4RSJuu1qeXiwYQndqRrwvBN0vxLwCz9XgCUevO1MjuAm3F xt3RTiQWC12V3p1FSG7namy4LgmZfrDB3pfHfM9eJcegS2ZsotGjVVvDFwEeTVJr pF0qrg3c7430aCaz3FgKs44c8CwCE3i0hS2WS5gPUlo1imAECWNBhjFzZcAUYAkX JEvJ7vLXx6SV8vriH7gadW8EcXItxA== =FtlY -----END PGP SIGNATURE----- --=-=-=-- From nobody Fri Jun 25 09:04:32 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6CEAC3A05AA for ; Fri, 25 Jun 2021 09:04:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.886 X-Spam-Level: X-Spam-Status: No, score=-1.886 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yumaworks-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1GGc2Sc2-WBb for ; Fri, 25 Jun 2021 09:04:24 -0700 (PDT) Received: from mail-lj1-x22e.google.com (mail-lj1-x22e.google.com [IPv6:2a00:1450:4864:20::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 960BB3A0766 for ; Fri, 25 Jun 2021 09:04:23 -0700 (PDT) Received: by mail-lj1-x22e.google.com with SMTP id c16so13151606ljh.0 for ; Fri, 25 Jun 2021 09:04:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yumaworks-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=FgvExJPOzpl/xYNhRAmw1cPsZtX07H+SRvU1FPH2bVo=; b=nlXh1iz3rQ9ABxEXNUewZEzGUxStPPW3QgdB+MGvWi/j7xJ9MGtnBHSWdAOvcudAym wCF0LkvNBsGYKHpHxcyGLFbt7obpXBh6q8l2ZlxSMMj0BiEwju4jGyjHRKpsO6NATn12 RPw+ycER1eNOGSobDxyWUf8/uX6VgW6Q6igeL2ShgcXSsXNVal5co6Z10Ufr78Zzm9jH Cn+ImawOJTNAQgU8mN9T1Mc5fImgdv/Di7/YpWeCFsnuV13ZluukAYHL21G2XuFHpIJk sTNPJ+Iu5/fRIDv+WP4hr5u5VNXgkSYLtJ1WXEyNvTkVrC20vV8K2Y5j1ppFXd2awMUZ Wt+w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=FgvExJPOzpl/xYNhRAmw1cPsZtX07H+SRvU1FPH2bVo=; b=sGQ80l4rlBRXKgMSCSGX2+NAVhXljIYSQzsYIrokKwa+rL5tdlkwlA6R87hlwTjyql u6N0b++PE4cHsEddzuJ7BAB8th3/oddfrmKODfKND74RTcNsrhyL+6JEdwEKZ1mEq/Ia lo7f3dCph43uDGLrZhgDEUUPhqOC21CsrAZcZxckXiZDZEsPaFTJ/vEAv/rkr+e7T32f ERXbzUBzKQr8dF0Cea7eurnIVkWRet1F5rVSlHmujnHDXHm/aYnWjM0xqHFkfR40c3Dp VvQv6vvThuMpIPbATONE0ji9ITlsfpYJVfFWamrbkLBxFykfsrp+rrDal6crFf9frN2v iwgA== X-Gm-Message-State: AOAM533wCtlF+1ck9itByriXA3QN4PDAxNUkCzUzTgxFbRPYWketeAfg VAWbC/QEr1ggF7Gp/LelF1OgM4aaunLGvcvyZDVn5Q== X-Google-Smtp-Source: ABdhPJw9ji8Hc9OeBPL1RiHJPWUi2oxVur3FIH7SksswKeNtWLUwfc7ZY5H2WoE0nW3LqyozZ7PZX2lV9/lyXoTYDwU= X-Received: by 2002:a2e:b80a:: with SMTP id u10mr7458256ljo.325.1624637056242; Fri, 25 Jun 2021 09:04:16 -0700 (PDT) MIME-Version: 1.0 References: <5ba27e43a63e427091f3093b35be09a0@huawei.com> <14286.1624562075@localhost> <11607.1624583118@localhost> In-Reply-To: <11607.1624583118@localhost> From: Andy Bierman Date: Fri, 25 Jun 2021 09:04:05 -0700 Message-ID: To: Michael Richardson Cc: Qin Wu , Netconf , Core Content-Type: multipart/alternative; boundary="000000000000a06fe405c5994ab6" Archived-At: Subject: Re: [netconf] [core] some comments on netconf-adaptive-subscription X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jun 2021 16:04:29 -0000 --000000000000a06fe405c5994ab6 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Thu, Jun 24, 2021 at 6:05 PM Michael Richardson wrote: > > Michael Richardson wrote: > > I had to back to RFC8641, which I don't know well at all, to be sur= e > I > > understood the xpath criteria. I guess I don't understand how > RFC8641 > > and this document can be used for non-XML serialized YANG > interactions. > > > If bandwidth is at a premium, wouldn't you want to use > > draft-ietf-core-comi-11 (YANG in CBOR) rather than XML? At which > > point, the obvious interaction with RFC7641 would need to be > explained? > > > It seems that the netconf (RESTCONF) and CORECONF groups should spe= nd > > some more time together. > > I didn't finish my thought here. > Specifically, it seems that the CORE WG is doing a lot of stuff with CoAP > Observes and SENML and all sorts of interesting triggers. > There have long been 2 camps in CORE WG on this -- 1 that thinks YANG data modeling should be used in IoT and another that thinks YANG data modeling is overkil= l and not needed for IoT. If YANG is used then SENML info is redundant. YANG automation is about the entire tool chain, not just the bytes on the wire, but even if you focus just on that, I think CBOR+SID can achieve much highe= r information density than SENML. > It seems that there ought to be more common work here. > Routers are really the original Things Of Internet. > I do not think it helps to classify a router as an IoT device. > > -- > Michael Richardson . o O ( IPv6 I=C3=B8T consul= ting ) > Sandelman Software Works Inc, Ottawa and Worldwide > > > > Andy > > _______________________________________________ > core mailing list > core@ietf.org > https://www.ietf.org/mailman/listinfo/core > --000000000000a06fe405c5994ab6 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


=
On Thu, Jun 24, 2021 at 6:05 PM Micha= el Richardson <mcr+ietf@sande= lman.ca> wrote:

Michael Richardson <mcr+ietf@sandelman.ca> wrote:
=C2=A0 =C2=A0 > I had to back to RFC8641, which I don't know well at= all, to be sure I
=C2=A0 =C2=A0 > understood the xpath criteria.=C2=A0 I guess I don't= understand how RFC8641
=C2=A0 =C2=A0 > and this document can be used for non-XML serialized YAN= G interactions.

=C2=A0 =C2=A0 > If bandwidth is at a premium, wouldn't you want to u= se
=C2=A0 =C2=A0 > draft-ietf-core-comi-11 (YANG in CBOR) rather than XML?= =C2=A0 At which
=C2=A0 =C2=A0 > point, the obvious interaction with RFC7641 would need t= o be explained?

=C2=A0 =C2=A0 > It seems that the netconf (RESTCONF) and CORECONF groups= should spend
=C2=A0 =C2=A0 > some more time together.

I didn't finish my thought here.
Specifically, it seems that the CORE WG is doing a lot of stuff with CoAP Observes and SENML and all sorts of interesting triggers.
<= div>
There have long been 2 camps in CORE WG on this -- 1 tha= t thinks YANG data modeling
should be used in IoT and another tha= t thinks YANG data modeling is overkill
and not needed for IoT.= =C2=A0 If YANG is used then SENML info is redundant.

YANG automation is about the entire tool chain, not just the bytes on th= e wire,
but even if you focus just on that, I think CBOR+SID can = achieve much higher
information density than SENML.

It seems that there ought to be more common work here.
Routers are really the original Things Of Internet.
I do not think it helps to classify a router as an IoT device.=

=C2=A0

--
Michael Richardson <mcr+IETF@sandelman.ca>=C2=A0 =C2=A0. o O ( IPv6 I=C3=B8T co= nsulting )
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Sandelman Software Works Inc, Otta= wa and Worldwide




Andy
=C2=A0

_______________________________________________
core mailing list
core@ietf.org
https://www.ietf.org/mailman/listinfo/core
--000000000000a06fe405c5994ab6-- From nobody Fri Jun 25 09:09:42 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EDCDF3A07B1; Fri, 25 Jun 2021 09:09:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gNDgIjFbtCrt; Fri, 25 Jun 2021 09:09:35 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 28FEA3A07B3; Fri, 25 Jun 2021 09:09:35 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id EE3ED38B97; Fri, 25 Jun 2021 12:11:21 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id HHlk8pn4U8yF; Fri, 25 Jun 2021 12:11:19 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id BB00638B96; Fri, 25 Jun 2021 12:11:19 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id F2A08553; Fri, 25 Jun 2021 12:09:31 -0400 (EDT) From: Michael Richardson To: Qin Wu , netconf@ietf.org, "core\@ietf.org" In-Reply-To: <0ded93e29090419dabc5551e49dac97d@huawei.com> References: <0ded93e29090419dabc5551e49dac97d@huawei.com> X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [netconf] some comments on netconf-adaptive-subscription X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jun 2021 16:09:40 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Qin Wu wrote: > [Qin]: That's a good suggestion, WiFi provides a good use case for th= is > adaptive subscription mechanism. we did try some existing published > YANG models, but it seems YANG models size is too big. That's why we > create simplified Wifi mac example Module. If you can provide a link = to > CHIP/MATTER WIFI statistics module, we are happy to quote that existi= ng > module. The CHIP/MATTER document not public yet, but Huawei is a member and can get= the document. But, it's not a YANG module. The fact that they have a set of wifi statistics in their base definition argues that there ought to be an equivalent YANG model though. > [Qin]: The intention is to optimize the existing YANG push mechanism > for NETCONF/RESTCONF and other management protocols. And the network > device can support multiple capture periodic intervals, the mechanism > we introduce is to allow the network device switch to different captu= re > periodic interval automatically without asking the NMS for permission > each time. I hope this clarifies. yes, I understood that from the document. > [Qin]: I am also hoping RESTCONF and CORECONF can work together, but > they seems to look into different use cases (constrained device > management vs unconstrained device management) . I am not sure we > should generalized RESTCONF and CORECONF into a single protocol. That's not what I'm suggesting. I'm asking, if bandwidth is an issue, why not use a smaller encoding. And, why not integrate with CoAP Observe? =2D- Michael Richardson . o O ( IPv6 I=C3=B8T consulti= ng ) Sandelman Software Works Inc, Ottawa and Worldwide --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAmDV/7sACgkQgItw+93Q 3WUw4gf7BTYuXW0/ogms5J7YRgA+pfCUmz5fCt1kYho56ne4ZitN0M50N2oIUc6b OMLtuLRDfpQjHAYMaXi1RdmLbh+yx1PtUCbp1fteYPEIKhq7RP/gSdpakyzEvkoa Js/3ViwP3mlttbR98i3Wc/eV7fdZlTb8bYM5xmvWg0m9sIaLPJc+2+X6rrmdhNTc fR8mkaAhJTaNCIp+1Ss/qfgftw3Nv/GNoZjaaucnxKNAG2PO9kz/g4wE5deffPyJ YUuopRQp/0KtI11e0zW0NrzR0jnIyPWrI3lzeV/XRLzezrmtpIdgRPOMmDo0xxGu ZLN+Ak+mz8hMp7CIl0BqMuN+8YpLsg== =v2mb -----END PGP SIGNATURE----- --=-=-=-- From nobody Fri Jun 25 09:37:34 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 864253A09C1; Fri, 25 Jun 2021 09:37:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QehzDcMD-uC1; Fri, 25 Jun 2021 09:37:10 -0700 (PDT) Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 61A093A09BB; Fri, 25 Jun 2021 09:37:10 -0700 (PDT) Received: from fraeml739-chm.china.huawei.com (unknown [172.18.147.201]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4GBMkY05Ngz6L52v; Sat, 26 Jun 2021 00:23:33 +0800 (CST) Received: from dggeml751-chm.china.huawei.com (10.1.199.150) by fraeml739-chm.china.huawei.com (10.206.15.220) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.1.2176.2; Fri, 25 Jun 2021 18:37:06 +0200 Received: from dggeml753-chm.china.huawei.com (10.1.199.152) by dggeml751-chm.china.huawei.com (10.1.199.150) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2176.2; Sat, 26 Jun 2021 00:37:04 +0800 Received: from dggeml753-chm.china.huawei.com ([10.1.199.152]) by dggeml753-chm.china.huawei.com ([10.1.199.152]) with mapi id 15.01.2176.012; Sat, 26 Jun 2021 00:37:03 +0800 From: Qin Wu To: Michael Richardson , "netconf@ietf.org" , "core@ietf.org" Thread-Topic: some comments on netconf-adaptive-subscription Thread-Index: Addp3Xbz9EsUzJGVQoilQopppt0Pig== Date: Fri, 25 Jun 2021 16:37:03 +0000 Message-ID: <5a168444f56a4ef8bb8d98f186a190e1@huawei.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.52.202.106] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [netconf] some comments on netconf-adaptive-subscription X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jun 2021 16:37:16 -0000 LS0tLS3pgq7ku7bljp/ku7YtLS0tLQ0K5Y+R5Lu25Lq6OiBNaWNoYWVsIFJpY2hhcmRzb24gW21h aWx0bzptY3IraWV0ZkBzYW5kZWxtYW4uY2FdIA0K5Y+R6YCB5pe26Ze0OiAyMDIx5bm0NuaciDI2 5pelIDA6MTANCuaUtuS7tuS6ujogUWluIFd1IDxiaWxsLnd1QGh1YXdlaS5jb20+OyBuZXRjb25m QGlldGYub3JnOyBjb3JlQGlldGYub3JnDQrkuLvpopg6IFJlOiBzb21lIGNvbW1lbnRzIG9uIG5l dGNvbmYtYWRhcHRpdmUtc3Vic2NyaXB0aW9uDQoNClFpbiBXdSA8YmlsbC53dUBodWF3ZWkuY29t PiB3cm90ZToNCiAgICA+IFtRaW5dOiBUaGF0J3MgYSBnb29kIHN1Z2dlc3Rpb24sIFdpRmkgcHJv dmlkZXMgYSBnb29kIHVzZSBjYXNlIGZvciB0aGlzDQogICAgPiBhZGFwdGl2ZSBzdWJzY3JpcHRp b24gbWVjaGFuaXNtLiB3ZSBkaWQgdHJ5IHNvbWUgZXhpc3RpbmcgcHVibGlzaGVkDQogICAgPiBZ QU5HIG1vZGVscywgYnV0IGl0IHNlZW1zIFlBTkcgbW9kZWxzIHNpemUgaXMgdG9vIGJpZy4gIFRo YXQncyB3aHkgd2UNCiAgICA+IGNyZWF0ZSBzaW1wbGlmaWVkIFdpZmkgbWFjIGV4YW1wbGUgTW9k dWxlLiBJZiB5b3UgY2FuIHByb3ZpZGUgYSBsaW5rIHRvDQogICAgPiBDSElQL01BVFRFUiBXSUZJ IHN0YXRpc3RpY3MgbW9kdWxlLCB3ZSBhcmUgaGFwcHkgdG8gcXVvdGUgdGhhdCBleGlzdGluZw0K ICAgID4gbW9kdWxlLg0KDQpUaGUgQ0hJUC9NQVRURVIgZG9jdW1lbnQgbm90IHB1YmxpYyB5ZXQs IGJ1dCBIdWF3ZWkgaXMgYSBtZW1iZXIgYW5kIGNhbiBnZXQgdGhlIGRvY3VtZW50Lg0KQnV0LCBp dCdzIG5vdCBhIFlBTkcgbW9kdWxlLiAgVGhlIGZhY3QgdGhhdCB0aGV5IGhhdmUgYSBzZXQgb2Yg d2lmaSBzdGF0aXN0aWNzIGluIHRoZWlyIGJhc2UgZGVmaW5pdGlvbiBhcmd1ZXMgdGhhdCB0aGVy ZSBvdWdodCB0byBiZSBhbiBlcXVpdmFsZW50IFlBTkcgbW9kZWwgdGhvdWdoLg0KDQpbUWluXTpU aGFua3MsIEkgd2lsbCB0YWtlIGEgbG9vayBhdCBpdCBhbmQgc2VlIGlmIHNvbWV0aGluZyBjYW4g YmUgcmV1c2VkLg0KDQogICAgPiBbUWluXTogVGhlIGludGVudGlvbiBpcyB0byBvcHRpbWl6ZSB0 aGUgZXhpc3RpbmcgWUFORyBwdXNoIG1lY2hhbmlzbQ0KICAgID4gZm9yIE5FVENPTkYvUkVTVENP TkYgYW5kIG90aGVyIG1hbmFnZW1lbnQgcHJvdG9jb2xzLiBBbmQgdGhlIG5ldHdvcmsNCiAgICA+ IGRldmljZSBjYW4gc3VwcG9ydCBtdWx0aXBsZSBjYXB0dXJlIHBlcmlvZGljIGludGVydmFscywg dGhlIG1lY2hhbmlzbQ0KICAgID4gd2UgaW50cm9kdWNlIGlzIHRvIGFsbG93IHRoZSBuZXR3b3Jr IGRldmljZSBzd2l0Y2ggdG8gZGlmZmVyZW50IGNhcHR1cmUNCiAgICA+IHBlcmlvZGljIGludGVy dmFsIGF1dG9tYXRpY2FsbHkgd2l0aG91dCBhc2tpbmcgdGhlIE5NUyBmb3IgcGVybWlzc2lvbg0K ICAgID4gZWFjaCB0aW1lLiBJIGhvcGUgdGhpcyBjbGFyaWZpZXMuDQoNCnllcywgSSB1bmRlcnN0 b29kIHRoYXQgZnJvbSB0aGUgZG9jdW1lbnQuDQoNCiAgICA+IFtRaW5dOiBJIGFtIGFsc28gaG9w aW5nIFJFU1RDT05GIGFuZCBDT1JFQ09ORiBjYW4gd29yayB0b2dldGhlciwgYnV0DQogICAgPiB0 aGV5IHNlZW1zIHRvIGxvb2sgaW50byBkaWZmZXJlbnQgdXNlIGNhc2VzIChjb25zdHJhaW5lZCBk ZXZpY2UNCiAgICA+IG1hbmFnZW1lbnQgdnMgdW5jb25zdHJhaW5lZCBkZXZpY2UgbWFuYWdlbWVu dCkgLiAgSSBhbSBub3Qgc3VyZSB3ZQ0KICAgID4gc2hvdWxkIGdlbmVyYWxpemVkIFJFU1RDT05G IGFuZCBDT1JFQ09ORiBpbnRvIGEgc2luZ2xlIHByb3RvY29sLg0KDQpUaGF0J3Mgbm90IHdoYXQg SSdtIHN1Z2dlc3RpbmcuDQpJJ20gYXNraW5nLCBpZiBiYW5kd2lkdGggaXMgYW4gaXNzdWUsIHdo eSBub3QgdXNlIGEgc21hbGxlciBlbmNvZGluZy4NCltRaW5dOiBGb3IgWUFORyBwdXNoLCB1c3Vh bGx5IHRoZSBzZXJ2ZXIgbGVhcm5zIHRoZSBlbmNvZGluZyBzdXBwb3J0ZWQgYnkgdGhlIGNsaWVu dCBhdCB0aGUgYmVnaW5uaW5nIG9mIHRoZSBtYW5hZ2VtZW50IHNlc3Npb24uIFR3byByZWxldmFu dCBkcmFmdHMgYXJlOg0KZHJhZnQtaWV0Zi1uZXRjb25mLWh0dHBzLW5vdGlmDQpkcmFmdC10YW8t bmV0Y29uZi1kYXRhLWV4cG9ydC1jYXBhYmlsaXRpZXMNCkkgYW0gbm90IHN1cmUgd2UgY2FuIHN3 aXRjaCBlbmNvZGluZyBpbiB0aGUgbWlkZGxlIG9mIHNlc3Npb24sIHdoaWNoIHByb2JhYmx5IG5l ZWRzIHRvIHRlYXIgZG93biB0aGUgc2Vzc2lvbiBhbmQgbG9zcyB0aGUgc2VydmljZSBjb250aW51 aXR5Lg0KRm9yIHRoZSBuZXR3b3JrIGRldmljZSBzdXBwb3J0IG11bHRpcGxlIGNhcHR1cmUgcGVy aW9kaWMgaW50ZXJ2YWxzLCBzd2l0Y2ggdGhlIGludGVydmFsIGlzIGNoZWFwIGFuZCBkb2Vzbid0 IGNhdXNlIHRoZSBzZXNzaW9uIHRvIGJlIGludGVycnVwdGVkLg0KVGhhdCBpcyB3aHkgd2Ugbm90 IGNvbnNpZGVyIGEgc21hbGxlciBlbmNvZGluZyBpbiB0aGUgc29sdXRpb24uDQpBbmQsIHdoeSBu b3QgaW50ZWdyYXRlIHdpdGggQ29BUCBPYnNlcnZlPw0KW1Fpbl06IEkgaGF2ZSBhIHF1aWNrIGxv b2sgYXQgQ09BUCBPYnNlcnZlLiBJIHNlZSB0aGUgY29tbW9uYWxpdHkgYmV0d2VlbiBDb0FQIE9i c2VydmVyIGFuZCB0aGlzIGRyYWZ0IGlzIA0KVGhlIHNlcnZlciBvciBuZXR3b3JrIGRldmljZSBp biBib3RoIGNhc2VzLCBuZWVkIHRvIHNlbmQgbm90aWZpY2F0aW9uIHRvIHRoZSBjbGllbnQgdG8g aW5mb3JtIHRoZSBjdXJyZW50IHRlbXBlcmF0dXJlIG9yIHN1YnNjcmliZWQgZGF0YS4NClRoZSBj bGllbnQgaW4gYm90aCBjYXNlIG5lZWRzIHRvIG9ic2VydmVyIHJlc291cmNlIGNoYW5nZSBvciBk YXRhIGNoYW5nZSBpbiB0aGUgc2VydmVyLg0KQnV0IHRoZSBkaWZmZXJlbmNlIGlzIHRoZSBzZXJ2 ZXIgaW4gYWRhcHRpdmUtc3Vic2NyaXB0aW9uIGRyYWZ0IGhhcyBzb21lIGNvbnRyb2wgYW5kIGNh biBzd2l0Y2ggY2FwdHVyZSBwZXJpb2RpYyBpbnRlcnZhbC4gSW4gYWRkaXRpb24sIHRoZSBzZXJ2 ZXIgaW4gdGhlIGFkYXB0aXZlLXN1YnNjcmlwdGlvbiBkcmFmdA0KQ2FuIHNlbmQgaW50ZXJ2YWwg c3dpdGNoaW5nIG5vdGlmaWNhdGlvbiB0byB0aGUgY2xpZW50Lg0KU28gYmFzZWQgb24gdGhpcyBh bmFseXNpcywgSSBiZWxpZXZlIENvQVAgT2JzZXJ2ZSBoYXMgYmVlbiBpbnRlZ3JhdGVkIGludG8g dGhpcyBkcmFmdCB3aGljaCBpcyBzaW1pbGFyIHRvIHdoYXQgUkZDODY0MSBzcGVjaWZpZXMgKGku ZS4sIFB1YiBTdWIgbWVjaGFuaXNtKS4NCg0KLS0NCk1pY2hhZWwgUmljaGFyZHNvbiA8bWNyK0lF VEZAc2FuZGVsbWFuLmNhPiAgIC4gbyBPICggSVB2NiBJw7hUIGNvbnN1bHRpbmcgKQ0KICAgICAg ICAgICBTYW5kZWxtYW4gU29mdHdhcmUgV29ya3MgSW5jLCBPdHRhd2EgYW5kIFdvcmxkd2lkZQ0K From nobody Fri Jun 25 09:51:14 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A1EBA3A0AA6; Fri, 25 Jun 2021 09:51:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wUWYauFZIl3i; Fri, 25 Jun 2021 09:51:05 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E76F83A0AA0; Fri, 25 Jun 2021 09:51:04 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 9C46138B87; Fri, 25 Jun 2021 12:52:50 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id FwlVbgA9eITn; Fri, 25 Jun 2021 12:52:48 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 2AA4338A36; Fri, 25 Jun 2021 12:52:48 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 49151553; Fri, 25 Jun 2021 12:51:00 -0400 (EDT) From: Michael Richardson to: Qin Wu , netconf@ietf.org, "core\@ietf.org" In-Reply-To: <30012.1624637371@localhost> References: <0ded93e29090419dabc5551e49dac97d@huawei.com> <30012.1624637371@localhost> X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [netconf] some comments on netconf-adaptive-subscription X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jun 2021 16:51:10 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Michael Richardson wrote: >> [Qin]: I am also hoping RESTCONF and CORECONF can work together, but >> they seems to look into different use cases (constrained device >> management vs unconstrained device management) . I am not sure we >> should generalized RESTCONF and CORECONF into a single protocol. > That's not what I'm suggesting. I'm asking, if bandwidth is an issue, > why not use a smaller encoding. And, why not integrate with CoAP > Observe? draft-birkholz-yang-core-telemetry-01 [now expired] for instance tries to do a lot of the matching. I think that the adaptive rate subscription that you've created would work very well within that model. I guess yang-core-telemetry-01 needs to update itself as ietf-netconf-subscribed-notifications is published as RFC 8639 right. I still don't know how XPath would work with COMI, but really I'm just sitting around the edges of the YANG over the wire space. =2D- Michael Richardson . o O ( IPv6 I=C3=B8T consulti= ng ) Sandelman Software Works Inc, Ottawa and Worldwide --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAmDWCXQACgkQgItw+93Q 3WUgKgf+LZg0HKpMQoC4o6waz58vwjRvvlo6DVD5w7ueK+4K3xZG1JGbWbLFWBF7 tP0MQZu1sxY/d85XKcY+EiYvbExNT/f59Mo7VXy1iD+qvih1+GFqRwid+Bro9tQ8 Gp3zeEVg9Parwmokz8ua37ylMYaGqc1Qc14kkjHddfU6iTC83C50F/OPnP3DbFSk 2aqwgmc6mJ/5xLM5gqY+VHg69WJVZZ4kmGi9OcZULeimXN5J/3ISwQMDH60SB/qv PDhLQsO3n7gyAxjVG4I2xOsPR+fjcpJFRMyaTbzMhjuR5QX/fq6sB0Tq1CBIWkvo /HFB94x2W+U6EY34rtNybA4/kNnsfQ== =YBZE -----END PGP SIGNATURE----- --=-=-=-- From nobody Fri Jun 25 09:58:31 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9A7BC3A0B06; Fri, 25 Jun 2021 09:58:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id C0ZbJ8-6u8tf; Fri, 25 Jun 2021 09:58:24 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B60273A0B02; Fri, 25 Jun 2021 09:58:23 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id C215B38B97; Fri, 25 Jun 2021 13:00:08 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 5sbQjQDcS7Nu; Fri, 25 Jun 2021 13:00:06 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id C2B6538B92; Fri, 25 Jun 2021 13:00:06 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id DCA71553; Fri, 25 Jun 2021 12:58:18 -0400 (EDT) From: Michael Richardson To: Qin Wu , "netconf\@ietf.org" , "core\@ietf.org" In-Reply-To: References: X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [netconf] [core] some comments on netconf-adaptive-subscription X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jun 2021 16:58:29 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Qin Wu wrote: mcr> I didn't finish my thought here. Specifically, it seems that the = CORE mcr> WG is doing a lot of stuff with CoAP Observes and SENML and all so= rts mcr> of interesting triggers. Qin> data modeling language such as YANG can be common work for both CO= RE Qin> WG and NETCONF WG, But they may choose different transport protoco= l, Qin> such as NETCONF, RESTCONF, HTTP 2.0, COAP, MQTT, COMI Secondly, I Qin> think it will be nice to separate constrained device management fr= om Qin> resource unconstrained network device management, Constraint device Qin> as IoT device can be temperature sensor, current, voltage sensor Qin> which can be seen as affiliated devices pertaining to resource Qin> unstrained network device. temperature, current are critical values for routing equipment, aren't they? Qin> In data center scenarios, we do a lot of such affiliated devices or Qin> sensors such as air conditioner, water leakage alarm sensor deploy= ed Qin> together with data center switch devices. These IoT devices only Qin> use MQTT/COAP/HTTP to communicate with their IoT platform, for data Qin> center switch devices, you may still rely on network management Qin> protocols such as NETCONF, SNMP, gRPC, etc. Do you see this Qin> differently? Michael? It seems that we ought to seek convergence here. That's what I'm saying. That any split here is for historical reasons, and does not make sense going forward. =2D- Michael Richardson . o O ( IPv6 I=C3=B8T consulti= ng ) Sandelman Software Works Inc, Ottawa and Worldwide --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAmDWCyoACgkQgItw+93Q 3WVFfAf/ZCWMMJ3YMXLvg6mJL08nw1Yd5G7w4QNu1bg+ak4BkpJm/OhhKh/Ims4J WOQvrv29lnrVyeGbgF0DfQfmBNwKBs/K5aQGXhsyhCQ+hF7XJRmR9F7qTc15Bgkh +6yNa1Mw84fIB42AbHinqWWQxFZCAJtdnCqLNmAWwkxVB17K2pFa2Q+5rtRJ1TGc rk3DNHJC0fHGE2ILrAKBINXnGWbTmnRE7mh4txaaFOHpCrkCqhSV5LYR3rZoOK5P a+fc3J3eseOstZzKLkIAyxY+RQz3/kt6/eLdVck/oFShs13MmQ0jv/xgM4hVjv5+ dTgRflqoeJjrenYEzxEWrsbeSOBDiQ== =5B0U -----END PGP SIGNATURE----- --=-=-=-- From nobody Fri Jun 25 10:05:16 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 010E43A0B8B; Fri, 25 Jun 2021 10:05:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KPI_JUF4alve; Fri, 25 Jun 2021 10:05:05 -0700 (PDT) Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ABD963A0B8D; Fri, 25 Jun 2021 10:05:05 -0700 (PDT) Received: from fraeml702-chm.china.huawei.com (unknown [172.18.147.226]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4GBNTk5GJwz6G8G1; Sat, 26 Jun 2021 00:57:30 +0800 (CST) Received: from dggeml704-chm.china.huawei.com (10.3.17.142) by fraeml702-chm.china.huawei.com (10.206.15.51) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2176.2; Fri, 25 Jun 2021 19:05:01 +0200 Received: from dggeml753-chm.china.huawei.com (10.1.199.152) by dggeml704-chm.china.huawei.com (10.3.17.142) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2176.2; Sat, 26 Jun 2021 01:04:59 +0800 Received: from dggeml753-chm.china.huawei.com ([10.1.199.152]) by dggeml753-chm.china.huawei.com ([10.1.199.152]) with mapi id 15.01.2176.012; Sat, 26 Jun 2021 01:04:59 +0800 From: Qin Wu To: Michael Richardson , "netconf@ietf.org" , "core@ietf.org" Thread-Topic: some comments on netconf-adaptive-subscription Thread-Index: Addp45gbKxamTYjtQFuNdpDeReFPpQ== Date: Fri, 25 Jun 2021 17:04:59 +0000 Message-ID: <34e1882b99774c4e94216050aefafe78@huawei.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.52.202.106] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [netconf] some comments on netconf-adaptive-subscription X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jun 2021 17:05:11 -0000 LS0tLS3pgq7ku7bljp/ku7YtLS0tLQ0K5Y+R5Lu25Lq6OiBNaWNoYWVsIFJpY2hhcmRzb24gW21h aWx0bzptY3IraWV0ZkBzYW5kZWxtYW4uY2FdIA0K5Y+R6YCB5pe26Ze0OiAyMDIx5bm0NuaciDI2 5pelIDA6NTENCuaUtuS7tuS6ujogUWluIFd1IDxiaWxsLnd1QGh1YXdlaS5jb20+OyBuZXRjb25m QGlldGYub3JnOyBjb3JlQGlldGYub3JnDQrkuLvpopg6IFJlOiBzb21lIGNvbW1lbnRzIG9uIG5l dGNvbmYtYWRhcHRpdmUtc3Vic2NyaXB0aW9uDQoNCg0KTWljaGFlbCBSaWNoYXJkc29uIDxtY3Ir aWV0ZkBzYW5kZWxtYW4uY2E+IHdyb3RlOg0KICAgID4+IFtRaW5dOiBJIGFtIGFsc28gaG9waW5n IFJFU1RDT05GIGFuZCBDT1JFQ09ORiBjYW4gd29yayB0b2dldGhlciwgYnV0DQogICAgPj4gdGhl eSBzZWVtcyB0byBsb29rIGludG8gZGlmZmVyZW50IHVzZSBjYXNlcyAoY29uc3RyYWluZWQgZGV2 aWNlDQogICAgPj4gbWFuYWdlbWVudCB2cyB1bmNvbnN0cmFpbmVkIGRldmljZSBtYW5hZ2VtZW50 KSAuICBJIGFtIG5vdCBzdXJlIHdlDQogICAgPj4gc2hvdWxkIGdlbmVyYWxpemVkIFJFU1RDT05G IGFuZCBDT1JFQ09ORiBpbnRvIGEgc2luZ2xlIHByb3RvY29sLg0KDQogICAgPiBUaGF0J3Mgbm90 IHdoYXQgSSdtIHN1Z2dlc3RpbmcuICBJJ20gYXNraW5nLCBpZiBiYW5kd2lkdGggaXMgYW4gaXNz dWUsDQogICAgPiB3aHkgbm90IHVzZSBhIHNtYWxsZXIgZW5jb2RpbmcuICBBbmQsIHdoeSBub3Qg aW50ZWdyYXRlIHdpdGggQ29BUA0KICAgID4gT2JzZXJ2ZT8NCg0KZHJhZnQtYmlya2hvbHoteWFu Zy1jb3JlLXRlbGVtZXRyeS0wMSBbbm93IGV4cGlyZWRdIGZvciBpbnN0YW5jZSB0cmllcyB0byBk byBhIGxvdCBvZiB0aGUgbWF0Y2hpbmcuICBJIHRoaW5rIHRoYXQgdGhlIGFkYXB0aXZlIHJhdGUg c3Vic2NyaXB0aW9uIHRoYXQgeW91J3ZlIGNyZWF0ZWQgd291bGQgd29yayB2ZXJ5IHdlbGwgd2l0 aGluIHRoYXQgbW9kZWwuDQpbUWluXTogV2VsbCwgSSB3aWxsIGludmVzdGlnYXRlIHRoaXMgYW5k IHNlZSB3aGF0IGlzIG1pc3NpbmcgdGhlcmUuDQpJIGd1ZXNzIHlhbmctY29yZS10ZWxlbWV0cnkt MDEgbmVlZHMgdG8gdXBkYXRlIGl0c2VsZiBhcyBpZXRmLW5ldGNvbmYtc3Vic2NyaWJlZC1ub3Rp ZmljYXRpb25zIGlzIHB1Ymxpc2hlZCBhcyBSRkMgODYzOSByaWdodC4NCltRaW5dOiBBZ3JlZS4g DQpJIHN0aWxsIGRvbid0IGtub3cgaG93IFhQYXRoIHdvdWxkIHdvcmsgd2l0aCBDT01JLCBidXQg cmVhbGx5IEknbSBqdXN0IHNpdHRpbmcgYXJvdW5kIHRoZSBlZGdlcyBvZiB0aGUgWUFORyBvdmVy IHRoZSB3aXJlIHNwYWNlLg0KW1Fpbl06IEdvb2QgcXVlc3Rpb24sIG5vdGUgdGhhdCBYUEFUSCB1 c2VkIGZvciBORVRDT05GIGZvbGxvd3MgWFBhdGggMS4wIFtXM0MuUkVDLXhwYXRoLTE5OTkxMTE2 XSBhbmQgWFBhdGggMi4wDQpTZWUgUkZDNjI0MSBzZWN0aW9uIDguOSBhbmQgUkZDNzk1MCBzZWN0 aW9uIDYuNC4NCi0tDQpNaWNoYWVsIFJpY2hhcmRzb24gPG1jcitJRVRGQHNhbmRlbG1hbi5jYT4g ICAuIG8gTyAoIElQdjYgScO4VCBjb25zdWx0aW5nICkNCiAgICAgICAgICAgU2FuZGVsbWFuIFNv ZnR3YXJlIFdvcmtzIEluYywgT3R0YXdhIGFuZCBXb3JsZHdpZGUNCg0KDQoNCg0K From nobody Fri Jun 25 10:12:12 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F34D23A0BF1; Fri, 25 Jun 2021 10:12:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 53H_1TjRMAYX; Fri, 25 Jun 2021 10:12:06 -0700 (PDT) Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 017E43A0BF0; Fri, 25 Jun 2021 10:12:06 -0700 (PDT) Received: from fraeml710-chm.china.huawei.com (unknown [172.18.147.201]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4GBNdr5098z6G8LR; Sat, 26 Jun 2021 01:04:32 +0800 (CST) Received: from dggeml751-chm.china.huawei.com (10.1.199.150) by fraeml710-chm.china.huawei.com (10.206.15.59) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.1.2176.2; Fri, 25 Jun 2021 19:12:03 +0200 Received: from dggeml753-chm.china.huawei.com (10.1.199.152) by dggeml751-chm.china.huawei.com (10.1.199.150) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2176.2; Sat, 26 Jun 2021 01:12:01 +0800 Received: from dggeml753-chm.china.huawei.com ([10.1.199.152]) by dggeml753-chm.china.huawei.com ([10.1.199.152]) with mapi id 15.01.2176.012; Sat, 26 Jun 2021 01:12:00 +0800 From: Qin Wu To: Michael Richardson , "netconf@ietf.org" , "core@ietf.org" Thread-Topic: [core] some comments on netconf-adaptive-subscription Thread-Index: Addp5FkYCLrfoHWHSouJ7G0uLCP+5w== Date: Fri, 25 Jun 2021 17:12:00 +0000 Message-ID: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.52.202.106] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [netconf] [core] some comments on netconf-adaptive-subscription X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jun 2021 17:12:11 -0000 LS0tLS3pgq7ku7bljp/ku7YtLS0tLQ0K5Y+R5Lu25Lq6OiBNaWNoYWVsIFJpY2hhcmRzb24gW21h aWx0bzptY3IraWV0ZkBzYW5kZWxtYW4uY2FdIA0K5Y+R6YCB5pe26Ze0OiAyMDIx5bm0NuaciDI2 5pelIDA6NTgNCuaUtuS7tuS6ujogUWluIFd1IDxiaWxsLnd1QGh1YXdlaS5jb20+OyBuZXRjb25m QGlldGYub3JnOyBjb3JlQGlldGYub3JnDQrkuLvpopg6IFJlOiBbY29yZV0gc29tZSBjb21tZW50 cyBvbiBuZXRjb25mLWFkYXB0aXZlLXN1YnNjcmlwdGlvbg0KDQpRaW4gV3UgPGJpbGwud3VAaHVh d2VpLmNvbT4gd3JvdGU6DQogICAgbWNyPiBJIGRpZG4ndCBmaW5pc2ggbXkgdGhvdWdodCBoZXJl LiAgU3BlY2lmaWNhbGx5LCBpdCBzZWVtcyB0aGF0IHRoZSBDT1JFDQogICAgbWNyPiBXRyBpcyBk b2luZyBhIGxvdCBvZiBzdHVmZiB3aXRoIENvQVAgT2JzZXJ2ZXMgYW5kIFNFTk1MIGFuZCBhbGwg c29ydHMNCiAgICBtY3I+IG9mIGludGVyZXN0aW5nIHRyaWdnZXJzLg0KDQogICAgUWluPiBkYXRh IG1vZGVsaW5nIGxhbmd1YWdlIHN1Y2ggYXMgWUFORyBjYW4gYmUgY29tbW9uIHdvcmsgZm9yIGJv dGggQ09SRQ0KICAgIFFpbj4gV0cgYW5kIE5FVENPTkYgV0csIEJ1dCB0aGV5IG1heSBjaG9vc2Ug ZGlmZmVyZW50IHRyYW5zcG9ydCBwcm90b2NvbCwNCiAgICBRaW4+IHN1Y2ggYXMgTkVUQ09ORiwg UkVTVENPTkYsIEhUVFAgMi4wLCBDT0FQLCBNUVRULCBDT01JIFNlY29uZGx5LCBJDQogICAgUWlu PiB0aGluayBpdCB3aWxsIGJlIG5pY2UgdG8gc2VwYXJhdGUgY29uc3RyYWluZWQgZGV2aWNlIG1h bmFnZW1lbnQgZnJvbQ0KICAgIFFpbj4gcmVzb3VyY2UgdW5jb25zdHJhaW5lZCBuZXR3b3JrIGRl dmljZSBtYW5hZ2VtZW50LCBDb25zdHJhaW50IGRldmljZQ0KICAgIFFpbj4gYXMgSW9UIGRldmlj ZSBjYW4gYmUgdGVtcGVyYXR1cmUgc2Vuc29yLCBjdXJyZW50LCB2b2x0YWdlIHNlbnNvcg0KICAg IFFpbj4gd2hpY2ggY2FuIGJlIHNlZW4gYXMgYWZmaWxpYXRlZCBkZXZpY2VzIHBlcnRhaW5pbmcg dG8gcmVzb3VyY2UNCiAgICBRaW4+IHVuc3RyYWluZWQgbmV0d29yayBkZXZpY2UuDQoNCnRlbXBl cmF0dXJlLCBjdXJyZW50IGFyZSBjcml0aWNhbCB2YWx1ZXMgZm9yIHJvdXRpbmcgZXF1aXBtZW50 LCBhcmVuJ3QgdGhleT8NCg0KW1Fpbl06IE15IHVuZGVyc3RhbmRpbmcgaXMgeWVzLCB0aGVyZSBp cyBoYXJkd2FyZSBZQU5HIG1vZGVsIHdoaWNoIGNhbiBiZSB1c2VkIHRvIGNvbGxlY3QgdGhlc2Ug aW52ZW50b3J5IGRhdGEgYXNzb2NpYXRlZCB3aXRoIHRoZSByb3V0aW5nIGVxdWlwbWVudA0KU2Vl IFJGQzgzNDguDQoNCiAgICBRaW4+IEluIGRhdGEgY2VudGVyIHNjZW5hcmlvcywgd2UgZG8gc2Vl IGEgbG90IG9mIHN1Y2ggYWZmaWxpYXRlZCBkZXZpY2VzIG9yDQogICAgUWluPiBzZW5zb3JzIHN1 Y2ggYXMgYWlyIGNvbmRpdGlvbmVyLCB3YXRlciBsZWFrYWdlIGFsYXJtIHNlbnNvciBkZXBsb3ll ZA0KICAgIFFpbj4gdG9nZXRoZXIgd2l0aCBkYXRhIGNlbnRlciBzd2l0Y2ggZGV2aWNlcy4gIFRo ZXNlIElvVCBkZXZpY2VzIG9ubHkNCiAgICBRaW4+IHVzZSBNUVRUL0NPQVAvSFRUUCB0byBjb21t dW5pY2F0ZSB3aXRoIHRoZWlyIElvVCBwbGF0Zm9ybSwgZm9yIGRhdGENCiAgICBRaW4+IGNlbnRl ciBzd2l0Y2ggZGV2aWNlcywgeW91IG1heSBzdGlsbCByZWx5IG9uIG5ldHdvcmsgbWFuYWdlbWVu dA0KICAgIFFpbj4gcHJvdG9jb2xzIHN1Y2ggYXMgTkVUQ09ORiwgU05NUCwgZ1JQQywgZXRjLiAg RG8geW91IHNlZSB0aGlzDQogICAgUWluPiBkaWZmZXJlbnRseT8gTWljaGFlbD8NCg0KSXQgc2Vl bXMgdGhhdCB3ZSBvdWdodCB0byBzZWVrIGNvbnZlcmdlbmNlIGhlcmUuDQpUaGF0J3Mgd2hhdCBJ J20gc2F5aW5nLiAgVGhhdCBhbnkgc3BsaXQgaGVyZSBpcyBmb3IgaGlzdG9yaWNhbCByZWFzb25z LCBhbmQgZG9lcyBub3QgbWFrZSBzZW5zZSBnb2luZyBmb3J3YXJkLg0KDQpbUWluXTogVGVuZCB0 byBhZ3JlZSwgdW5pZmllZCBkYXRhIG1vZGVsaW5nIG9yIHNlbWFudGljcyBpbnRlcm9wZXJhYmls aXR5IG1heSBiZSB0aGUgc29sdXRpb24uIE9uZSBvZiBleGFtcGxlIGlzIHRvDQpCdWlsZCBkaWdp dGFsIHR3aW4gZGF0YSBtb2RlbCBhbmQgbW9kZWxzIHNlbnNvciBkYXRhIGFuZCBuZXR3b3JrIGRl dmljZSBoZWFsdGggZGF0YSB0b2dldGhlci4NCg0KLS0NCk1pY2hhZWwgUmljaGFyZHNvbiA8bWNy K0lFVEZAc2FuZGVsbWFuLmNhPiAgIC4gbyBPICggSVB2NiBJw7hUIGNvbnN1bHRpbmcgKQ0KICAg ICAgICAgICBTYW5kZWxtYW4gU29mdHdhcmUgV29ya3MgSW5jLCBPdHRhd2EgYW5kIFdvcmxkd2lk ZQ0KDQoNCg0KDQo= From nobody Fri Jun 25 14:50:13 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42C5C3A0B44; Fri, 25 Jun 2021 14:50:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.236 X-Spam-Level: X-Spam-Status: No, score=-2.236 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, MSGID_FROM_MTA_HEADER=0.001, NICE_REPLY_A=-0.338, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fraunhofer.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5nADADz3Pj7W; Fri, 25 Jun 2021 14:50:03 -0700 (PDT) Received: from mail-edgeS23.fraunhofer.de (mail-edges23.fraunhofer.de [153.97.7.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 916053A0B40; Fri, 25 Jun 2021 14:50:01 -0700 (PDT) IronPort-SDR: b7n4w2pZ4u0a7xLT95VhwKbVWBHikE8a8QDgRZfKBYeS/2lHXWcXNHFf5V0k72n8yGdbJTTOv2 QlogIL/4FY8A== IronPort-PHdr: =?us-ascii?q?A9a23=3A1o5l1hMScEvAC3TtmEYl6nfnWUAX0o4cdiYU5?= =?us-ascii?q?4YpzbVUfffr85fjORnZ4vNgxB/MUJ7A4v1Jw+zRr+j7WGMG7JrA1RJKcJFFW?= =?us-ascii?q?xIfz8lDmQsmDZ2EBFH1avnwYH9yEMFLTlQw+Xa9PABcE9r/YFuHpHq04HYSF?= =?us-ascii?q?xzzOBAzKP7yH9vJjtjx2fq75pvTZAtFnnyxbOAaEQ=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2GtDQB6TtZg/xmnZsBagQmDKlF+gUI?= =?us-ascii?q?LhD2DAkcBAYU5iDktA4ENmRCCUwNJCwsBAQEBAQEBAQEIASoLCgIEAQEDA4F?= =?us-ascii?q?YgjBEAjWCPQElOBMCBAEBARIBAQYBAQEBAQYEAgKBAIVoDYNWgQgBAQEBAQE?= =?us-ascii?q?BAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEFAkFHDDIBAQEDAQEQEQ8?= =?us-ascii?q?BBQgBASwMDwkCDgoCAgkaAwICJwsUEQYBDAYCAQEegk8BglUDLgEBAwuMcY8?= =?us-ascii?q?0AYE6AoofeoEygQGCBwEBBgQEgUhBRoJqGFiBWgMGCQGBBiqCe4Z1g3onEIF?= =?us-ascii?q?VRIEVJw+CNzY+gmIBAQOEdIJkgj1haEMQIDsnW4EXkQcWjzCbHCwHgX2BJoE?= =?us-ascii?q?nBguIX5NlBhMmg1+RLAaQa5VkghiKCpNHhG0CBAIEBQIOAQEGgWuBfk0kT4I?= =?us-ascii?q?1ATNQFwIOi0eCZBaDToUUhUxxOAIGAQkBAQMJWyGKVQEyXgEB?= X-IPAS-Result: =?us-ascii?q?A2GtDQB6TtZg/xmnZsBagQmDKlF+gUILhD2DAkcBAYU5i?= =?us-ascii?q?DktA4ENmRCCUwNJCwsBAQEBAQEBAQEIASoLCgIEAQEDA4FYgjBEAjWCPQElO?= =?us-ascii?q?BMCBAEBARIBAQYBAQEBAQYEAgKBAIVoDYNWgQgBAQEBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEBAQEBAQEFAkFHDDIBAQEDAQEQEQ8BBQgBASwMDwkCD?= =?us-ascii?q?goCAgkaAwICJwsUEQYBDAYCAQEegk8BglUDLgEBAwuMcY80AYE6AoofeoEyg?= =?us-ascii?q?QGCBwEBBgQEgUhBRoJqGFiBWgMGCQGBBiqCe4Z1g3onEIFVRIEVJw+CNzY+g?= =?us-ascii?q?mIBAQOEdIJkgj1haEMQIDsnW4EXkQcWjzCbHCwHgX2BJoEnBguIX5NlBhMmg?= =?us-ascii?q?1+RLAaQa5VkghiKCpNHhG0CBAIEBQIOAQEGgWuBfk0kT4I1ATNQFwIOi0eCZ?= =?us-ascii?q?BaDToUUhUxxOAIGAQkBAQMJWyGKVQEyXgEB?= X-IronPort-AV: E=Sophos;i="5.83,300,1616454000"; d="scan'208";a="30001488" Received: from mail-mtadd25.fraunhofer.de ([192.102.167.25]) by mail-edgeS23.fraunhofer.de with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 25 Jun 2021 23:49:57 +0200 IronPort-SDR: xoXhfu7HU1qYTJwGqkaRHTFLzS/bxzMnQdY9Ti5qfdqeW40qMymgA85VICH1g6lXGb91yn1UV2 Brnv12HYsY/Xfey80D38cwaJix7U2eB0k= IronPort-PHdr: =?us-ascii?q?A9a23=3A/rM8/BZcpuLN04Ty3uER/Uj/LTDNhN3EVzX9o?= =?us-ascii?q?rImhq5ANKO58MeqME/e4KBri1nEFcXe5ulfguXb+6bnRSQb4JmHvXxDFf4EV?= =?us-ascii?q?xIMhcgM2QB1BsmDBB76IeLkKSsgE5cKWFps5XruN09TFY73bEHTpXvn6zkUF?= =?us-ascii?q?13/OAN5K/6zFJTVipGs1vz09YfafgNIgzSwe/V+IUbekA=3D=3D?= IronPort-HdrOrdr: =?us-ascii?q?A9a23=3AJaEVCaHvCpIwqvG7pLqEjceALOsnbusQ8z?= =?us-ascii?q?AXPidKOH9om62j9/xG885w6faZslsssRIb+OxoWpPufZq0z/ccirX5Vo3NYO?= =?us-ascii?q?CJggeVEL0=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0D7TwD8TtZg/z6wYZlagQkJgVCBPAI?= =?us-ascii?q?BElEHTCtaJUMLhD2DAkcBAYU5hkaBcy0DOAFUmRCCUwNUCwEDAQEBAQEIAQQ?= =?us-ascii?q?mCwkBAgQBAYFegjBEAjWCOgImOBMCBAEBARIBAQUBAQECAQYEcROFaA1DAQw?= =?us-ascii?q?BhXUBAQQBARARDwEFCAEBFBgMDwkCDgoCAgkaAwICJwsHDREGAQwGAgEBHoJ?= =?us-ascii?q?PAYJVAy4CAwuMb480AYE6AoofeoEygQGCBwEBBgQEgUhBRoJqGFiBWgMGCQG?= =?us-ascii?q?BBigCAQEBgniGdYN6N4FVRIEVJw+CNzY+gmIBAQOEdIJkgj1haEMQIDsnW4E?= =?us-ascii?q?XkQcWjzCbHCwHgX2BJoEnBguIX5NlBhMmg1+RLAaQa5VkghiKCpNHhG0CBAI?= =?us-ascii?q?EBQIOAQEGgWskgVlNJE+CNQEzUBcCDotHgmQWg06FFIVMcTgCBgEJAQEDCVk?= =?us-ascii?q?BASGCZodvATJeAQE?= X-IronPort-AV: E=Sophos;i="5.83,300,1616454000"; d="scan'208";a="114399021" Received: from 153-97-176-62.vm.c.fraunhofer.de (HELO mobile.exch.fraunhofer.de) ([153.97.176.62]) by mail-mtaDD25.fraunhofer.de with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 25 Jun 2021 23:49:52 +0200 Received: from XCH-HYBRID-02.ads.fraunhofer.de (10.225.8.59) by XCH-HYBRID-01.ads.fraunhofer.de (10.225.8.57) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.858.12; Fri, 25 Jun 2021 23:49:52 +0200 Received: from EUR04-HE1-obe.outbound.protection.outlook.com (10.225.8.37) by XCH-HYBRID-02.ads.fraunhofer.de (10.225.8.59) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.858.12 via Frontend Transport; Fri, 25 Jun 2021 23:49:52 +0200 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=LM+4cJIWT5GG7RHlF6j35xdfF5t6XBsV6pUN/o7Amx6tW7MWppGFCAC2WlJL2dZHugiIxO1V6nJsscDf/Y0WWZ82wzlcJTPrf+OV1sFJmLu4j25HMgfJkAE6x3l1FwdHcejxBY7zthxlUWHA2ASFuWHVo52DX7rRTdTduSorAyep+4kgObOOXhxvJQV1OFqiiwfmF/qKIvUddQ4yStEVbdninChzIFSo6oik9otQ+h5cnD0QeerBo7lIzRIPVzZ3RSTNsZULOOuGS2Cn/k9qS6Wfa48uLejNKDCPZ3zB2ke2GEyF6KHgeU98jqrjrB7l+CpBP6mwU96Gbcnky30rzw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=YE31nq5ZRiISgbelL5tAyP0AU0AJY0knEaQkEoNVmyw=; b=UpjOkSOHzpqTcC1UEzX0P2LE8WAFTYSG/JjaYN1iK6kGQ1Q11T34ZdmWvL9g95eAHNwLT9Sar52UvjfV7glGIdMLuSlvOoAQ0D7jTUs5i0j1nOWQMGMTNdyH1ULOXawV9X9uaUBXISl7qhvy3Nu0wk2ZWgsIcpZD/EGTXrZmSTjAv0BsKm06i0+XeddyHKFUwNEHzJSdCSN4kMQdCDBoiM6sRumTKCce4+qewsEPqBDiY8Vv+P+ykNs3yQYLiiteIEdU7k7onVhGl2+GSBwSlaj+P5hdlALUI1wm+vDn1r+cKC7QcwLmJmSphac2WUay4dlNG+4fKA3lFCsGZn4gWA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=sit.fraunhofer.de; dmarc=pass action=none header.from=sit.fraunhofer.de; dkim=pass header.d=sit.fraunhofer.de; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fraunhofer.onmicrosoft.com; s=selector2-fraunhofer-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=YE31nq5ZRiISgbelL5tAyP0AU0AJY0knEaQkEoNVmyw=; b=BpU17vWJoxRrBQYILs5n67XLoV4pwahWjgjTgmPaeOa1Ud+3mik6R3KMDHvO44r1f63s4Dlh5MifpgO0Q8m8ad6YhzTZGdU1xc0Wa9RGAyFmyFcycNe0+tn+GDwl9etMmIbXgRKJv/AsYwXJ0IxNxUpL9ufRKj4qTZIyxAmXryM= Authentication-Results: ietf.org; dkim=none (message not signed) header.d=none; ietf.org; dmarc=none action=none header.from=sit.fraunhofer.de; Received: from DU2P194MB1709.EURP194.PROD.OUTLOOK.COM (2603:10a6:10:276::9) by DB6P194MB0134.EURP194.PROD.OUTLOOK.COM (2603:10a6:4:c6::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4264.18; Fri, 25 Jun 2021 21:49:50 +0000 Received: from DU2P194MB1709.EURP194.PROD.OUTLOOK.COM ([fe80::ac4d:c6fc:9d66:ba8f]) by DU2P194MB1709.EURP194.PROD.OUTLOOK.COM ([fe80::ac4d:c6fc:9d66:ba8f%5]) with mapi id 15.20.4264.023; Fri, 25 Jun 2021 21:49:50 +0000 To: Qin Wu , Michael Richardson , "netconf@ietf.org" , "core@ietf.org" References: <34e1882b99774c4e94216050aefafe78@huawei.com> From: Henk Birkholz Message-ID: Date: Fri, 25 Jun 2021 23:49:48 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0 In-Reply-To: <34e1882b99774c4e94216050aefafe78@huawei.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.206.151.153] X-ClientProxiedBy: AM4PR0701CA0022.eurprd07.prod.outlook.com (2603:10a6:200:42::32) To DU2P194MB1709.EURP194.PROD.OUTLOOK.COM (2603:10a6:10:276::9) MIME-Version: 1.0 X-MS-Exchange-MessageSentRepresentingType: 1 Received: from [192.168.16.50] (79.206.151.153) by AM4PR0701CA0022.eurprd07.prod.outlook.com (2603:10a6:200:42::32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4287.12 via Frontend Transport; Fri, 25 Jun 2021 21:49:49 +0000 X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 8487fb34-0cef-477c-7366-08d938232844 X-MS-TrafficTypeDiagnostic: DB6P194MB0134: X-Microsoft-Antispam-PRVS: X-MS-Oob-TLC-OOBClassifiers: OLM:10000; X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DU2P194MB1709.EURP194.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(4636009)(346002)(366004)(376002)(136003)(396003)(39830400003)(2906002)(66946007)(53546011)(478600001)(66574015)(31686004)(956004)(86362001)(26005)(83380400001)(31696002)(44832011)(2616005)(66556008)(66476007)(8676002)(186003)(38100700002)(38350700002)(16576012)(110136005)(316002)(16526019)(8936002)(5660300002)(966005)(6486002)(52116002)(45980500001)(43740500002); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?eHNKZTlaUnZNcU1ZcCswOGJoTWtkOG9uSHl2Y05NLzZXU3dVK3E1ZU1BWmZ1?= =?utf-8?B?djYzRnBneDRzNUdNUmpSYU5tTU1FZVVYcW90UTk1VmFpaCtGV0tRSmh5YlY4?= =?utf-8?B?dWtzTjBGczNQdTNpWGpuUkxiRlJVY1VSUHdhWFFVY2xTd0hmcFlOWjdHWnVQ?= =?utf-8?B?bEdEdFJndlFWcmF3VnhZMDA4MUo4M1NaUG1WVW1IWkVBRXNPTEhLb3B5S3F6?= =?utf-8?B?azR2TXExUmtBbU5XcnRhY08zaW9TZEtLN254UlNtbjM5NXlsazJBZWt0MUNM?= =?utf-8?B?Y1hSYkdRL0VHTUpDRzhQOU5aSjREd0d6ZUNEUUcydzVxclI2ZTExWno4YVB0?= =?utf-8?B?SkgvbTRxenErQVFPK29ieWw2SGwwb3Rua1RsaTRNRTY5MHRZdE96V2tRbWYy?= =?utf-8?B?YjZ0MnNDZENNSnQ1OURnaDc2Mm43bWN5SjZoYk1hSHgzdVFEaWl3Vzh1L2lS?= =?utf-8?B?MWNnN2pPVXpuRks0ZTdOTzFGR2FZM2FsTi9XRDRqK2xWaXRLcDQ4aS9CMlZa?= =?utf-8?B?dmZucWg4SlRPelRTWkhUbnU1blg4RVQrazUyelh0aE5mVy9lZEJKdHBHenZj?= =?utf-8?B?SHpMYVIzcWh5M1NZc3BLVTFkMlgyRHZvbGRMZTM1bldYVENtMVUyamx1SEFV?= =?utf-8?B?TU9RdkEvaVE1NG9mTVhMNVMrUjJkR3R3OFlETFFNNzRDQ09qT2h0eHlndFZx?= =?utf-8?B?d0ZjUjZMOUU2a1ZBN3VFaXRSYWpZcmE4SHhRVWdid2tQbWg2WnVocER3YVg5?= =?utf-8?B?ZHJlTHFVZEVjVklzcVhEc0RkWG9CZVd4VThFNUtzNTR0ckV6V3F0R0pNMTlK?= =?utf-8?B?Si95ZjRDUFQ4VVVhWXNFZWVTK0pMdm5GbFFMeG1wa3ZHYWVWeHUxQTk0enk2?= =?utf-8?B?OWJJeDd0N3NrRkQyMzBTMUdiaWcyVU8rQ29xZEJod0NZamMwa1NmTWJtN09I?= =?utf-8?B?eGdHMUJ4VWlvY0hnTHhSNHJZc1AyaU1wM2pvV0lLbThPN3NUWGZjU01UZHhS?= =?utf-8?B?aTRiait5TVVyejB2RzFZUXlRUHFjNU5uSGFvSTI3TVYxVGthcG1iYjhyWms1?= =?utf-8?B?OG50QUt4M3pEaVBEeDNyTUMzdGppUlowMzJpUU5CbTNzOG0ySFRTM0hnM1Vj?= =?utf-8?B?cGFwY3lETmo4aURJcGxhZVBLTWtxZ2VNUjdPdEwvSnJHdHNjRVd2UTI4OG45?= =?utf-8?B?cXlDQ0hSamtuZFZoTkVzMjI3SUdjSVpiVmVPZXdZenRueVVhRW1GekRqdjNz?= =?utf-8?B?cFVZZnVmL0NwTE1hVXcydE5wbE82czhUb3p3aWhSbmFKMStVeW1iY0FhSldk?= =?utf-8?B?bHpTaEtzY0JLZEhTcnBDYUJiKzMxOEhlb3dFbDdoS3d5MkUya3d6RXNzM3ha?= =?utf-8?B?WnFhZFYxZG12NG1YQW5xdFBKTTRsalZpYkpzZ255TGZoeDgzbDd2SGpRb0xr?= =?utf-8?B?TUYzbCt2ZXNkSUNqR3lHWFN5b3VQZzRLRFRYb1c0bmszMWg0U3dUc0wxalJE?= =?utf-8?B?S2hwSFVnYWRpTkM0ellFUE9wMm5wWU0wUGlNK3pvYWhudnhaaERKQk16N3R4?= =?utf-8?B?ZUZadkg0ejFxSWQrWko4Mnp5TDZGbmlmdHZ4dW5BMDU0SlNEZ2x5cDVla1dl?= =?utf-8?B?VE9oZjdRV2ZiMEtiLzNqL1hJa1ZRSXhES2U4V3BWd0FKb09kOWlENWxxeVA2?= =?utf-8?B?RlVQUFBRUE52NE90SlRvb0wwdFdQeHB6UDlkV1ZURW9OYTB0UER1ZTRGb3JY?= =?utf-8?Q?/rSCO4GLPy1ecPg/eF72cRO0X2jqA0ce6isb4ci?= X-MS-Exchange-CrossTenant-Network-Message-Id: 8487fb34-0cef-477c-7366-08d938232844 X-MS-Exchange-CrossTenant-AuthSource: DU2P194MB1709.EURP194.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 25 Jun 2021 21:49:50.1465 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: f930300c-c97d-4019-be03-add650a171c4 X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: VUqYHR2AdoDgjqMlnKGi4fU+iVRvWcFDrvkXdPVD8CEjo8RP7yIMz5DO8jjf1pu4g3ih0r/82Um5CQmd2xVjgoyzp/Hj8qxG5TDD9Z3y0E4= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB6P194MB0134 X-OriginatorOrg: sit.fraunhofer.de Archived-At: Subject: Re: [netconf] some comments on netconf-adaptive-subscription X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jun 2021 21:50:08 -0000 Hi Michael, hi Qin, hi all, I am painfully aware that I did not find the cycles to progress Concise YANG Telemetry in the recent past. This seems to be a good opportunity to change that :-) Wrt the topic of XPATH, there is https://datatracker.ietf.org/wg/jsonpath/about/ now and specifically https://datatracker.ietf.org/doc/draft-ietf-jsonpath-base/ It probably makes sense to create an I-D here that tracks the gaps that need to be bridged to do a CBORPATH for CORECONF. I'll take that item in concert with rekindling the other one. Viele Grüße, Henk On 25.06.21 19:04, Qin Wu wrote: > -----邮件原件----- > å‘件人: Michael Richardson [mailto:mcr+ietf@sandelman.ca] > å‘é€æ—¶é—´: 2021å¹´6月26æ—¥ 0:51 > 收件人: Qin Wu ; netconf@ietf.org; core@ietf.org > 主题: Re: some comments on netconf-adaptive-subscription > > > Michael Richardson wrote: > >> [Qin]: I am also hoping RESTCONF and CORECONF can work together, but > >> they seems to look into different use cases (constrained device > >> management vs unconstrained device management) . I am not sure we > >> should generalized RESTCONF and CORECONF into a single protocol. > > > That's not what I'm suggesting. I'm asking, if bandwidth is an issue, > > why not use a smaller encoding. And, why not integrate with CoAP > > Observe? > > draft-birkholz-yang-core-telemetry-01 [now expired] for instance tries to do a lot of the matching. I think that the adaptive rate subscription that you've created would work very well within that model. > [Qin]: Well, I will investigate this and see what is missing there. > I guess yang-core-telemetry-01 needs to update itself as ietf-netconf-subscribed-notifications is published as RFC 8639 right. > [Qin]: Agree. > I still don't know how XPath would work with COMI, but really I'm just sitting around the edges of the YANG over the wire space. > [Qin]: Good question, note that XPATH used for NETCONF follows XPath 1.0 [W3C.REC-xpath-19991116] and XPath 2.0 > See RFC6241 section 8.9 and RFC7950 section 6.4. > -- > Michael Richardson . o O ( IPv6 IøT consulting ) > Sandelman Software Works Inc, Ottawa and Worldwide > > > > > _______________________________________________ > netconf mailing list > netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf > From nobody Mon Jun 28 12:36:28 2021 Return-Path: <0100017a541f6369-d0b46402-b0f2-43b3-8354-14af12c213f8-000000@amazonses.watsen.net> X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 449FC3A0BAA for ; Mon, 28 Jun 2021 12:36:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZuBiXBud8t1H for ; Mon, 28 Jun 2021 12:36:22 -0700 (PDT) Received: from a8-83.smtp-out.amazonses.com (a8-83.smtp-out.amazonses.com [54.240.8.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A28C63A0B9E for ; Mon, 28 Jun 2021 12:36:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1624908981; h=Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc:Content-Transfer-Encoding:Message-Id:References:To:Feedback-ID; bh=ucrRSj2k0FgnzJGFKMvi4YCwyzq+5rVILEK4VFaaRWc=; b=K0CgvcFLGcNfrbXKH5NLV+LteGAdyFIWTwdjK1+dvZd3L73OeJuzcjwYLriTuEGf 83bwqp/9fpTx6pLd42cAnL8syXZUc/8liNODutlbsVHt6IVWYfHu4tPKhO6bjCvo595 rhS1wXcQDxiT+V3qxxR+7qRFV1Exoz65mUrplOeU= Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.100.0.2.22\)) From: Kent Watsen In-Reply-To: Date: Mon, 28 Jun 2021 19:36:21 +0000 Cc: "netconf@ietf.org" Content-Transfer-Encoding: quoted-printable Message-ID: <0100017a541f6369-d0b46402-b0f2-43b3-8354-14af12c213f8-000000@email.amazonses.com> References: <0100017a203b3fbe-94e25349-4cf7-4b3a-b726-9d837f4c0841-000000@email.amazonses.com> To: tom petch X-Mailer: Apple Mail (2.3654.100.0.2.22) Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES X-SES-Outgoing: 2021.06.28-54.240.8.83 Archived-At: Subject: Re: [netconf] X.690 refs X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Jun 2021 19:36:27 -0000 Hi Tom, > More a comment for crypto-types or keystore but I have not seen an = e-mail about those lately. I only found X.690 refs in the "crypto-types" and "sztp-csr=E2=80=9D = drafts. Regardless... > I see, courtesy of the RFC Editor, that X.690 has been updated to a = 2021 version (which the RFC Editor would like to use). >=20 > Any one know what the differences are? I looked at the 2021 version here (https://www.itu.int/rec/T-REC-X.690), = but it doesn=E2=80=99t contain a =E2=80=9Cdifference to previous = version=E2=80=9D section. I did find this = (https://www.itu.int/en/ITU-T/asn1/Pages/Changing-from-ASN-119881990-to-AS= N-12008.aspx), but it only covers the 1990 =E2=80=94> 2015 update. > Assuming we know those, should we use it as a reference? Sometimes = the new-fangled version of another SDO's work is not right for the IETF = and we stay with the previous versions. Firstly, we don=E2=80=99t know the changes=E2=80=A6at least I don=E2=80=99= t yet. Second, I don=E2=80=99t believe the world of libraries and tools are = going to flip overnight. All the schema and compilers use the 2015 = and, in some cases, I wouldn=E2=80=99t be surprised is the 1990 version = was used. For instance, note that RFC 5280 was published in 2008! My thoughts are to stay with 2015, at least until someone (ITU?) can = provide a reasonable diff=E2=80=A6 PS: X.680 was also just updated (https://www.itu.int/rec/T-REC-X.680) > Tom Petch K. From nobody Mon Jun 28 12:36:42 2021 Return-Path: <0100017a541f840f-85559421-e84c-4bdf-8e3e-89299c35b756-000000@amazonses.watsen.net> X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 916BF3A0BC1; Mon, 28 Jun 2021 12:36:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m2r6wjBlj1qC; Mon, 28 Jun 2021 12:36:31 -0700 (PDT) Received: from a48-95.smtp-out.amazonses.com (a48-95.smtp-out.amazonses.com [54.240.48.95]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D07AD3A0BEF; Mon, 28 Jun 2021 12:36:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1624908989; h=Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc:Content-Transfer-Encoding:Message-Id:References:To:Feedback-ID; bh=7KWAMACXAV0ksWXJ5TbVv+Kakjgq1dN9f8Jyd8w3vk4=; b=HfMp1AqC9Np5oalb5HqbmHLnKrdBKzXopUQfGpfUGMUQy3yl+IYaXNaIb6161Rc6 eSTGB7Uf0h2O6+/0ghQAUpwVgENx5SG8dXji7YIyJ4RUvRBmMoVqnF+cEleMQ1GKp4p TTxM1bHZpIgWs3BxeoZAWxq3Cy8ffbP31PsGFRQU= Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.100.0.2.22\)) From: Kent Watsen In-Reply-To: Date: Mon, 28 Jun 2021 19:36:29 +0000 Cc: "netconf@ietf.org" , "draft-ietf-netconf-sztp-csr@ietf.org" , "netconf-chairs@ietf.org" Content-Transfer-Encoding: quoted-printable Message-ID: <0100017a541f840f-85559421-e84c-4bdf-8e3e-89299c35b756-000000@email.amazonses.com> References: <0100017a2f082e6a-1197e3c8-f8be-4d59-ba1c-8d39029a31fc-000000@email.amazonses.com> <0100017a3ea111a8-680c5610-bc55-4a82-b7fd-7715656f4924-000000@email.amazonses.com> <0100017a3fcc223f-c6d25440-0346-4b41-9fa4-fad32b3e3b75-000000@email.amazonses.com> To: "Rob Wilton (rwilton)" X-Mailer: Apple Mail (2.3654.100.0.2.22) Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES X-SES-Outgoing: 2021.06.28-54.240.48.95 Archived-At: Subject: Re: [netconf] AD review of draft-ietf-netconf-sztp-csr X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Jun 2021 19:36:40 -0000 Hi Rob, > Hi Kent, >=20 > Thanks for the extra details/explanation. Please see inline =E2=80=A6 =20 > I hadn=E2=80=99t picked up on that nuance, and I agree that this makes = an out of band approach less efficient and less helpful. No problem. =20 > Not necessary. I=E2=80=99m happy with your explanation as to why = having it inband pragmatically makes more sense. Okay. =20 > I still think we should put =E2=80=9Ccsr-support=E2=80=9D and = =E2=80=9Ccsr=E2=80=9D under a "choice=E2=80=9D though, as the use-case = for sending both at the same time is very small and it seems wrong to = encourage/suggest it=E2=80=99s a good idea or to ask servers to have to = support the case. >=20 > =20 >=20 > Agreed. Update made the to my local copy. =20 > My understanding is more along these lines: > I suspect that most RFCs today, handle the split between (1) and (2) = in an adhoc way, by having the introduction describe briefly reference = the docs that fit into (1). Agreed, but it is not for now ;) I just move RFC 3688 to Normative (RFC 6020 was already Normative) > PS: there=E2=80=99s a separate email thread (Reuse of SZTP-CSR YANG = definition in BRSKI-AE) regarding this document that is pending your = feedback. Ideally I can collect that and thus apply all updates in one = shot. >=20 > Sorry, I had missed this thread. I=E2=80=99ve now replied. I=E2=80=99ll post an update with both sets of changes.=20 In the meanwhile, here's the Git commit: = https://github.com/netconf-wg/sztp-csr/commit/1bb76e45163ec6a9d06657dcf689= 798e4409c712 > Thanks, > Rob >=20 Cheers, Kent From nobody Mon Jun 28 14:19:58 2021 Return-Path: <0100017a547e23f8-17cab5d4-cef3-4ab6-85c9-1b979b2a5810-000000@amazonses.watsen.net> X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9C1FE3A128C for ; Mon, 28 Jun 2021 14:19:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8QWSyGliYV93 for ; Mon, 28 Jun 2021 14:19:52 -0700 (PDT) Received: from a8-88.smtp-out.amazonses.com (a8-88.smtp-out.amazonses.com [54.240.8.88]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 447613A128B for ; Mon, 28 Jun 2021 14:19:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1624915190; h=From:Content-Type:Content-Transfer-Encoding:Mime-Version:Subject:Message-Id:Date:To:Feedback-ID; bh=fH5MetpnucY2xvScL+qmDPIAJ9qTUs9GZdTY8n9nDX0=; b=grysI44kbcSX9T9aWFQufZLQ6sIKgCVJuVe+tJ++PxX0ceiWjpHc1KctAvfZSY6t OsT5KQ80hr7xIlYYb6v2albcziG0W9WgVg+IHsNFyEtcTB9DH719xQX2Z4H9XnQiRNk ZCCz5wogfZkbJqxHzBxILYWCgcTiEAkUGfcGJw2A= From: Kent Watsen Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.100.0.2.22\)) Message-ID: <0100017a547e23f8-17cab5d4-cef3-4ab6-85c9-1b979b2a5810-000000@email.amazonses.com> Date: Mon, 28 Jun 2021 21:19:50 +0000 To: "netconf@ietf.org" X-Mailer: Apple Mail (2.3654.100.0.2.22) Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES X-SES-Outgoing: 2021.06.28-54.240.8.88 Archived-At: Subject: [netconf] IETF 111 Slot Requests X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Jun 2021 21:19:57 -0000 WG, The *draft* agenda for IETF 111 has been posted - = https://datatracker.ietf.org/meeting/111/agenda WEDNESDAY, July 28, 2021 (Session II) PDT: Wednesday, 14:30 -15:30 PDT EDT: Wednesday, 17:30 -18:30 EDT UTC: Wednesday, 21:30 +22:30 UTC iCalendar: https://datatracker.ietf.org/meeting/111/sessions/netconf.ics This will be fully remote meeting. Our plan to cover updates, open = issues, and new topics. Please send slot requests to netconf-chairs@ietf.org before the end of = the day Sunday, July 11 (any TZ). Please include draft names(s), = presenter, desired slot length. Also, please let us know if you think = the topic would be better covered in a Virtual Interim to be held at a = future date. Please keep in mind that priority for agenda time is given = to WG drafts and other drafts/topics discussed on the mailing list. Thank you ! Kent and Mahesh Important dates: IETF 111: 2021-07-24, Online, US 2021-06-30 (Wednesday): Cut-off date for requests to reschedule Working = Group or BOF meetings UTC 23:59. 2021-07-02 (Friday): Final agenda to be published. 2021-07-12 (Monday): Standard rate registration and payment cut-off at = UTC 23:59.. 2021-07-12 (Monday): Internet Draft submission cut-off (for all drafts, = including -00) by UTC 23:59.=20 2021-07-14 (Wednesday): Draft Working Group agendas due by UTC 23:59.=20 2021-07-19 (Monday): Revised Working Group agendas due by UTC 23:59.=20 2021-07-19 (Monday): Registration cancellation cut-off at UTC 23:59. From nobody Mon Jun 28 15:41:28 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A897F3A1974 for ; Mon, 28 Jun 2021 15:41:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.087 X-Spam-Level: X-Spam-Status: No, score=-2.087 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_MIME_MALF=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jWpkw_lyRkcG for ; Mon, 28 Jun 2021 15:41:22 -0700 (PDT) Received: from mail-pj1-x102b.google.com (mail-pj1-x102b.google.com [IPv6:2607:f8b0:4864:20::102b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4DA173A1970 for ; Mon, 28 Jun 2021 15:41:22 -0700 (PDT) Received: by mail-pj1-x102b.google.com with SMTP id x21-20020a17090aa395b029016e25313bfcso1112551pjp.2 for ; Mon, 28 Jun 2021 15:41:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=gbj8wyrXUO8WvZyjSOvmJbaHmrE6WgjTShqkUU7Sm4w=; b=e9q0xZQm6/sGu7+gOZGqsWniwB4kBqx8gyplwhsOym5XUNOZCtXIngdO2a/eFLCuF4 CqpgVvcCl/VTyu2j9V3H0gkrJUDynsp7Ev+k77rwE3/89Knv7h2fRChRecqvsklu+AOG 9PzL8d3MAtnlBac4zCbPDl8ajftfT+pO8YYpBNJl/dkqvp6zvB14lfUHmrphXQSAjjQ+ 0Xc+CJ8NO+IjCOYPkT/XKBRkoo5NsILaoZFDz1pzdA8vL8w1LTzZJjbIV83r1B+08XNt 0wXILbi3ayEFGWvukJSr0WchzCxhUKrQsF1n9Lf7rYjOonpt7JEp22fa29epqerEaw5E N4eg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=gbj8wyrXUO8WvZyjSOvmJbaHmrE6WgjTShqkUU7Sm4w=; b=AAxpsgC17K5qZBXUeSapLbO/ntGMS2UDiQkn3tG7tQHq1uYjV46H1TOGOb0YYhu4Yn 3uc5C8nfcW3aS62d8cCkZD7FJXI0kcziVS/hZaM8MWor38t/gARdwIieNZvIcpqf2tFv +zj+uol4Oxf3st0BjX4SH9y4vrHKvDTHtavai/BzvE5kCx5lws0gV9j5QaTawypijMaj azo1PqkJKRLIJ0Ju0bMDndHt//wTc7qEVJ9G8d3Nh3qQojcGOzccUbM5B4lq+keZ72WU 6E/UZOYzppgoXc/2+mZf6fvCmeTJXO5H39zctV157lS98Vsvq+QrrSEjY3epRGhSnx5Q d8kg== X-Gm-Message-State: AOAM530oz4W3VQUo+u8QobPoSI310H/lFItgB6RdPXRBNvs/PgznLH5u 9kHVyHsBxEO4dSNs9GjEBqE= X-Google-Smtp-Source: ABdhPJxFTlP/VqgM6d9n2OFYSXLXnuTG7RJs4s91tCueBkZcdH/cjiLjVSAV9JwFFsJpIf2pmeURzA== X-Received: by 2002:a17:90a:974c:: with SMTP id i12mr1357174pjw.158.1624920080898; Mon, 28 Jun 2021 15:41:20 -0700 (PDT) Received: from [192.168.1.135] (c-73-93-49-153.hsd1.ca.comcast.net. [73.93.49.153]) by smtp.gmail.com with ESMTPSA id x23sm8286314pfr.14.2021.06.28.15.41.19 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Mon, 28 Jun 2021 15:41:20 -0700 (PDT) From: Mahesh Jethanandani Message-Id: <741DCE37-211F-4AA0-B023-D1D551D93E13@gmail.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_393A3D1C-3113-41AE-BD62-4D92D082336B" Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.7\)) Date: Mon, 28 Jun 2021 15:41:18 -0700 In-Reply-To: <7527caa444da49d5bce2608512c668df@huawei.com> Cc: Kent Watsen , "maqiufang (A)" , Zmail , "netconf@ietf.org" To: Qin Wu References: <7527caa444da49d5bce2608512c668df@huawei.com> X-Mailer: Apple Mail (2.3608.120.23.2.7) Archived-At: Subject: Re: [netconf] Capability-fetching mechanisms X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Jun 2021 22:41:27 -0000 --Apple-Mail=_393A3D1C-3113-41AE-BD62-4D92D082336B Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi Qin, Thank you for sharing an example. We now understand better what was = intended. After discussing some, three things come to mind. 1) We do not have a particular requirement for an off-line format, and = find it an unnecessary overhead of having to wrap the data with = yang-instance-data. 2) There seems to be an implication of the receiver being a NETCONF = server, something that we made an effort to avoid in the first place.=20 3) The data export capabilities other leafs that we do not care about. = How do we restrict the response to data that is pertinent to our = transport draft? In the example you shared, we see capabilities for = udp-notif being returned in addition to http-notif. For these reasons, we feel the that the value proposition is limited, = while increasing complexity. Mahesh & Kent > On Jun 15, 2021, at 5:27 AM, Qin Wu wrote: >=20 > [Qin Wu] Here is the example: > The publisher can send the following request to learn the receiver > capabilities. > =20 > GET HTTP 1.1 = /some/path/capabilities/acme-receiver-capabilities.json > Host: example.com > Accept: application/xml, application/json > If the receiver is unable to reply using "application/xml",=20 > the response might look like this: > HTTP/1.1 200 OK > Date: Wed, 26 Feb 2020 20:33:30 GMT > Server: example-server > Cache-Control: no-cache > Content-Type: application/json > Content-Length: nnn > =20 > { > "ietf-yang-instance-data:instance-data-set": { > "name": "acme-receiver-capabilities", > "content-schema": { > "module": "ietf-data-export-capabilities" > }, > "timestamp": "2018-01-25T17:00:38Z", > "description": [ > "Receiver capability" > ], > "content-data": { > "system-capabilities": { > "ietf-data-export-capabilities:data-export-capabilities": [ > { > "transport-protocol": "http-notif", > "encoding-format": [ > "json", > "xml", > "rfc8639-enabled" > ] > }, > { > "transport-protocol": "udp-notif", > "encoding-format": [ > "binary" > ] > } > ] > } > } > } > } --Apple-Mail=_393A3D1C-3113-41AE-BD62-4D92D082336B Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hi = Qin,

Thank you for = sharing an example. We now understand better what was intended. After = discussing some, three things come to mind.

1) We do not = have a particular requirement for an off-line format, and find it an = unnecessary overhead of having to wrap the data with = yang-instance-data.

2) There seems to be an implication of the receiver being a = NETCONF server, something that we made an effort to avoid in the first = place. 

3) The data export capabilities other leafs that we do not = care about. How do we restrict the response to data that is pertinent to = our transport draft? In the example you shared, we see capabilities for = udp-notif being returned in addition to http-notif.

For these = reasons, we feel the that the value proposition is limited, while = increasing complexity.

Mahesh & Kent



On Jun 15, 2021, at 5:27 AM, = Qin Wu <bill.wu@huawei.com> wrote:

[Qin Wu] Here is the = example:
   The publisher can send the following request to = learn the receiver
   capabilities.
 
   GET HTTP 1.1 = /some/path/capabilities/acme-receiver-capabilities.json
   Host: example.com
   = Accept: application/xml, application/json
   If the receiver is unable to reply using =
"application/xml", 
the response might look =
like this:
   HTTP/1.1 200 OK
   Date: Wed, 26 Feb 2020 20:33:30 GMT
   Server: example-server
   Cache-Control: no-cache
   Content-Type: application/json
   Content-Length: nnn
 
   {
     =
"ietf-yang-instance-data:instance-data-set": {
       "name": =
"acme-receiver-capabilities",
       =
"content-schema": {
         "module": =
"ietf-data-export-capabilities"
       = },
       "timestamp": =
"2018-01-25T17:00:38Z",
       =
"description": [
         "Receiver =
capability"
       ],
       "content-data": {
         =
"system-capabilities": {
           =
"ietf-data-export-capabilities:data-export-capabilities": [
          &nb=
sp;  {
          &nb=
sp;    "transport-protocol": "http-notif",
          &nb=
sp;    "encoding-format": [
          &nb=
sp;      "json",
          &nb=
sp;      "xml",
          &nb=
sp;      "rfc8639-enabled"
          &nb=
sp;    ]
          &nb=
sp;  },
          &nb=
sp;  {
          &nb=
sp;    "transport-protocol": "udp-notif",
          &nb=
sp;    "encoding-format": [
          &nb=
sp;      "binary"
          &nb=
sp;    ]
          &nb=
sp;  }
           =
]
         }
       }
     }
}


= --Apple-Mail=_393A3D1C-3113-41AE-BD62-4D92D082336B-- From nobody Mon Jun 28 16:43:43 2021 Return-Path: <0100017a5501b507-02588bdb-c4c4-430f-9b53-39eefdfffe8b-000000@amazonses.watsen.net> X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2574C3A1BCA for ; Mon, 28 Jun 2021 16:43:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.894 X-Spam-Level: X-Spam-Status: No, score=-1.894 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CJy9i9GoSuuj for ; Mon, 28 Jun 2021 16:43:35 -0700 (PDT) Received: from a8-88.smtp-out.amazonses.com (a8-88.smtp-out.amazonses.com [54.240.8.88]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BADDD3A1BC7 for ; Mon, 28 Jun 2021 16:43:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1624923813; h=From:Message-Id:Content-Type:Mime-Version:Subject:Date:In-Reply-To:Cc:To:References:Feedback-ID; bh=zw+zVHXTctvr3Bidz7clxVdJeY5BUK72YgeHmhjApKg=; b=hkd1/lc+t9B8THjkyb1NxwEwSnmWDQW66Z5qIl1JerhhJPcR7g8ynWQqSPha2Hfc VzEJWDZjwzxwaoUM6nfB4fHwuCb2gKPeuHhNp4+kgasNg3l9CFCdiipHPbHVjX2ozEu BxKK7Nu4JMQ1igXKpr9WgcWqzL5/pfFLrQzweCQ4= From: Kent Watsen Message-ID: <0100017a5501b507-02588bdb-c4c4-430f-9b53-39eefdfffe8b-000000@email.amazonses.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_D40330D6-1357-4B6B-8CB0-52629179A997" Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.100.0.2.22\)) Date: Mon, 28 Jun 2021 23:43:33 +0000 In-Reply-To: <38c3aa805f1846d0ad0e5ac67a82cfa1@huawei.com> Cc: "netconf@ietf.org" To: "maqiufang (A)" References: <38c3aa805f1846d0ad0e5ac67a82cfa1@huawei.com> X-Mailer: Apple Mail (2.3654.100.0.2.22) Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES X-SES-Outgoing: 2021.06.28-54.240.8.88 Archived-At: Subject: Re: [netconf] system configuration sync mechanism X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Jun 2021 23:43:41 -0000 --Apple-Mail=_D40330D6-1357-4B6B-8CB0-52629179A997 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi Qiufang, I just read your draft and have a few comments: 1) I wish there were more examples, especially for = "resource-independent=E2=80=9D configuration. I understand well enough = "resource-dependent" (dynamic) configuration, but am unclear about what = all "resource-independent=E2=80=9D entails. By example, JUNOS has a = concept called =E2=80=9CJUNOS defaults=E2=80=9D, which is effectively = read-only and hidden-by-default configuration that, most times, must be = referenced in order to take effect. For instance, check the examples = halfway down this page: = https://nextheader.net/2016/06/10/junos-defaults-group. Is this similar = to what you have in mind? 2) Please treat NETCONF and RESTCONF equally. Currently the draft = speaks only to how it impacts NETCONF, but it should equally show how = RESTCONF in impacted. 3) The =E2=80=9Cbasic mode=E2=80=9D term sounds too close to the = =E2=80=9Cwith-defaults=E2=80=9D basic modes...can we please pick another = name (e.g., system-datastore-operating-mode)? =20 Regarding your question below I don=E2=80=99t feel ready to comment on = it yet. I do understand the JUNOS model and, if it is compatible, would = recommend considering, as it is implemented and seems to be working well = enough. That said, it might be the case that every vendor has defined = their own way and each needs to be documented in turn... K. // contributor > On Jun 22, 2021, at 11:43 PM, maqiufang (A) = wrote: >=20 > Dear all,=20 > One of the open issues of draft = https://datatracker.ietf.org/doc/html/draft-ma-netconf-with-system-02 = = is about how to synchronize the system configuration into . > I think we could have 2 options. > Option 1: Any update in will be synced up into = automatically > PRO: > o effective for the client: there is no need for the client to = retrieve the referenced system configuration from and then = copy it into manually. > CON:=20 > o implementation complexity=20 > =20 > Option 2: To define a RPC operation to propagate with = > PRO: > o client-driven: it totally depends on the client when and how = to populate . > CON: > o The client needs to : > o spend energy to detect the update and operate the RPC = every time the client references the system configuration or the system = configuration is in the when/must statement. > o subscribe the update and copy it into whenever = an update is detected. > =20 > I incline to the view that this issue involves some kind of trade-off, = which is hard to distinguish the preference. > Maybe both options can be reserved and differentiated by different = modes, so that the server implementer may choose from. > Any thoughts? > =20 > =20 > Best Regards, > Qiufang Ma > _______________________________________________ > netconf mailing list > netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf = --Apple-Mail=_D40330D6-1357-4B6B-8CB0-52629179A997 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hi Qiufang,

I just read your draft and have a few = comments:


1) I wish there were = more examples, especially for "resource-independent=E2=80=9D configuration. =  I = understand well enough "resource-dependent" (dynamic) = configuration, but am unclear about what all "resource-independent=E2=80=9D entails. =  By = example, JUNOS has a concept called =E2=80=9CJUNOS defaults=E2=80=9D,= which is effectively read-only and hidden-by-default = configuration that, most times, must be referenced in order to take = effect.   For instance, check the examples halfway down this = page: https://nextheader.net/2016/06/10/junos-defaults-group. =  Is this similar to what you have in mind?

2) Please treat NETCONF and = RESTCONF equally.  Currently the draft speaks only to how it = impacts NETCONF, but it should equally show how RESTCONF = in impacted.

3) = The =E2=80=9Cbasic mode=E2=80=9D term sounds too close to = the =E2=80=9Cwith-defaults=E2=80=9D basic modes...can we please = pick another name (e.g., system-datastore-operating-mode)? =  

Regarding your question below I don=E2=80=99t feel ready to = comment on it yet.  I do understand the JUNOS model and, if it = is compatible, would recommend considering, as it is = implemented and seems to be working well enough.  That said, it = might be the case that every vendor has defined their own way and = each needs to be documented in = turn...

K. =  // contributor


On Jun 22, 2021, at 11:43 PM, maqiufang (A) = <maqiufang1@huawei.com> wrote:

Dear all, 
One of = the open issues of draft https://datatracker.ietf.org/doc/html/draft-ma-netconf-with-sys= tem-02 is about = how to synchronize the system configuration into <running>.
I think = we could have 2 options.
Option 1: Any update in <system> will be synced up into = <running> automatically
  PRO:
       o  effective for the =
client: there is no need for the client to retrieve the referenced =
system configuration from <operational> and then copy it into =
<running> manually.
  CON: 
          &nb= sp; o   implementation complexity 
    
Option 2: To define a RPC operation to = propagate <running> with <system>
  = PRO:
  =      o  client-driven: it totally depends = on the client when and how to populate <running>.
  = CON:
  =      o  The client needs to :
o   spend = energy to detect the <system> update and operate the RPC every = time the client references the system configuration or the system = configuration is in the when/must statement.
o   subscrib= e the <system> update and copy it into <running> whenever an = update is detected.
 
I incline to the view that this issue involves some kind of = trade-off, which is hard to distinguish the preference.
Maybe = both options can be reserved and differentiated by different modes, so = that the server implementer may choose from.
Any = thoughts?
 
 
Best Regards,
Qiufang Ma
_______________________________________________
netconf mailing list
netconf@ietf.org
https://www.ietf.org/mailman/listinfo/netconf

= --Apple-Mail=_D40330D6-1357-4B6B-8CB0-52629179A997-- From nobody Tue Jun 29 01:51:55 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D88323A2BAD for ; Tue, 29 Jun 2021 01:51:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=btconnect.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id We5PHMadzsO5 for ; Tue, 29 Jun 2021 01:51:49 -0700 (PDT) Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-eopbgr60134.outbound.protection.outlook.com [40.107.6.134]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 10F6C3A2BAB for ; Tue, 29 Jun 2021 01:51:48 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Iq8qR4Lp1r+pj3u9ErqAhc2zSVjp/FWaCXA05UDDCFJsd1yFuoLnE5hSKl/4Ttl8LO3VSjWrTS8lFiLGr1n78ViO7gy1Qf+mjZkHLoNIW2aVT2T3Zxxef/rbWZl39Wk0JWDFrFspUJbvAQW7AhzJOF/Uqg9kIrdrQBzmWbq6pr+n9bickU8JLI4Zr4I/OSDcsBCwec8V5cKR0jJ5fTJbbuqCIVECgOhbB88aTa6Fi1unP1pDtxILAgU2sbigSy/7+0GCgyKvOT0OdLPBIU0IcNWGksNlTtGf7ynQuutBk/tShxj1Kcsc4ERVQeKoFQ7EfcKLXKUBvPrRjPt7i8gsrw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=JsjG6HkG5mtriyU7BbZPGt2XI1DjnFW+IILHpmTPaVA=; b=eViztWCyP+Z9SgBZDXFmSlQCIDVcaVKJBqzgSip/hk74UQfQfvBxgNLWK/APkhYebGS4O40bUQ9OhK5/m8+b4sKWnIR9l2GNWss6Fv5jo3YdaLfHsNYSf3TsdVcZVNC5VujjKNKOvzi9d8vuR5mCjv4ymx1S0fBaPi8AeV8NwzTwRcu+9x6PdeHZxMyUhCQFD+oHge/br3rCbPMuyuHjFrEEWxe75+yuDsn0KmBhzlvC/SUioAegUpyyzHf8VgQsiB8UiPkik2KCkC5ZHq62bpNJWDkrmUAFhnw1nY9E8du8OgJICEXi+u3Vg19ymnN8s0hUp5pPFULt8Bq9W4o1wQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=btconnect.com; dmarc=pass action=none header.from=btconnect.com; dkim=pass header.d=btconnect.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btconnect.onmicrosoft.com; s=selector2-btconnect-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=JsjG6HkG5mtriyU7BbZPGt2XI1DjnFW+IILHpmTPaVA=; b=JeiEXvbXwhBsNcYE8cAFB2+MN2cbN89YWjrbmuS0pjucoK8Z1uTWZWD+OPcQI8YFW4SC0glUs9mFMvab238fnfAKqbs9Mxv6J+9yqR+YW71nQyUjuPFRKa8gWq329Gc29gFwHa+hUnNq4Gx1HeiiKgp1QsbdUryLTb9M92r8rRk= Received: from AM7PR07MB6248.eurprd07.prod.outlook.com (2603:10a6:20b:134::11) by AM7PR07MB6868.eurprd07.prod.outlook.com (2603:10a6:20b:1c2::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4264.11; Tue, 29 Jun 2021 08:51:46 +0000 Received: from AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::fc5d:ca7a:e2ea:ca9d]) by AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::fc5d:ca7a:e2ea:ca9d%7]) with mapi id 15.20.4287.021; Tue, 29 Jun 2021 08:51:46 +0000 From: tom petch To: Kent Watsen CC: "netconf@ietf.org" Thread-Topic: X.690 refs Thread-Index: AQHXbFThA6buNiAE2U2xT9Ec7U5XAqsqrnyT Date: Tue, 29 Jun 2021 08:51:46 +0000 Message-ID: References: <0100017a203b3fbe-94e25349-4cf7-4b3a-b726-9d837f4c0841-000000@email.amazonses.com> , <0100017a541f6369-d0b46402-b0f2-43b3-8354-14af12c213f8-000000@email.amazonses.com> In-Reply-To: <0100017a541f6369-d0b46402-b0f2-43b3-8354-14af12c213f8-000000@email.amazonses.com> Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: watsen.net; dkim=none (message not signed) header.d=none;watsen.net; dmarc=none action=none header.from=btconnect.com; x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: d9f08525-693a-4198-7df2-08d93adb2040 x-ms-traffictypediagnostic: AM7PR07MB6868: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM7PR07MB6248.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(376002)(346002)(396003)(39860400002)(136003)(366004)(38100700002)(122000001)(52536014)(2906002)(76116006)(91956017)(71200400001)(7696005)(33656002)(316002)(66476007)(8676002)(66556008)(8936002)(66946007)(186003)(64756008)(6506007)(66446008)(4326008)(478600001)(26005)(5660300002)(86362001)(55016002)(9686003)(83380400001); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?Windows-1252?Q?ffEGMtoGarJpmB+e3sH5D71pYAEa5PYy7dH7XNalFWpsolXGezHw7/O1?= =?Windows-1252?Q?0Zp5ECUEsLPGZMLll9DLGL7TZq+tfBtbmJfAvjMovjr5ag7fyVgwFxrD?= =?Windows-1252?Q?jQJ3XbJ2IaW4ugRf8IAttJ5CjT81l1jpYbCC9hW+pa4ktH+YRFmICAlQ?= =?Windows-1252?Q?qJIJnAzVKSNRMopALpJZ0neAFBfBds/WRoWJsPssqTzXXK+gWlsGr46P?= =?Windows-1252?Q?5sVnXiVOIDON+emn5SprFNXqNWsyZJs6WJOFa0iE05Ad8yAT0u35YCzR?= =?Windows-1252?Q?qjkJc4kwtJn+enW5Hse4zfJqgmJefTt2RHk7pECogh43u/iBwF5rgk52?= =?Windows-1252?Q?5Xp7CmZa0QBeQRc54K7R/vdMklP2jZKdtRom+nTdaM3YdwREkL6+IP0j?= =?Windows-1252?Q?EKuXnf9Xk1ay9Oecf41p/qFqTR207MqiJrcutqOd3nJo2kgD8/ITUQxY?= =?Windows-1252?Q?bYMZOoESWp3a1JiL70u9bTwpvIuriQm8bGwjZyIFNaDEwNU91EqKF6jr?= =?Windows-1252?Q?tJEPM+tyWPc28ZYA6Jf2+9U/AfY7GkgnIf0VgMWtar6sycuc85BXnLjv?= =?Windows-1252?Q?3vYVYQ0de6uLP+UFnNacM4pQzRqHD1kB3WEXk/60q1IsxhGBwnq2VTsh?= =?Windows-1252?Q?AdrFoYzAIe7WoVtVfJQRZUQwK+cOilS5jRNs9+dpvuuTJ0weM/xvK1sx?= =?Windows-1252?Q?0CAJwQxXxvhiHCyYdJCTe9kZMu1ZRMPjkpVln0xvyS8tk/vChMiXHW3A?= =?Windows-1252?Q?xZZw2G7imUEy7GxIfKXY+gH2DwYp45DeMl8/FC9RRI/IhefYnPLy1aUW?= =?Windows-1252?Q?ZivQr+7oBCwQEI8FwZvLYQ1IL5yXssiD0ymyRrqEUg1J0weuzSkWv1ae?= =?Windows-1252?Q?KkJPMbjL9YZgtnqRUxoV4gNbmdXyv8kvPUUCkWCFN+UUvOfaNDxk1aVT?= =?Windows-1252?Q?iJF1mkXAlph6bN+bcZaTqv/wYVz/wjIK87xUUV50XB6Optztafby7Aur?= =?Windows-1252?Q?mYHVx4JbZF1gowyu1jM14/tNFdvIDCJPDzrPHmvvMRULiXeWwttmenuv?= =?Windows-1252?Q?A5Hibz6ErwJvP2bGvIvssEXlbfTvNNcLm2mZPJk+pjQ7c/Q0dwpViz2w?= =?Windows-1252?Q?4H5v84VURrU+rJg/5MwRGpr2jRzEiUVlkfvgerd+FD22HAWZ8OyColyo?= =?Windows-1252?Q?v3eJZj7qT75VyDu+MxquZDMaX1K4QJke+QH50LuoBG18gpcAeKnoquxK?= =?Windows-1252?Q?FBwmTeMJnYMBLcs23xeKT5OybcXTnw0s1LKQXspmLZGSWlm49yCz+DI4?= =?Windows-1252?Q?dlqqAdDoH9bU/eEr+ctRpoowomQ2hEe+JU1xaBe/W/kXdUZz++ENGaFr?= =?Windows-1252?Q?/wy8tQrL7va0qMK6MrMTDUdqsz1OemDJgzXmKhFxa1Vi+ecAzhUPzmSx?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: btconnect.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AM7PR07MB6248.eurprd07.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: d9f08525-693a-4198-7df2-08d93adb2040 X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Jun 2021 08:51:46.2334 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: cf8853ed-96e5-465b-9185-806bfe185e30 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: N9uhBdAmj5WkgoPwC2NnqkSHDa1lzMpvD4QeyiQkznKC8m64Z1Xvnubli33AycUPuRBeANjaRahWi/JYjM5I1Q== X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM7PR07MB6868 Archived-At: Subject: Re: [netconf] X.690 refs X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Jun 2021 08:51:54 -0000 From: Kent Watsen =0A= Sent: 28 June 2021 20:36=0A= =0A= Hi Tom,=0A= =0A= > More a comment for crypto-types or keystore but I have not seen an e-mail= about those lately.=0A= =0A= I only found X.690 refs in the "crypto-types" and "sztp-csr=94 drafts. Reg= ardless...=0A= =0A= > I see, courtesy of the RFC Editor, that X.690 has been updated to a 2021 = version (which the RFC Editor would like to use).=0A= >=0A= > Any one know what the differences are?=0A= =0A= I looked at the 2021 version here (https://www.itu.int/rec/T-REC-X.690), bu= t it doesn=92t contain a =93difference to previous version=94 section.=0A= =0A= I did find this (https://www.itu.int/en/ITU-T/asn1/Pages/Changing-from-ASN-= 119881990-to-ASN-12008.aspx), but it only covers the 1990 =97> 2015 update.= =0A= =0A= > Assuming we know those, should we use it as a reference? Sometimes the = new-fangled version of another SDO's work is not right for the IETF and we = stay with the previous versions.=0A= =0A= Firstly, we don=92t know the changes=85at least I don=92t yet.=0A= =0A= Second, I don=92t believe the world of libraries and tools are going to fli= p overnight. All the schema and compilers use the 2015 and, in some cases= , I wouldn=92t be surprised is the 1990 version was used. For instance, no= te that RFC 5280 was published in 2008!=0A= =0A= My thoughts are to stay with 2015, at least until someone (ITU?) can provid= e a reasonable diff=85=0A= =0A= PS: X.680 was also just updated (https://www.itu.int/rec/T-REC-X.680)=0A= =0A= =0A= Kent =0A= =0A= Thanks for that. As I said, it was the RFC Editor which was proposing the = updated version to the authors of an I-D so you may get a similar proposal= in due course (by which time, we may know more about it).=0A= =0A= Tom Petch=0A= =0A= > Tom Petch=0A= =0A= K.=0A= =0A= =0A= =0A= From nobody Tue Jun 29 04:18:27 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3A5133A3070 for ; Tue, 29 Jun 2021 04:18:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1CQy4BXZjb6n for ; Tue, 29 Jun 2021 04:18:21 -0700 (PDT) Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 27FFB3A306D for ; Tue, 29 Jun 2021 04:18:21 -0700 (PDT) Received: from fraeml708-chm.china.huawei.com (unknown [172.18.147.206]) by frasgout.his.huawei.com (SkyGuard) with ESMTP id 4GDhSf27Srz6L4s2 for ; Tue, 29 Jun 2021 19:04:34 +0800 (CST) Received: from dggeme719-chm.china.huawei.com (10.1.199.115) by fraeml708-chm.china.huawei.com (10.206.15.36) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.1.2176.2; Tue, 29 Jun 2021 13:18:17 +0200 Received: from dggeme770-chm.china.huawei.com (10.3.19.116) by dggeme719-chm.china.huawei.com (10.1.199.115) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.2176.2; Tue, 29 Jun 2021 19:18:15 +0800 Received: from dggeme770-chm.china.huawei.com ([10.8.68.58]) by dggeme770-chm.china.huawei.com ([10.8.68.58]) with mapi id 15.01.2176.012; Tue, 29 Jun 2021 19:18:15 +0800 From: "maqiufang (A)" To: "kent@watsen.net" CC: "netconf@ietf.org" Thread-Topic: [netconf] system configuration sync mechanism Thread-Index: Addn4K+zt1m84GV6QrqhDxVqt12upwEU6oGAAB6TrRA= Date: Tue, 29 Jun 2021 11:18:15 +0000 Message-ID: <765757acb49741f7a64013b5525cdbb4@huawei.com> References: <38c3aa805f1846d0ad0e5ac67a82cfa1@huawei.com> <0100017a5501b507-02588bdb-c4c4-430f-9b53-39eefdfffe8b-000000@email.amazonses.com> In-Reply-To: <0100017a5501b507-02588bdb-c4c4-430f-9b53-39eefdfffe8b-000000@email.amazonses.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.136.123.93] Content-Type: multipart/alternative; boundary="_000_765757acb49741f7a64013b5525cdbb4huaweicom_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [netconf] system configuration sync mechanism X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Jun 2021 11:18:26 -0000 --_000_765757acb49741f7a64013b5525cdbb4huaweicom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksIEtlbnQ6DQpUaGFua3MgZm9yIGtpY2tpbmcgb2ZmIHNvbWUgZGlzY3Vzc2lvbiBhcm91bmQg dGhpcyBkcmFmdC4gUGxlYXNlIHNlZSBteSByZXBseSBpbmxpbmUuDQoNCkZyb206IEtlbnQgV2F0 c2VuIFttYWlsdG86a2VudEB3YXRzZW4ubmV0XQ0KU2VudDogVHVlc2RheSwgSnVuZSAyOSwgMjAy MSA3OjQ0IEFNDQpUbzogbWFxaXVmYW5nIChBKSA8bWFxaXVmYW5nMUBodWF3ZWkuY29tPg0KQ2M6 IG5ldGNvbmZAaWV0Zi5vcmcNClN1YmplY3Q6IFJlOiBbbmV0Y29uZl0gc3lzdGVtIGNvbmZpZ3Vy YXRpb24gc3luYyBtZWNoYW5pc20NCg0KSGkgUWl1ZmFuZywNCg0KDQpJIGp1c3QgcmVhZCB5b3Vy IGRyYWZ0IGFuZCBoYXZlIGEgZmV3IGNvbW1lbnRzOg0KDQoNCg0KDQoxKSBJIHdpc2ggdGhlcmUg d2VyZSBtb3JlIGV4YW1wbGVzLCBlc3BlY2lhbGx5IGZvciAicmVzb3VyY2UtaW5kZXBlbmRlbnTi gJ0gY29uZmlndXJhdGlvbi4gIEkgdW5kZXJzdGFuZCB3ZWxsIGVub3VnaCAicmVzb3VyY2UtZGVw ZW5kZW50IiAoZHluYW1pYykgY29uZmlndXJhdGlvbiwgYnV0IGFtIHVuY2xlYXIgYWJvdXQgd2hh dCBhbGwgInJlc291cmNlLWluZGVwZW5kZW504oCdIGVudGFpbHMuICBCeSBleGFtcGxlLCBKVU5P UyBoYXMgYSBjb25jZXB0IGNhbGxlZCDigJxKVU5PUyBkZWZhdWx0c+KAnSwgd2hpY2ggaXMgZWZm ZWN0aXZlbHkgcmVhZC1vbmx5IGFuZCBoaWRkZW4tYnktZGVmYXVsdCBjb25maWd1cmF0aW9uIHRo YXQsIG1vc3QgdGltZXMsIG11c3QgYmUgcmVmZXJlbmNlZCBpbiBvcmRlciB0byB0YWtlIGVmZmVj dC4gICBGb3IgaW5zdGFuY2UsIGNoZWNrIHRoZSBleGFtcGxlcyBoYWxmd2F5IGRvd24gdGhpcyBw YWdlOiBodHRwczovL25leHRoZWFkZXIubmV0LzIwMTYvMDYvMTAvanVub3MtZGVmYXVsdHMtZ3Jv dXAuICBJcyB0aGlzIHNpbWlsYXIgdG8gd2hhdCB5b3UgaGF2ZSBpbiBtaW5kPw0KW1FpdWZhbmcg TWFdICBZZXMuIFBoeXNpY2FsLXJlc291cmNlLWluZGVwZW5kZW50IHN5c3RlbSBjb25maWd1cmF0 aW9uIGlzIGdlbmVyYXRlZCB3aGVuIHRoZSBkZXZpY2UgaXMgcG93ZXJlZCBvbiBhbmQgaGFzIG5v dGhpbmcgdG8gZG8gd2l0aCB0aGUgcGh5c2ljYWwgcmVzb3VyY2UuIExvb3BiYWNrIGludGVyZmFj ZSBtYXkgYmUgdGhlIG1vc3QgY29tbW9uIHBoeXNpY2FsLXJlc291cmNlLWluZGVwZW5kZW50IHN5 c3RlbSBjb25maWd1cmF0aW9uLiBUbyBteSBrbm93bGVkZ2UsIG1hbnkgdmVuZG9ycyAoKGUuZy4s IEh1YXdlaSBORTQwRSBhbmQgQ2lzY28gSU9TIFhSKSB3aWxsIHByb3ZpZGUgc2V2ZXJhbCBwcmVk ZWZpbmVkIHVzZXIgZ3JvdXBzIGFuZC9vciB0YXNrIGdyb3VwcyB3aGljaCBhcmUgdXNlZCBmb3Ig YXV0aGVudGljYXRpb24sIGF1dGhvcml6YXRpb24gYW5kIGFjY291bnRpbmcgKEFBQSkgc2Vydmlj ZXMuIFNpbmNlIHRoZXNlIGNvbmZpZ3VyYXRpb25zIGFyZSBwcm92aWRlZCBieSB0aGUgZGV2aWNl L3N5c3RlbSwgdGhleSBjb3VsZCAgYmUgdHJlYXRlZCBhcyBzeXN0ZW0gY29uZmlndXJhdGlvbi4g SSB0aGluayB5b3VyICBpbmZvcm1hdGlvbiBhYm91dCB0aGUgcHJlZGVmaW5lZCBoaWRkZW4gY29u ZmlndXJhdGlvbiBncm91cCB3aGljaCBjb250YWlucyBwcmVjb25maWd1cmVkIHZhbHVlcyBzaG91 bGQgYWxzbyBiZSB0cmVhdGVkIHRoZSBzYW1lLg0KTW9yZSBleGFtcGxlcyBhYm91dCBzeXN0ZW0g Y29uZmlndXJhdGlvbnMgd291bGQgYmUgd29ya2VkIG9uIGFuZCBhZGRlZCBpbiAgdGhlIG5leHQg dmVyc2lvbiBvZiB0aGUgZHJhZnQuOikNCjIpIFBsZWFzZSB0cmVhdCBORVRDT05GIGFuZCBSRVNU Q09ORiBlcXVhbGx5LiAgQ3VycmVudGx5IHRoZSBkcmFmdCBzcGVha3Mgb25seSB0byBob3cgaXQg aW1wYWN0cyBORVRDT05GLCBidXQgaXQgc2hvdWxkIGVxdWFsbHkgc2hvdyBob3cgUkVTVENPTkYg aW4gaW1wYWN0ZWQuDQpbUWl1ZmFuZyBNYV0gVGhhbmtzIGZvciBicmluZ2luZyBpdCB0byBteSBh dHRlbnRpb24sIEkgd291bGQgdGFrZSBSRVNUQ09ORiBpbnRvIGNvbnNpZGVyYXRpb24gYW5kIHNl ZSBob3cgdGhlIHByb3Bvc2FsIHdvcmtzIG9uIFJFU1RDT05GLg0KDQoNCjMpIFRoZSDigJxiYXNp YyBtb2Rl4oCdIHRlcm0gc291bmRzIHRvbyBjbG9zZSB0byB0aGUg4oCcd2l0aC1kZWZhdWx0c+KA nSBiYXNpYyBtb2Rlcy4uLmNhbiB3ZSBwbGVhc2UgcGljayBhbm90aGVyIG5hbWUgKGUuZy4sIHN5 c3RlbS1kYXRhc3RvcmUtb3BlcmF0aW5nLW1vZGUpPw0KW1FpdWZhbmcgTWFdIFllcywgYWdyZWUu IEFjdHVhbGx5IHdlIGRvbuKAmXQgcmVhbGx5IHdhbnQgdG8gY2F1c2UgYW55IGNvbmZ1c2lvbiBv ciBtaXN1bmRlcnN0YW5kaW5ncy4gVGhpcyB0ZXJtIGNvbnRyb2xzIHdoZXRoZXIgdGhlIGRldmlj ZSB3aWxsIHVwZGF0ZSA8cnVubmluZz4gd2l0aCBzeXN0ZW0gY29uZmlndXJhdGlvbiBjaGFuZ2Ug b3Igbm90Lg0KWW91ciBwcm9wb3NhbCBsb29rcyBnb29kIHRvIG1lLCBvdGhlciBzdWdnZXN0aW9u cyBhcmUgYWxzbyB3ZWxjb21lIGhlcmUuDQoNClJlZ2FyZGluZyB5b3VyIHF1ZXN0aW9uIGJlbG93 IEkgZG9u4oCZdCBmZWVsIHJlYWR5IHRvIGNvbW1lbnQgb24gaXQgeWV0LiAgSSBkbyB1bmRlcnN0 YW5kIHRoZSBKVU5PUyBtb2RlbCBhbmQsIGlmIGl0IGlzIGNvbXBhdGlibGUsIHdvdWxkIHJlY29t bWVuZCBjb25zaWRlcmluZywgYXMgaXQgaXMgaW1wbGVtZW50ZWQgYW5kIHNlZW1zIHRvIGJlIHdv cmtpbmcgd2VsbCBlbm91Z2guICBUaGF0IHNhaWQsIGl0IG1pZ2h0IGJlIHRoZSBjYXNlIHRoYXQg ZXZlcnkgdmVuZG9yIGhhcyBkZWZpbmVkIHRoZWlyIG93biB3YXkgYW5kIGVhY2ggbmVlZHMgdG8g YmUgZG9jdW1lbnRlZCBpbiB0dXJuLi4uDQpbUWl1ZmFuZyBNYV0gVGhlIGlzc3VlIHdlIHRyeSB0 byByZXNvbHZlIGhlcmUgaXMgdGhhdCBpbiBvcmRlciBmb3Igc3lzdGVtIGNvbmZpZ3VyYXRpb25z IGJlaW5nIHJlZmVyZW5jZWQgb3IgdG8gbWFrZSBzdXJlIGEgc3VjY2Vzc2Z1bCB2YWxpZGF0aW9u IHdoZW4gdGhlIHN5c3RlbSBjb25maWd1cmF0aW9uIGlzIGluIHRoZSB3aGVuL211c3Qgc3RhdGVt ZW50LCB0aGUgc3lzdGVtIGNvbmZpZ3VyYXRpb24gbXVzdCBiZSByZXRyaWV2ZWQgZnJvbSA8b3Bl cmF0aW9uYWw+IGZpcnN0bHkgYW5kIHRoZW4gY29waWVkIGludG8gPHJ1bm5pbmc+IG1hbnVhbGx5 LCB3aGljaCBpcyBjdW1iZXJzb21lLiBJbiB0aGlzIGNhc2UsIHdlIHdvdWxkIGxpa2UgdG8gZGVm aW5lIHNvbWUga2luZCBvZiBtZWNoYW5pc20gdG8gc3luY2hyb25pemUgc3lzdGVtIGNvbmZpZ3Vy YXRpb24gaW50byA8cnVubmluZz4uIEN1cnJlbnRseSB0d28gc3lzdGVtIGNvbmZpZ3VyYXRpb24g ZGF0YSBoYW5kbGluZyBtb2RlcyBhcmUgc3BlY2lmaWVkLiBPbmUgd2lsbCB1cGRhdGUgPHJ1bm5p bmc+IHdpdGggYW55IHN5c3RlbSBjb25maWd1cmF0aW9uIGNoYW5nZSBhdXRvbWF0aWNhbGx5LCBh bmQgdGhlIG90aGVyIHdpbGwgbm90LCBzbyB0aGF0IHRoZSBpbXBsZW1lbnRlciBtYXkgY2hvb3Nl IHRoZSBtb2RlIG1vcmUgc3VpdGFibGUgZm9yIHRoZW0uIEhvcGVmdWxseSB0aGlzIGNsYXJpZmll cyB3aGF0IHdlIHRyeSB0byBkby4gUGxlYXNlIGZlZWwgZnJlZSB0byBjb21tZW50IG9yIHN1Z2dl c3QuDQoNCg0KQmVzdCBSZWdhcmRzLA0KUWl1ZmFuZyBNYQ0KDQpLLiAgLy8gY29udHJpYnV0b3IN Cg0KDQoNCk9uIEp1biAyMiwgMjAyMSwgYXQgMTE6NDMgUE0sIG1hcWl1ZmFuZyAoQSkgPG1hcWl1 ZmFuZzFAaHVhd2VpLmNvbTxtYWlsdG86bWFxaXVmYW5nMUBodWF3ZWkuY29tPj4gd3JvdGU6DQoN CkRlYXIgYWxsLA0KT25lIG9mIHRoZSBvcGVuIGlzc3VlcyBvZiBkcmFmdCBodHRwczovL2RhdGF0 cmFja2VyLmlldGYub3JnL2RvYy9odG1sL2RyYWZ0LW1hLW5ldGNvbmYtd2l0aC1zeXN0ZW0tMDIg aXMgYWJvdXQgaG93IHRvIHN5bmNocm9uaXplIHRoZSBzeXN0ZW0gY29uZmlndXJhdGlvbiBpbnRv IDxydW5uaW5nPi4NCkkgdGhpbmsgd2UgY291bGQgaGF2ZSAyIG9wdGlvbnMuDQpPcHRpb24gMTog QW55IHVwZGF0ZSBpbiA8c3lzdGVtPiB3aWxsIGJlIHN5bmNlZCB1cCBpbnRvIDxydW5uaW5nPiBh dXRvbWF0aWNhbGx5DQogIFBSTzoNCg0KICAgICAgIG8gIGVmZmVjdGl2ZSBmb3IgdGhlIGNsaWVu dDogdGhlcmUgaXMgbm8gbmVlZCBmb3IgdGhlIGNsaWVudCB0byByZXRyaWV2ZSB0aGUgcmVmZXJl bmNlZCBzeXN0ZW0gY29uZmlndXJhdGlvbiBmcm9tIDxvcGVyYXRpb25hbD4gYW5kIHRoZW4gY29w eSBpdCBpbnRvIDxydW5uaW5nPiBtYW51YWxseS4NCiAgQ09OOg0KICAgICAgICAgICAgbyAgIGlt cGxlbWVudGF0aW9uIGNvbXBsZXhpdHkNCg0KT3B0aW9uIDI6IFRvIGRlZmluZSBhIFJQQyBvcGVy YXRpb24gdG8gcHJvcGFnYXRlIDxydW5uaW5nPiB3aXRoIDxzeXN0ZW0+DQogIFBSTzoNCiAgICAg ICBvICBjbGllbnQtZHJpdmVuOiBpdCB0b3RhbGx5IGRlcGVuZHMgb24gdGhlIGNsaWVudCB3aGVu IGFuZCBob3cgdG8gcG9wdWxhdGUgPHJ1bm5pbmc+Lg0KICBDT046DQogICAgICAgbyAgVGhlIGNs aWVudCBuZWVkcyB0byA6DQpvICAgc3BlbmQgZW5lcmd5IHRvIGRldGVjdCB0aGUgPHN5c3RlbT4g dXBkYXRlIGFuZCBvcGVyYXRlIHRoZSBSUEMgZXZlcnkgdGltZSB0aGUgY2xpZW50IHJlZmVyZW5j ZXMgdGhlIHN5c3RlbSBjb25maWd1cmF0aW9uIG9yIHRoZSBzeXN0ZW0gY29uZmlndXJhdGlvbiBp cyBpbiB0aGUgd2hlbi9tdXN0IHN0YXRlbWVudC4NCm8gICBzdWJzY3JpYmUgdGhlIDxzeXN0ZW0+ IHVwZGF0ZSBhbmQgY29weSBpdCBpbnRvIDxydW5uaW5nPiB3aGVuZXZlciBhbiB1cGRhdGUgaXMg ZGV0ZWN0ZWQuDQoNCkkgaW5jbGluZSB0byB0aGUgdmlldyB0aGF0IHRoaXMgaXNzdWUgaW52b2x2 ZXMgc29tZSBraW5kIG9mIHRyYWRlLW9mZiwgd2hpY2ggaXMgaGFyZCB0byBkaXN0aW5ndWlzaCB0 aGUgcHJlZmVyZW5jZS4NCk1heWJlIGJvdGggb3B0aW9ucyBjYW4gYmUgcmVzZXJ2ZWQgYW5kIGRp ZmZlcmVudGlhdGVkIGJ5IGRpZmZlcmVudCBtb2Rlcywgc28gdGhhdCB0aGUgc2VydmVyIGltcGxl bWVudGVyIG1heSBjaG9vc2UgZnJvbS4NCkFueSB0aG91Z2h0cz8NCg0KDQpCZXN0IFJlZ2FyZHMs DQpRaXVmYW5nIE1hDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fXw0KbmV0Y29uZiBtYWlsaW5nIGxpc3QNCm5ldGNvbmZAaWV0Zi5vcmc8bWFpbHRvOm5ldGNv bmZAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL25ldGNv bmYNCg0K --_000_765757acb49741f7a64013b5525cdbb4huaweicom_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6ZHQ9InV1aWQ6QzJGNDEwMTAtNjVC My0xMWQxLUEyOUYtMDBBQTAwQzE0ODgyIiB4bWxuczptPSJodHRwOi8vc2NoZW1hcy5taWNyb3Nv ZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy9UUi9S RUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250 ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1ldGEgbmFtZT0iR2VuZXJhdG9yIiBj b250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQgbWVkaXVtKSI+DQo8c3R5bGU+PCEt LQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpIZWx2 ZXRpY2E7DQoJcGFub3NlLTE6MiAxMSA2IDQgMiAyIDIgMiAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtm b250LWZhbWlseTrlrovkvZM7DQoJcGFub3NlLTE6MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQpAZm9u dC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMg NSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9z ZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IlxA 5a6L5L2TIjsNCglwYW5vc2UtMToyIDEgNiAwIDMgMSAxIDEgMSAxO30NCkBmb250LWZhY2UNCgl7 Zm9udC1mYW1pbHk6Q29uc29sYXM7DQoJcGFub3NlLTE6MiAxMSA2IDkgMiAyIDQgMyAyIDQ7fQ0K QGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpNZW5sbzt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAq Lw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGNt Ow0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFt aWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsN Cgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9u OnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNv LXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5k ZXJsaW5lO30NCnByZQ0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6 IkhUTUwg6aKE6K6+5qC85byPIENoYXIiOw0KCW1hcmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTou MDAwMXB0Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9 DQpzcGFuLmFwcGxlLWNvbnZlcnRlZC1zcGFjZQ0KCXttc28tc3R5bGUtbmFtZTphcHBsZS1jb252 ZXJ0ZWQtc3BhY2U7fQ0Kc3Bhbi5IVE1MQ2hhcg0KCXttc28tc3R5bGUtbmFtZToiSFRNTCDpooTo rr7moLzlvI8gQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5r OiJIVE1MIOmihOiuvuagvOW8jyI7DQoJZm9udC1mYW1pbHk6Q29uc29sYXM7fQ0Kc3Bhbi5FbWFp bFN0eWxlMjANCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6 IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzFGNDk3RDt9DQouTXNvQ2hwRGVmYXVsdA0K CXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdl IFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYxMi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzIuMHB0IDkw LjBwdCA3Mi4wcHQgOTAuMHB0O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlv bjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVs dHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0t W2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlk bWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2Vu ZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJw dXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5IaSwgS2VudDo8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3 RCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmO2NvbG9yOiMxRjQ5N0QiPlRoYW5rcyBmb3Iga2lja2luZyBvZmYgc29tZSBkaXNjdXNz aW9uIGFyb3VuZCB0aGlzIGRyYWZ0LiBQbGVhc2Ugc2VlIG15IHJlcGx5IGlubGluZS48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29s b3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXYgc3R5 bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMu MHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDozNi4wcHQiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z ZXJpZiI+IEtlbnQgV2F0c2VuIFttYWlsdG86a2VudEB3YXRzZW4ubmV0XQ0KPGJyPg0KPGI+U2Vu dDo8L2I+IFR1ZXNkYXksIEp1bmUgMjksIDIwMjEgNzo0NCBBTTxicj4NCjxiPlRvOjwvYj4gbWFx aXVmYW5nIChBKSAmbHQ7bWFxaXVmYW5nMUBodWF3ZWkuY29tJmd0Ozxicj4NCjxiPkNjOjwvYj4g bmV0Y29uZkBpZXRmLm9yZzxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW25ldGNvbmZdIHN5c3Rl bSBjb25maWd1cmF0aW9uIHN5bmMgbWVjaGFuaXNtPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4w cHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0OjM2LjBwdCI+SGkmbmJzcDs8c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPlFp dWZhbmcsPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+ PGJyPg0KPGJyPg0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOmJsYWNrIj5JIGp1c3QgcmVhZCB5b3VyIGRyYWZ0IGFuZCBoYXZlIGEgZmV3IGNvbW1l bnRzOjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpi bGFjayI+PGJyPg0KPGJyPg0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmO2NvbG9yOmJsYWNrIj48YnI+DQo8YnI+DQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYu MHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPjEpIEkgd2lzaCB0aGVyZSB3ZXJlIG1v cmUmbmJzcDtleGFtcGxlcywmbmJzcDtlc3BlY2lhbGx5IGZvciAmcXVvdDtyZXNvdXJjZS1pbmRl cGVuZGVudOKAnSZuYnNwO2NvbmZpZ3VyYXRpb24uICZuYnNwO0kgdW5kZXJzdGFuZCB3ZWxsIGVu b3VnaCAmcXVvdDtyZXNvdXJjZS1kZXBlbmRlbnQmcXVvdDsNCiAoZHluYW1pYykgY29uZmlndXJh dGlvbiwgYnV0IGFtIHVuY2xlYXIgYWJvdXQmbmJzcDt3aGF0Jm5ic3A7YWxsICZxdW90O3Jlc291 cmNlLWluZGVwZW5kZW504oCdJm5ic3A7ZW50YWlscy4gJm5ic3A7QnkgZXhhbXBsZSwgSlVOT1Mg aGFzIGEgY29uY2VwdCBjYWxsZWQmbmJzcDvigJxKVU5PUyBkZWZhdWx0c+KAnSwgd2hpY2ggaXMm bmJzcDtlZmZlY3RpdmVseSZuYnNwO3JlYWQtb25seSBhbmQgaGlkZGVuLWJ5LWRlZmF1bHQgY29u ZmlndXJhdGlvbiB0aGF0LCBtb3N0IHRpbWVzLCBtdXN0IGJlIHJlZmVyZW5jZWQgaW4gb3JkZXIN CiB0byB0YWtlIGVmZmVjdC4gJm5ic3A7IEZvciBpbnN0YW5jZSwgY2hlY2sgdGhlIGV4YW1wbGVz IGhhbGZ3YXkgZG93biZuYnNwO3RoaXMgcGFnZTombmJzcDs8YSBocmVmPSJodHRwczovL25leHRo ZWFkZXIubmV0LzIwMTYvMDYvMTAvanVub3MtZGVmYXVsdHMtZ3JvdXAiPmh0dHBzOi8vbmV4dGhl YWRlci5uZXQvMjAxNi8wNi8xMC9qdW5vcy1kZWZhdWx0cy1ncm91cDwvYT4uICZuYnNwO0lzIHRo aXMgc2ltaWxhciB0byB3aGF0IHlvdSBoYXZlIGluIG1pbmQ/PC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PGk+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOiMxRjQ5N0QiPltRaXVmYW5nIE1hXSAmbmJzcDtZZXMuIFBoeXNpY2FsLXJlc291 cmNlLWluZGVwZW5kZW50IHN5c3RlbSBjb25maWd1cmF0aW9uIGlzIGdlbmVyYXRlZCB3aGVuIHRo ZSBkZXZpY2UgaXMgcG93ZXJlZCBvbiBhbmQgaGFzIG5vdGhpbmcgdG8gZG8gd2l0aCB0aGUgcGh5 c2ljYWwNCiByZXNvdXJjZS4gTG9vcGJhY2sgaW50ZXJmYWNlIG1heSBiZSB0aGUgbW9zdCBjb21t b24gcGh5c2ljYWwtcmVzb3VyY2UtaW5kZXBlbmRlbnQgc3lzdGVtIGNvbmZpZ3VyYXRpb24uIFRv IG15IGtub3dsZWRnZSwgbWFueSB2ZW5kb3JzICgoZS5nLiwgSHVhd2VpIE5FNDBFIGFuZCBDaXNj byBJT1MgWFIpIHdpbGwgcHJvdmlkZSBzZXZlcmFsIHByZWRlZmluZWQgdXNlciBncm91cHMgYW5k L29yIHRhc2sgZ3JvdXBzIHdoaWNoIGFyZSB1c2VkIGZvciBhdXRoZW50aWNhdGlvbiwNCiBhdXRo b3JpemF0aW9uIGFuZCBhY2NvdW50aW5nIChBQUEpIHNlcnZpY2VzLiBTaW5jZSB0aGVzZSBjb25m aWd1cmF0aW9ucyBhcmUgcHJvdmlkZWQgYnkgdGhlIGRldmljZS9zeXN0ZW0sIHRoZXkgY291bGQg Jm5ic3A7YmUgdHJlYXRlZCBhcyBzeXN0ZW0gY29uZmlndXJhdGlvbi4gSSB0aGluayB5b3VyICZu YnNwO2luZm9ybWF0aW9uIGFib3V0IHRoZSBwcmVkZWZpbmVkIGhpZGRlbiBjb25maWd1cmF0aW9u IGdyb3VwIHdoaWNoIGNvbnRhaW5zIHByZWNvbmZpZ3VyZWQNCiB2YWx1ZXMgc2hvdWxkIGFsc28g YmUgdHJlYXRlZCB0aGUgc2FtZS4gPG86cD48L286cD48L3NwYW4+PC9pPjwvYj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48Yj48aT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+TW9y ZSBleGFtcGxlcyBhYm91dCBzeXN0ZW0gY29uZmlndXJhdGlvbnMgd291bGQgYmUgd29ya2VkIG9u IGFuZCBhZGRlZCBpbiAmbmJzcDt0aGUgbmV4dCB2ZXJzaW9uIG9mIHRoZSBkcmFmdC46KTxvOnA+ PC9vOnA+PC9zcGFuPjwvaT48L2I+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJs YWNrIj4yKSBQbGVhc2UgdHJlYXQgTkVUQ09ORiBhbmQgUkVTVENPTkYmbmJzcDtlcXVhbGx5LiAm bmJzcDtDdXJyZW50bHkgdGhlIGRyYWZ0IHNwZWFrcyBvbmx5IHRvIGhvdyBpdCBpbXBhY3RzIE5F VENPTkYsIGJ1dCBpdCBzaG91bGQgZXF1YWxseSBzaG93DQogaG93IFJFU1RDT05GIGluJm5ic3A7 aW1wYWN0ZWQuPC9zcGFuPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48aT48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29s b3I6IzFGNDk3RCI+W1FpdWZhbmcgTWFdIFRoYW5rcyBmb3IgYnJpbmdpbmcgaXQgdG8gbXkgYXR0 ZW50aW9uLCBJIHdvdWxkIHRha2UgUkVTVENPTkYgaW50byBjb25zaWRlcmF0aW9uIGFuZCBzZWUg aG93IHRoZSBwcm9wb3NhbCB3b3JrcyBvbiBSRVNUQ09ORi48bzpwPjwvbzpwPjwvc3Bhbj48L2k+ PC9iPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+PGJyPg0KPGJyPg0KPC9zcGFuPjxzcGFuIHN0 eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6YmxhY2siPjMpIFRoZSZuYnNwO+KAnGJhc2ljIG1vZGXigJ0gdGVybSZu YnNwO3NvdW5kcyB0b28gY2xvc2UgdG8gdGhlJm5ic3A74oCcd2l0aC1kZWZhdWx0c+KAnSBiYXNp YyBtb2Rlcy4uLmNhbiB3ZSBwbGVhc2UgcGljayBhbm90aGVyIG5hbWUgKGUuZy4sIHN5c3RlbS1k YXRhc3RvcmUtb3BlcmF0aW5nLW1vZGUpPw0KICZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYi PjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxpPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5bUWl1ZmFuZyBNYV0gWWVzLCBhZ3JlZS4gQWN0dWFs bHkgd2UgZG9u4oCZdCByZWFsbHkgd2FudCB0byBjYXVzZSBhbnkgY29uZnVzaW9uIG9yIG1pc3Vu ZGVyc3RhbmRpbmdzLiBUaGlzIHRlcm0gY29udHJvbHMgd2hldGhlciB0aGUgZGV2aWNlIHdpbGwg dXBkYXRlICZsdDtydW5uaW5nJmd0Ow0KIHdpdGggc3lzdGVtIGNvbmZpZ3VyYXRpb24gY2hhbmdl IG9yIG5vdC4gPG86cD48L286cD48L3NwYW4+PC9pPjwvYj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48Yj48aT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+WW91ciBwcm9wb3NhbCBs b29rcyBnb29kIHRvIG1lLCBvdGhlciBzdWdnZXN0aW9ucyBhcmUgYWxzbyB3ZWxjb21lIGhlcmUu PC9zcGFuPjwvaT48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmO2NvbG9yOmJsYWNrIj5SZWdhcmRpbmcgeW91ciBxdWVzdGlvbiBiZWxvdyBJIGRvbuKA mXQgZmVlbCByZWFkeSB0byBjb21tZW50IG9uIGl0IHlldC4gJm5ic3A7SSBkbyB1bmRlcnN0YW5k IHRoZSBKVU5PUyBtb2RlbCBhbmQsIGlmIGl0IGlzJm5ic3A7Y29tcGF0aWJsZSwmbmJzcDt3b3Vs ZA0KIHJlY29tbWVuZCBjb25zaWRlcmluZywgYXMgaXQgaXMgaW1wbGVtZW50ZWQgYW5kIHNlZW1z IHRvIGJlIHdvcmtpbmcgd2VsbCBlbm91Z2guICZuYnNwO1RoYXQgc2FpZCwgaXQgbWlnaHQgYmUg dGhlIGNhc2UgdGhhdCBldmVyeSB2ZW5kb3IgaGFzIGRlZmluZWQmbmJzcDt0aGVpciBvd24gd2F5 IGFuZCBlYWNoIG5lZWRzIHRvIGJlJm5ic3A7ZG9jdW1lbnRlZCBpbiB0dXJuLi4uPC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PGI+PGk+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPltRaXVmYW5nIE1hXSBUaGUg aXNzdWUgd2UgdHJ5IHRvIHJlc29sdmUgaGVyZSBpcyB0aGF0IGluIG9yZGVyIGZvciBzeXN0ZW0g Y29uZmlndXJhdGlvbnMgYmVpbmcgcmVmZXJlbmNlZCBvciB0byBtYWtlIHN1cmUgYSBzdWNjZXNz ZnVsIHZhbGlkYXRpb24gd2hlbiB0aGUNCiBzeXN0ZW0gY29uZmlndXJhdGlvbiBpcyBpbiB0aGUg d2hlbi9tdXN0IHN0YXRlbWVudCwgdGhlIHN5c3RlbSBjb25maWd1cmF0aW9uIG11c3QgYmUgcmV0 cmlldmVkIGZyb20gJmx0O29wZXJhdGlvbmFsJmd0OyBmaXJzdGx5IGFuZCB0aGVuIGNvcGllZCBp bnRvICZsdDtydW5uaW5nJmd0OyBtYW51YWxseSwgd2hpY2ggaXMgY3VtYmVyc29tZS4gSW4gdGhp cyBjYXNlLCB3ZSB3b3VsZCBsaWtlIHRvIGRlZmluZSBzb21lIGtpbmQgb2YgbWVjaGFuaXNtIHRv IHN5bmNocm9uaXplDQogc3lzdGVtIGNvbmZpZ3VyYXRpb24gaW50byAmbHQ7cnVubmluZyZndDsu IEN1cnJlbnRseSB0d28gc3lzdGVtIGNvbmZpZ3VyYXRpb24gZGF0YSBoYW5kbGluZyBtb2RlcyBh cmUgc3BlY2lmaWVkLiBPbmUgd2lsbCB1cGRhdGUgJmx0O3J1bm5pbmcmZ3Q7IHdpdGggYW55IHN5 c3RlbSBjb25maWd1cmF0aW9uIGNoYW5nZSBhdXRvbWF0aWNhbGx5LCBhbmQgdGhlIG90aGVyIHdp bGwgbm90LCBzbyB0aGF0IHRoZSBpbXBsZW1lbnRlciBtYXkgY2hvb3NlIHRoZSBtb2RlIG1vcmUN CiBzdWl0YWJsZSBmb3IgdGhlbS4gSG9wZWZ1bGx5IHRoaXMgY2xhcmlmaWVzIHdoYXQgd2UgdHJ5 IHRvIGRvLiBQbGVhc2UgZmVlbCBmcmVlIHRvIGNvbW1lbnQgb3Igc3VnZ2VzdC48bzpwPjwvbzpw Pjwvc3Bhbj48L2k+PC9iPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxpPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu cy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2k+PC9iPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxpPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0 OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2k+PC9iPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxiPjxpPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5CZXN0IFJlZ2FyZHMs PG86cD48L286cD48L3NwYW4+PC9pPjwvYj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48 aT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+UWl1ZmFuZyBNYTwvc3Bhbj48L2k+PC9i PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYu MHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpi bGFjayI+Sy4gJm5ic3A7Ly8gY29udHJpYnV0b3I8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0 Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjxibG9j a3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPk9uIEp1 biAyMiwgMjAyMSwgYXQgMTE6NDMgUE0sIG1hcWl1ZmFuZyAoQSkgJmx0OzxhIGhyZWY9Im1haWx0 bzptYXFpdWZhbmcxQGh1YXdlaS5jb20iPm1hcWl1ZmFuZzFAaHVhd2VpLmNvbTwvYT4mZ3Q7IHdy b3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MzYuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmIj5EZWFyIGFsbCw8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJz cDs8L3NwYW4+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5P bmUgb2YgdGhlIG9wZW4gaXNzdWVzIG9mIGRyYWZ0PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRl ZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5v cmcvZG9jL2h0bWwvZHJhZnQtbWEtbmV0Y29uZi13aXRoLXN5c3RlbS0wMiI+PHNwYW4gc3R5bGU9 ImNvbG9yOiM5NTRGNzIiPmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2h0bWwvZHJh ZnQtbWEtbmV0Y29uZi13aXRoLXN5c3RlbS0wMjwvc3Bhbj48L2E+PHNwYW4gY2xhc3M9ImFwcGxl LWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPmlzDQogYWJvdXQgaG93IHRvIHN5bmNocm9u aXplIHRoZSBzeXN0ZW0gY29uZmlndXJhdGlvbiBpbnRvICZsdDtydW5uaW5nJmd0Oy48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkkgdGhpbmsgd2UgY291bGQg aGF2ZSAyIG9wdGlvbnMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmIj5PcHRpb24gMTogQW55IHVwZGF0ZSBpbiAmbHQ7c3lzdGVtJmd0OyB3aWxsIGJlIHN5bmNl ZCB1cCBpbnRvICZsdDtydW5uaW5nJmd0OyBhdXRvbWF0aWNhbGx5PG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDsgUFJPOjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0O2JhY2tncm91bmQ6 d2hpdGUiPiZuYnNwOyZuYnNwOyZuYnNwOyA8c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2Zv bnQtZmFtaWx5Ok1lbmxvO2NvbG9yOiMyMTI1MjkiPiZuYnNwOyZuYnNwOyZuYnNwOzwvc3Bhbj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWYiPm8mbmJzcDsgZWZmZWN0aXZlIGZvciB0aGUgY2xpZW50OiB0aGVyZSBp cyBubyBuZWVkIGZvciB0aGUgY2xpZW50IHRvIHJldHJpZXZlIHRoZSByZWZlcmVuY2VkIHN5c3Rl bSBjb25maWd1cmF0aW9uIGZyb20gJmx0O29wZXJhdGlvbmFsJmd0OyBhbmQgdGhlbiBjb3B5IGl0 IGludG8gJmx0O3J1bm5pbmcmZ3Q7IG1hbnVhbGx5Ljwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssc2Fucy1zZXJpZiI+Jm5ic3A7IENPTjo8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNw YWNlIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtvJm5ic3A7ICZuYnNwO2ltcGxlbWVudGF0aW9uIGNvbXBs ZXhpdHk8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYi Pk9wdGlvbiAyOiBUbyBkZWZpbmUgYSBSUEMgb3BlcmF0aW9uIHRvIHByb3BhZ2F0ZSAmbHQ7cnVu bmluZyZndDsgd2l0aCAmbHQ7c3lzdGVtJmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7IFBSTzo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0 Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOyAmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtv Jm5ic3A7IGNsaWVudC1kcml2ZW46IGl0IHRvdGFsbHkgZGVwZW5kcyBvbiB0aGUgY2xpZW50IHdo ZW4gYW5kIGhvdyB0byBwb3B1bGF0ZSAmbHQ7cnVubmluZyZndDsuPG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDsgQ09OOjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7ICZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwO28mbmJzcDsgVGhlIGNsaWVudCBuZWVkcyB0byA6PG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDo2OS43NXB0Ij4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQ7dGV4dC1pbmRlbnQ6LTE4LjBw dCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDsiPm88L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdCI+Jm5ic3A7 Jm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwv c3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWYiPnNwZW5kDQogZW5lcmd5IHRvIGRldGVjdCB0aGUgJmx0O3N5 c3RlbSZndDsgdXBkYXRlIGFuZCBvcGVyYXRlIHRoZSBSUEMgZXZlcnkgdGltZSB0aGUgY2xpZW50 IHJlZmVyZW5jZXMgdGhlIHN5c3RlbSBjb25maWd1cmF0aW9uIG9yIHRoZSBzeXN0ZW0gY29uZmln dXJhdGlvbiBpcyBpbiB0aGUgd2hlbi9tdXN0IHN0YXRlbWVudC48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjY5Ljc1cHQiPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdDt0ZXh0LWluZGVudDotMTguMHB0 Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90OyI+bzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDsm bmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9z cGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZiI+c3Vic2NyaWJlDQogdGhlICZsdDtzeXN0ZW0mZ3Q7IHVwZGF0 ZSBhbmQgY29weSBpdCBpbnRvICZsdDtydW5uaW5nJmd0OyB3aGVuZXZlciBhbiB1cGRhdGUgaXMg ZGV0ZWN0ZWQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4m bmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkkgaW5j bGluZSB0byB0aGUgdmlldyB0aGF0IHRoaXMgaXNzdWUgaW52b2x2ZXMgc29tZSBraW5kIG9mIHRy YWRlLW9mZiwgd2hpY2ggaXMgaGFyZCB0byBkaXN0aW5ndWlzaCB0aGUgcHJlZmVyZW5jZS48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPk1heWJlIGJvdGggb3B0 aW9ucyBjYW4gYmUgcmVzZXJ2ZWQgYW5kIGRpZmZlcmVudGlhdGVkIGJ5IGRpZmZlcmVudCBtb2Rl cywgc28gdGhhdCB0aGUgc2VydmVyIGltcGxlbWVudGVyIG1heSBjaG9vc2UgZnJvbS48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkFueSB0aG91Z2h0cz88bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5CZXN0IFJlZ2FyZHMsPG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5RaXVmYW5nIE1hPG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTom cXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+X19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX188YnI+DQpuZXRjb25mIG1haWxpbmcgbGlzdDxicj4NCjwv c3Bhbj48YSBocmVmPSJtYWlsdG86bmV0Y29uZkBpZXRmLm9yZyI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWY7 Y29sb3I6Izk1NEY3MiI+bmV0Y29uZkBpZXRmLm9yZzwvc3Bhbj48L2E+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2Vy aWYiPjxicj4NCjwvc3Bhbj48YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xp c3RpbmZvL25ldGNvbmYiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5 OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM5NTRGNzIiPmh0dHBzOi8v d3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vbmV0Y29uZjwvc3Bhbj48L2E+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_765757acb49741f7a64013b5525cdbb4huaweicom_-- From nobody Tue Jun 29 10:47:16 2021 Return-Path: X-Original-To: netconf@ietf.org Delivered-To: netconf@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 3FF7B3A3BF9; Tue, 29 Jun 2021 10:47:15 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: netconf@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.33.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: netconf@ietf.org Message-ID: <162498883519.24188.3874067643746288228@ietfa.amsl.com> Date: Tue, 29 Jun 2021 10:47:15 -0700 Archived-At: Subject: [netconf] I-D Action: draft-ietf-netconf-sztp-csr-04.txt X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Jun 2021 17:47:15 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Network Configuration WG of the IETF. Title : Conveying a Certificate Signing Request (CSR) in a Secure Zero Touch Provisioning (SZTP) Bootstrapping Request Authors : Kent Watsen Russ Housley Sean Turner Filename : draft-ietf-netconf-sztp-csr-04.txt Pages : 29 Date : 2021-06-29 Abstract: This draft extends the "get-bootstrapping-data" RPC defined in RFC 8572 to include an optional certificate signing request (CSR), enabling a bootstrapping device to additionally obtain an identity certificate (e.g., an LDevID, from IEEE 802.1AR) as part of the "onboarding information" response provided in the RPC-reply. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-netconf-sztp-csr/ There is also an HTML version available at: https://www.ietf.org/archive/id/draft-ietf-netconf-sztp-csr-04.html A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-netconf-sztp-csr-04 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Jun 29 10:57:53 2021 Return-Path: <0100017a58eb6a8f-6227c3ba-9b53-4695-8180-7cca6b0037a2-000000@amazonses.watsen.net> X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 069723A3C39; Tue, 29 Jun 2021 10:57:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.894 X-Spam-Level: X-Spam-Status: No, score=-1.894 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WaCr0CVraXyu; Tue, 29 Jun 2021 10:57:42 -0700 (PDT) Received: from a8-88.smtp-out.amazonses.com (a8-88.smtp-out.amazonses.com [54.240.8.88]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9BCA73A3C38; Tue, 29 Jun 2021 10:57:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1624989461; h=From:Message-Id:Content-Type:Mime-Version:Subject:Date:In-Reply-To:Cc:To:References:Feedback-ID; bh=rHMEF+7NQKkw4vk7I86fHD8Mb+gTRmbHySJEmBtbcVE=; b=h8dlf2RiO1R5bMOArOxOtBtBSHK7K6a8FP1S8c1uartBaEST5gHsPq8NoT8kUbjE Phf9oOeXL+YEzrGm8vMbS4KnLbZFGiZG7NTRIt6Iv1bJ9Sc21tQnGstIdXXXTym7bDa 5Ep5KHKTRBIwIyu8DyY7BoT/DGc0EvLzuv5A/5MQ= From: Kent Watsen Message-ID: <0100017a58eb6a8f-6227c3ba-9b53-4695-8180-7cca6b0037a2-000000@email.amazonses.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_DBC03D1A-AD45-4E8F-B18A-9BBA4302BB3F" Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.100.0.2.22\)) Date: Tue, 29 Jun 2021 17:57:41 +0000 In-Reply-To: <162498883519.24188.3874067643746288228@ietfa.amsl.com> Cc: Russ Housley , Sean Turner , "" To: "netconf@ietf.org" References: <162498883519.24188.3874067643746288228@ietfa.amsl.com> X-Mailer: Apple Mail (2.3654.100.0.2.22) Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES X-SES-Outgoing: 2021.06.29-54.240.8.88 Archived-At: Subject: Re: [netconf] I-D Action: draft-ietf-netconf-sztp-csr-04.txt X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Jun 2021 17:57:51 -0000 --Apple-Mail=_DBC03D1A-AD45-4E8F-B18A-9BBA4302BB3F Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 I was not planning to update this document until after the ANIMA = =E2=80=9Cshare=E2=80=9D discussions completed, but two things happened = this morning:=20 a liaison announcement regarding this draft was sent to the = "ieee-ietf-coord@ietf.org=E2=80=9D alias. a private email was sent to me that, in part, regarded this draft. In both cases, I felt it best to post the update from the AD-review now = and decouple the ANIMA =E2=80=9Cshare" discussion proceed. Kent > On Jun 29, 2021, at 1:47 PM, internet-drafts@ietf.org wrote: >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts = directories. > This draft is a work item of the Network Configuration WG of the IETF. >=20 > Title : Conveying a Certificate Signing Request (CSR) = in a Secure Zero Touch Provisioning (SZTP) Bootstrapping Request > Authors : Kent Watsen > Russ Housley > Sean Turner > Filename : draft-ietf-netconf-sztp-csr-04.txt > Pages : 29 > Date : 2021-06-29 >=20 > Abstract: > This draft extends the "get-bootstrapping-data" RPC defined in RFC > 8572 to include an optional certificate signing request (CSR), > enabling a bootstrapping device to additionally obtain an identity > certificate (e.g., an LDevID, from IEEE 802.1AR) as part of the > "onboarding information" response provided in the RPC-reply. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-netconf-sztp-csr/ >=20 > There is also an HTML version available at: > https://www.ietf.org/archive/id/draft-ietf-netconf-sztp-csr-04.html >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-netconf-sztp-csr-04 >=20 >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 >=20 > _______________________________________________ > netconf mailing list > netconf@ietf.org > https://www.ietf.org/mailman/listinfo/netconf --Apple-Mail=_DBC03D1A-AD45-4E8F-B18A-9BBA4302BB3F Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 I = was not planning to update this document until after the ANIMA = =E2=80=9Cshare=E2=80=9D discussions completed, but two things happened = this morning: 
  1. a = liaison announcement regarding this draft was sent to the "ieee-ietf-coord@ietf.org=E2=80=9D alias.
  2. a private email was sent to me that, in part, regarded this = draft.
In both cases, I felt it best to = post the update from the AD-review now and decouple the ANIMA =E2=80=9Csha= re" discussion proceed.

Kent


On Jun = 29, 2021, at 1:47 PM, internet-drafts@ietf.org wrote:


A New Internet-Draft is available from the on-line = Internet-Drafts directories.
This draft is a work item of = the Network Configuration WG of the IETF.

=        Title =           : Conveying = a Certificate Signing Request (CSR) in a Secure Zero Touch Provisioning = (SZTP) Bootstrapping Request
=        Authors =         : Kent Watsen
=             &n= bsp;           &nbs= p;Russ Housley
=             &n= bsp;           &nbs= p;Sean Turner
Filename =        : = draft-ietf-netconf-sztp-csr-04.txt
Pages =           : 29
= Date =            : = 2021-06-29

Abstract:
=   This draft extends the "get-bootstrapping-data" RPC defined = in RFC
  8572 to include an optional = certificate signing request (CSR),
  enabling a = bootstrapping device to additionally obtain an identity
=   certificate (e.g., an LDevID, from IEEE 802.1AR) as part of = the
  "onboarding information" response = provided in the RPC-reply.


The= IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-netconf-sztp-csr/

There is also an HTML version available = at:
https://www.ietf.org/archive/id/draft-ietf-netconf-sztp-csr-04.= html

A diff from the previous version is = available at:
https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-netconf-sztp-csr= -04


Internet-Drafts are also = available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


_______________________________________________
netconf mailing list
netconf@ietf.org
https://www.ietf.org/mailman/listinfo/netconf

= --Apple-Mail=_DBC03D1A-AD45-4E8F-B18A-9BBA4302BB3F-- From nobody Tue Jun 29 13:48:50 2021 Return-Path: <0100017a5987fa69-bb2b90f9-bdd5-44f7-935f-38c568121eeb-000000@amazonses.watsen.net> X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE17E3A098C for ; Tue, 29 Jun 2021 13:48:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0tDmf1j1bQcJ for ; Tue, 29 Jun 2021 13:48:43 -0700 (PDT) Received: from a48-94.smtp-out.amazonses.com (a48-94.smtp-out.amazonses.com [54.240.48.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 45A4A3A098A for ; Tue, 29 Jun 2021 13:48:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1624999721; h=Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc:Content-Transfer-Encoding:Message-Id:References:To:Feedback-ID; bh=j1Vm7pbW2JcYD36UYyYC6S4ttxvab+QxcaJcWUV+Wl8=; b=d8RN6bZ3g2tmiuWeWC7P4GAnCraaz2VGaKG3CY+wdSD7497JrhoFrbspVWl5Tp8+ EMKivQGYGVEzG+UydBDgfpiZVNCmoPG2ZB8obwhPJvzzNv7tRs6BugfoYAogaPxHS/h ZftAHV9kmsFvywUBG+EjErYhaagvWMMFQ7qzRiZE= Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.100.0.2.22\)) From: Kent Watsen In-Reply-To: <540b31e5-10a6-495f-cf44-820adb6213b3@sit.fraunhofer.de> Date: Tue, 29 Jun 2021 20:48:41 +0000 Cc: tom petch , "netconf@ietf.org" , "garywu@cisco.com" Content-Transfer-Encoding: quoted-printable Message-ID: <0100017a5987fa69-bb2b90f9-bdd5-44f7-935f-38c568121eeb-000000@email.amazonses.com> References: <0100017980c49236-7975b99d-b591-4da2-a118-f6598517c4e5-000000@email.amazonses.com> <010001798c0d947e-4d2d14f5-9f0e-450d-ac99-e18c260f0c2b-000000@email.amazonses.com> <01000179a0aa5d37-4810234e-8db2-434d-b8fa-780c1648955a-000000@email.amazonses.com> <01000179a5bdc371-b665451f-61d4-4364-9d55-e9369f3adc8e-000000@email.amazonses.com> <0100017a0aebfbf3-9e9c22e8-da12-4364-a572-8ce7fd43bf0f-000000@email.amazonses.com> <540b31e5-10a6-495f-cf44-820adb6213b3@sit.fraunhofer.de> To: Henk Birkholz X-Mailer: Apple Mail (2.3654.100.0.2.22) Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES X-SES-Outgoing: 2021.06.29-54.240.48.94 Archived-At: Subject: [netconf] TLS 1.3 and pre-shared-keys and raw-public-keys (was: More complications) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Jun 2021 20:48:49 -0000 [tweaking the Subject line] Hi Henk, I just realized that I never replied to your question below regarding = urgency. It would be good to get a high-level response ASAP so that a quick-patch = can be made that will pass the eminent SecDir review. A more thorough response would ideally be "ASAP" also, but it is the = case that this draft will remain open while a couple other drafts go = through WGLC, so the hard-stop window is a few weeks out yet. Thanks, Kent > On Jun 15, 2021, at 7:53 AM, Henk Birkholz = wrote: >=20 > Hi all, >=20 > a fellow IETF'ler poked me to pay attention to this thread. Sorry for = the latency. >=20 > Hm - dropping PSK support for TLS 1.3 seems to be leaving a bunch of = implementations in the IoT space behind that are inching towards = migration, currently. >=20 > How urgent is this? I can certainly massage the current YANG module, = but (in theory) I am occupied by another SDO meeting this week. >=20 > Viele Gr=C3=BC=C3=9Fe, >=20 > Henk >=20 >=20 > On 15.06.21 13:36, tom petch wrote: >> From: Kent Watsen >> Sent: 14 June 2021 15:27 >> [CC-ing Henk, to whom a question is directed to below] >> Hi Tom, >>> Top posting a new and different issue. >> Thanks for updating the subject line. >>> server case psk references ServerKeyExchange and psk-identity-hint = neither of which exist in TLS1.3. The client sends an extension = PreSharedKeyExtension which contains a list of identities from which the = server selects one as selected-identity for which the identifier is = uint16 indexing into the client's list. RFC8446 s.4.2.11. >>>=20 >>> The client description also needs amending. >>>=20 >>> TLS1.2 was extended to use tickets in this area to aid session = resumption; these have now gone and been replaced by this extension. I = would not suggest adding support for tickets. >>>=20 >>> As I may have said before, TLS 1.3 is different. >> Henk, could you help with these edits? Support for PSK and raw = public key were added to draft-ietf-netconf-tls-client-server per your = request and, if memory serves me, didn=E2=80=99t you help me with the = YANG update too? I suppose what is needed is a either a =E2=80=9Cchoice=E2= =80=9D statement (with cases for 1.2 and 1.3) *or* sibling-container = statements (in case it=E2=80=99s necessary both are configured in case, = e.g., the client sends one or the other)... >> >> Or else drop support for PSK with TLS1.3 at this time because too = little is known about it outside the use for HTTP. I am starting to see = I-D about how to use TLS1.3 with application X, even for HTTP, and I = think that such an I-D will be needed for many applications with or = without PSK. >> Tom Petch >>> Tom Petch >> Kent From nobody Tue Jun 29 13:49:27 2021 Return-Path: <0100017a59889ad9-f6e6f999-bc15-437e-b802-18e11330e81b-000000@amazonses.watsen.net> X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F39AF3A098D; Tue, 29 Jun 2021 13:49:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.894 X-Spam-Level: X-Spam-Status: No, score=-1.894 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BUWVHmfxi38M; Tue, 29 Jun 2021 13:49:24 -0700 (PDT) Received: from a48-94.smtp-out.amazonses.com (a48-94.smtp-out.amazonses.com [54.240.48.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0C84B3A0991; Tue, 29 Jun 2021 13:49:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1624999762; h=From:Message-Id:Content-Type:Mime-Version:Subject:Date:In-Reply-To:Cc:To:References:Feedback-ID; bh=UwbNk82y4kPCHDbos/2ykhnDVJ/njO5b6gf7KNfKAXk=; b=QIiDciMO3TqZkIhTWNG6RYdZwLHsffWMwtYaN40s23l/NY0HkmE1ynh9VwtVQUnZ 3Qf5k6Ephh1kZCiwT8o6qq2Jh7k5UCDsQ2UCNEhUst9uubIJOtVL+NXfgoqn6gEu9rv rMW7+1GR4UbkzjOUk6C279RWxsLdFh56cQjq1Hyw= From: Kent Watsen Message-ID: <0100017a59889ad9-f6e6f999-bc15-437e-b802-18e11330e81b-000000@email.amazonses.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_191A7E7D-A4BF-4904-AE22-A83EA92124C3" Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.100.0.2.22\)) Date: Tue, 29 Jun 2021 20:49:22 +0000 In-Reply-To: Cc: "netconf@ietf.org" , "draft-ietf-netconf-sztp-csr@ietf.org" To: "Rob Wilton (rwilton)" References: <0100017a2f082e6a-1197e3c8-f8be-4d59-ba1c-8d39029a31fc-000000@email.amazonses.com> X-Mailer: Apple Mail (2.3654.100.0.2.22) Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES X-SES-Outgoing: 2021.06.29-54.240.48.94 Archived-At: Subject: Re: [netconf] AD review of draft-ietf-netconf-sztp-csr X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Jun 2021 20:49:26 -0000 --Apple-Mail=_191A7E7D-A4BF-4904-AE22-A83EA92124C3 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi Rob, Since been spinning on the below thread since we had it and am wondering = if if would be best to ask for an HTTP expert review? Please advise. The reason being is that a close reading of "300 Multiple Choices" = suggests that it=E2=80=99s used by an HTTP-server to indicate when there = are multiple choices for a resource, whereas in this exchange, the = =E2=80=9Ccsr-support=E2=80=9D node in the client=E2=80=99s POST = effectively indicates that *it* has multiple choices for the server to = choose from=E2=80=A6 I=E2=80=99m beginning to wonder to the document might need to define a = custom HTTP status code to properly indicate the semantics of the = response=E2=80=A6 Kent // contributor >>> 2. Section 2.2: >>> Assuming the SZTP-server wishes to prompt the SZTP-client to = provide >>> a CSR, then it would respond with an HTTP 400 (Bad Request) error >>> code: >>>=20 >>> I wonder whether returning a 400 "Bad Request" error is really the = best >> return code, i.e., >>> it wasn't clear to me whether this requesting the capabiltiies is = really an >> error. >>> Did you consider potentially using other return codes? Possibly: >>> 300 Multiple Choices, >>> 403 Fobidden, >>> 406 Not Acceptable >>=20 >> I did before look at all the 4xx codes. I was initially drawn to 412 >> Precondition Failed, but noted that it is specific to HTTP request = header >> fields. As for the others you mention, the semantics of 403 = Forbidden is that >> the request should not be repeated, which isn=E2=80=99t out case, and = 406 Not >> Acceptable regards the use of the HTTP =E2=80=9CAccept=E2=80=9D = headers, which aren't in >> play here either. That said, 300 Multiple Choices does appear to be = a better >> if not perfect option, so I made that change in my local copy. >>=20 > Ack. --Apple-Mail=_191A7E7D-A4BF-4904-AE22-A83EA92124C3 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hi = Rob,

Since been spinning on the below = thread since we had it and am wondering if if would be best to ask for = an HTTP expert review?   Please advise.

The reason being is that a close reading of "300 = Multiple Choices" suggests that it=E2=80=99s used by an HTTP-server to = indicate when there are multiple choices for a resource, whereas in this = exchange, the =E2=80=9Ccsr-support=E2=80=9D node in the client=E2=80=99s = POST effectively indicates that *it* has multiple choices for the server = to choose from=E2=80=A6

I=E2=80=99m = beginning to wonder to the document might need to define a custom HTTP = status code to properly indicate the semantics of the = response=E2=80=A6

Kent // = contributor



2. Section 2.2:
 Assuming the SZTP-server wishes to prompt the = SZTP-client to provide
 a CSR, then it would respond = with an HTTP 400 (Bad Request) error
 code:

I wonder whether returning a 400 "Bad Request" = error is really the best
return code, = i.e.,
it wasn't clear = to me whether this requesting the capabiltiies is really an
error.
Did you consider potentially using other return codes? =  Possibly:
300 Multiple Choices,
403 = Fobidden,
406 Not Acceptable

I did before look at all the 4xx codes.  I was initially = drawn to 412
Precondition Failed, but noted that it is = specific to HTTP request header
fields.   As for = the others you mention, the semantics of 403 Forbidden is that
the request should not be repeated, which isn=E2=80=99t out = case, and 406 Not
Acceptable regards the use of the HTTP = =E2=80=9CAccept=E2=80=9D headers, which aren't in
play = here either.  That said, 300 Multiple Choices does appear to be a = better
if not perfect option, so I made that change in my = local copy.

Ack.

= --Apple-Mail=_191A7E7D-A4BF-4904-AE22-A83EA92124C3-- From nobody Tue Jun 29 13:54:24 2021 Return-Path: <0100017a598d16c2-ad53b3ac-6ad0-4dc6-af51-7d1dc1b9ad9f-000000@amazonses.watsen.net> X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 038F83A0A00; Tue, 29 Jun 2021 13:54:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.893 X-Spam-Level: X-Spam-Status: No, score=-1.893 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fQ7RkFWvWdkt; Tue, 29 Jun 2021 13:54:18 -0700 (PDT) Received: from a8-83.smtp-out.amazonses.com (a8-83.smtp-out.amazonses.com [54.240.8.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0524F3A09FE; Tue, 29 Jun 2021 13:54:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1625000056; h=From:Message-Id:Content-Type:Mime-Version:Subject:Date:In-Reply-To:Cc:To:References:Feedback-ID; bh=cQfTUHkA620mHdN1HY+W81FO3Y2ReEeOI1KE7eRL0Bc=; b=gPb6R8O93aOAFMpSo3xU3Bp+nGmwA1RF2RH1cCS5CpBHuXPIMmDkeNO3dRBUWEtf ttoKQnShg94BRitfJg76eCaxUapXFkibI08Jnrkpcj2bHQUyYbaDgoyDavwlXYVGqeW PzTriaUQTvS3VfA/g2fWipBG3hKXfTKX/hcOyUKA= From: Kent Watsen Message-ID: <0100017a598d16c2-ad53b3ac-6ad0-4dc6-af51-7d1dc1b9ad9f-000000@email.amazonses.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_67AE32FD-1DB2-4F65-9571-F50CCA5C9D68" Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.100.0.2.22\)) Date: Tue, 29 Jun 2021 20:54:16 +0000 In-Reply-To: <0100017a59889ad9-f6e6f999-bc15-437e-b802-18e11330e81b-000000@email.amazonses.com> Cc: "netconf@ietf.org" , "draft-ietf-netconf-sztp-csr@ietf.org" To: "Rob Wilton (rwilton)" References: <0100017a2f082e6a-1197e3c8-f8be-4d59-ba1c-8d39029a31fc-000000@email.amazonses.com> <0100017a59889ad9-f6e6f999-bc15-437e-b802-18e11330e81b-000000@email.amazonses.com> X-Mailer: Apple Mail (2.3654.100.0.2.22) Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES X-SES-Outgoing: 2021.06.29-54.240.8.83 Archived-At: Subject: Re: [netconf] AD review of draft-ietf-netconf-sztp-csr X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Jun 2021 20:54:23 -0000 --Apple-Mail=_67AE32FD-1DB2-4F65-9571-F50CCA5C9D68 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 s/Since been/I=E2=80=99ve been/ K. > On Jun 29, 2021, at 4:49 PM, Kent Watsen wrote: >=20 > Hi Rob, >=20 > Since been spinning on the below thread since we had it and am = wondering if if would be best to ask for an HTTP expert review? Please = advise. >=20 > The reason being is that a close reading of "300 Multiple Choices" = suggests that it=E2=80=99s used by an HTTP-server to indicate when there = are multiple choices for a resource, whereas in this exchange, the = =E2=80=9Ccsr-support=E2=80=9D node in the client=E2=80=99s POST = effectively indicates that *it* has multiple choices for the server to = choose from=E2=80=A6 >=20 > I=E2=80=99m beginning to wonder to the document might need to define a = custom HTTP status code to properly indicate the semantics of the = response=E2=80=A6 >=20 > Kent // contributor >=20 >=20 >=20 >>>> 2. Section 2.2: >>>> Assuming the SZTP-server wishes to prompt the SZTP-client to = provide >>>> a CSR, then it would respond with an HTTP 400 (Bad Request) error >>>> code: >>>>=20 >>>> I wonder whether returning a 400 "Bad Request" error is really the = best >>> return code, i.e., >>>> it wasn't clear to me whether this requesting the capabiltiies is = really an >>> error. >>>> Did you consider potentially using other return codes? Possibly: >>>> 300 Multiple Choices, >>>> 403 Fobidden, >>>> 406 Not Acceptable >>>=20 >>> I did before look at all the 4xx codes. I was initially drawn to = 412 >>> Precondition Failed, but noted that it is specific to HTTP request = header >>> fields. As for the others you mention, the semantics of 403 = Forbidden is that >>> the request should not be repeated, which isn=E2=80=99t out case, = and 406 Not >>> Acceptable regards the use of the HTTP =E2=80=9CAccept=E2=80=9D = headers, which aren't in >>> play here either. That said, 300 Multiple Choices does appear to be = a better >>> if not perfect option, so I made that change in my local copy. >>>=20 >> Ack. >=20 --Apple-Mail=_67AE32FD-1DB2-4F65-9571-F50CCA5C9D68 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8  s/Since been/I=E2=80=99ve been/

K.


On Jun 29, 2021, at 4:49 PM, Kent Watsen <kent+ietf@watsen.net> wrote:

Hi Rob,

Since been spinning on the = below thread since we had it and am wondering if if would be best to ask = for an HTTP expert review?   Please advise.

The reason being is that a close = reading of "300 Multiple Choices" suggests that it=E2=80=99s used by an = HTTP-server to indicate when there are multiple choices for a resource, = whereas in this exchange, the =E2=80=9Ccsr-support=E2=80=9D node in the = client=E2=80=99s POST effectively indicates that *it* has multiple = choices for the server to choose from=E2=80=A6

I=E2=80=99m beginning to wonder to the = document might need to define a custom HTTP status code to properly = indicate the semantics of the response=E2=80=A6

Kent // contributor



2.= Section 2.2:
 Assuming the SZTP-server wishes to = prompt the SZTP-client to provide
 a CSR, then it = would respond with an HTTP 400 (Bad Request) error
 code:

I wonder whether = returning a 400 "Bad Request" error is really the best
return code, i.e.,
it wasn't clear to me whether this requesting = the capabiltiies is really an
error.
Did you consider = potentially using other return codes?  Possibly:
300 = Multiple Choices,
403 Fobidden,
406 Not = Acceptable

I did before look = at all the 4xx codes.  I was initially drawn to 412
Precondition Failed, but noted that it is specific to HTTP = request header
fields.   As for the others you = mention, the semantics of 403 Forbidden is that
the = request should not be repeated, which isn=E2=80=99t out case, and 406 = Not
Acceptable regards the use of the HTTP =E2=80=9CAccept=E2= =80=9D headers, which aren't in
play here either. =  That said, 300 Multiple Choices does appear to be a better
if not perfect option, so I made that change in my local = copy.

Ack.


= --Apple-Mail=_67AE32FD-1DB2-4F65-9571-F50CCA5C9D68-- From nobody Tue Jun 29 15:51:18 2021 Return-Path: <0100017a59f81d52-dd739c93-2634-487f-a4c9-403f9d350c19-000000@amazonses.watsen.net> X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1EC3F3A1824; Tue, 29 Jun 2021 15:51:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.894 X-Spam-Level: X-Spam-Status: No, score=-1.894 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w2GdDQALhPFl; Tue, 29 Jun 2021 15:51:12 -0700 (PDT) Received: from a8-31.smtp-out.amazonses.com (a8-31.smtp-out.amazonses.com [54.240.8.31]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0BB2A3A1826; Tue, 29 Jun 2021 15:51:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1625007070; h=From:Message-Id:Content-Type:Mime-Version:Subject:Date:In-Reply-To:Cc:To:References:Feedback-ID; bh=/mCPKk6fLtn/ITvjdgcHxEomBqnZHEpk23Yvh7ldt4s=; b=Turyn4oSpaoWAUfhc9sQAe6zqI9eJGP5ChvQ3li4AD+EaA8KMylxzdZQryVupsy3 TJKWUZXA26l64tRwP3ekn9EgyCC9+lrVPUUdLebF767ZjmVB6G2WNAcUBX5/iiukIFn h5DnYyGl3opwt5hx+qW5F1mKAxS7hK/sLCa2qL8c= From: Kent Watsen Message-ID: <0100017a59f81d52-dd739c93-2634-487f-a4c9-403f9d350c19-000000@email.amazonses.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_7C5CEEC4-DD69-4E5A-99BB-1CCFD3EF2F06" Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.100.0.2.22\)) Date: Tue, 29 Jun 2021 22:51:10 +0000 In-Reply-To: <765757acb49741f7a64013b5525cdbb4@huawei.com> Cc: "netconf@ietf.org" , "netmod@ietf.org" To: "maqiufang (A)" References: <38c3aa805f1846d0ad0e5ac67a82cfa1@huawei.com> <0100017a5501b507-02588bdb-c4c4-430f-9b53-39eefdfffe8b-000000@email.amazonses.com> <765757acb49741f7a64013b5525cdbb4@huawei.com> X-Mailer: Apple Mail (2.3654.100.0.2.22) Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES X-SES-Outgoing: 2021.06.29-54.240.8.31 Archived-At: Subject: Re: [netconf] system configuration sync mechanism X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Jun 2021 22:51:17 -0000 --Apple-Mail=_7C5CEEC4-DD69-4E5A-99BB-1CCFD3EF2F06 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 [CC-ing NETMOD, as I think this discussion belongs on that list...please = consider removing NETCONF in your reply] Hi Qiufang, > Hi, Kent: > Thanks for kicking off some discussion around this draft. Please see = my reply inline. I'm interested in this work, as it seems as if the datastore = was left out of the NMDA work. > 1) I wish there were more examples, especially for = "resource-independent=E2=80=9D configuration. I understand well enough = "resource-dependent" (dynamic) configuration, but am unclear about what = all "resource-independent=E2=80=9D entails. By example, JUNOS has a = concept called =E2=80=9CJUNOS defaults=E2=80=9D, which is effectively = read-only and hidden-by-default configuration that, most times, must be = referenced in order to take effect. For instance, check the examples = halfway down this page: = https://nextheader.net/2016/06/10/junos-defaults-group = . Is this = similar to what you have in mind? > [Qiufang Ma] Yes. Physical-resource-independent system configuration = is generated when the device is powered on and has nothing to do with = the physical resource. Loopback interface may be the most common = physical-resource-independent system configuration. To my knowledge, = many vendors ((e.g., Huawei NE40E and Cisco IOS XR) will provide several = predefined user groups and/or task groups which are used for = authentication, authorization and accounting (AAA) services. Since these = configurations are provided by the device/system, they could be treated = as system configuration. I think your information about the predefined = hidden configuration group which contains preconfigured values should = also be treated the same.=20 > More examples about system configurations would be worked on and added = in the next version of the draft.:) Right, the loopback interface is a common example but, more generally, I = think "resource-independent=E2=80=9D configuration might fall into = exactly two categories: 1) config that is =E2=80=9Capplied=E2=80=9D immediately - ex: interfaces/lo0/unit 0/family [ inet inet6 ] - ex: system/login/password/minimum-length=3D6 - ex: system/ports/console-type=3Dvt100 - ex: system/syslog/archive-size=3D256k; - ex: = chassis/cluster/fabric-monitoring/heartbeat-interval=3D1000; - ex: security/zones/security-zone/junos-host; - ex: security/alg/sip/inactive-media-timeout=3D120; 2) config that is =E2=80=9Capplied=E2=80=9D only after being = referenced by other config (e.g., ACLs) - ex: applications/ftp/=E2=80=A6 - ex: applications/tftp/... - ex: applications/smtp/=E2=80=A6 - ex: utm/custom-objects/Adult_Material/... - ex: utm/custom-objects/Religion/... - ex: utm/custom-objects/Gambling/=E2=80=A6 It would be good if we could determine if there are any other = "resource-independent=E2=80=9D configuration categories here. As for "resource-dependent=E2=80=9D configuration, I wonder how this is = supposed to work=E2=80=A6more specifically, I wonder to what extent the = IETF needs to care how if works (perhaps the same could be said for = "resource-independent=E2=80=9D configuration too). For instance, in = JUNOS, there exists a config-template that is automatically applied to = any user-defined interface, such as: junos-default-profile { interfaces { "$junos-interface-ifd-name" { unit "$junos-underlying-interface-unit" { family inet; family inet6; } } } } Notably, RFC 8342 mentions templates as something that might be expanded = when converting to . Actually, knowing that it is = that is subject to validation, it seems that much (if not = all) of should be consumed when converting to = - agreed?=20 > 2) Please treat NETCONF and RESTCONF equally. Currently the draft = speaks only to how it impacts NETCONF, but it should equally show how = RESTCONF in impacted. > [Qiufang Ma] Thanks for bringing it to my attention, I would take = RESTCONF into consideration and see how the proposal works on RESTCONF. It will work nearly transparently, if not completely so. =20 What you need to do, mostly, is search/replace =E2=80=9CNETCONF=E2=80=9D = =E2=80=94> =E2=80=9CYANG-driven management protocols such as NETCONF and = RESTCONF=E2=80=9D =E2=80=A6and also =E2=80=9C=E2=80=A6The following example is provided = using NETCONF, but could just as easily be provided using RESTCONF, in = XML or JSON.=E2=80=9D Alternately, and perhaps better, have a mix of = both kinds of examples throughout your document. > 3) The =E2=80=9Cbasic mode=E2=80=9D term sounds too close to the = =E2=80=9Cwith-defaults=E2=80=9D basic modes...can we please pick another = name (e.g., system-datastore-operating-mode)? =20 > [Qiufang Ma] Yes, agree. Actually we don=E2=80=99t really want to = cause any confusion or misunderstandings. This term controls whether the = device will update with system configuration change or not.=20 > Your proposal looks good to me, other suggestions are also welcome = here. Ack. > Regarding your question below I don=E2=80=99t feel ready to comment = on it yet. I do understand the JUNOS model and, if it is compatible, = would recommend considering, as it is implemented and seems to be = working well enough. That said, it might be the case that every vendor = has defined their own way and each needs to be documented in turn... > [Qiufang Ma] The issue we try to resolve here is that in order for = system configurations being referenced or to make sure a successful = validation when the system configuration is in the when/must statement, = the system configuration must be retrieved from firstly = and then copied into manually, which is cumbersome. In this = case, we would like to define some kind of mechanism to synchronize = system configuration into . Currently two system configuration = data handling modes are specified. One will update with any = system configuration change automatically, and the other will not, so = that the implementer may choose the mode more suitable for them. = Hopefully this clarifies what we try to do. Please feel free to comment = or suggest. I=E2=80=99m beginning to think that: auto-copying into is likely never a good idea, because it = violates the definition of having in doesn=E2=80=99t make sense, since the tweaks = wouldn=E2=80=99t go thru --> validation. I=E2=80=99m wondering if a model like below would work for everyone - = thoughts? +-------------+ +-----------+ | | | | | (ct, rw) |<---+ +--->| (ct, rw) | +-------------+ | | +-----------+ | | | | | +-----------+ | +-------->| |<--------+ | (ct, rw) | +-----------+ | +----------+ | // configuration transformations, | |-------------->| // e.g., removal of nodes marked as | (ct, ro) | // underlay | // "inactive", expansion of +----------+ | // templates v +------------+ | | // subject to validation | (ct, ro) | +------------+ | // changes applied, subject to | // local factors, e.g., missing | // resources, delays | dynamic | +-------- learned configuration configuration | +-------- system configuration datastores -----+ | +-------- default configuration | | | v v v +---------------+ | | <-- system state | (ct + cf, ro) | +---------------+ > Best Regards, > Qiufang Ma K. // contributor --Apple-Mail=_7C5CEEC4-DD69-4E5A-99BB-1CCFD3EF2F06 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 [CC-ing NETMOD, as I think this discussion belongs on that = list...please consider removing NETCONF in your reply]


Hi Qiufang,


Hi, = Kent:
Thanks for kicking off = some discussion around this draft. Please see my reply = inline.

I'm interested in this work, as it seems as if the = <system> datastore was left out of the NMDA work.


1)= I wish there were more examples, especially for = "resource-independent=E2=80=9D configuration.  I understand = well enough "resource-dependent" (dynamic) configuration, but am unclear = about what all "resource-independent=E2=80=9D entails. =  By example, JUNOS has a concept called =E2=80=9CJUNOS = defaults=E2=80=9D, which is effectively read-only and = hidden-by-default configuration that, most times, must be referenced in = order to take effect.   For instance, check the examples halfway = down this page: https://nextheader.net/2016/06/10/junos-defaults-group. =  Is this similar to what you have in mind?
[Qiufang Ma]  Yes. Physical-resource-independent system = configuration is generated when the device is powered on and has nothing = to do with the physical resource. Loopback interface may be the most = common physical-resource-independent system configuration. To my = knowledge, many vendors ((e.g., Huawei NE40E and Cisco IOS XR) will = provide several predefined user groups and/or task groups which are used = for authentication, authorization and accounting (AAA) services. Since = these configurations are provided by the device/system, they could =  be treated as system configuration. I think your  information = about the predefined hidden configuration group which contains = preconfigured values should also be treated the same. 
More examples about system configurations would be worked on = and added in  the next version of the = draft.:)

Right, the loopback interface is a common example = but, more generally, I think "resource-independent=E2=80=9D = configuration might fall into exactly two categories:

1) config that is =E2=80=9Capplied=E2= =80=9D immediately
- ex: interfaces/lo0/unit = 0/family [ inet inet6 ]
- ex: system/login/password/minimum-length=3D6
- = ex: system/ports/console-type=3Dvt100
= - ex: system/syslog/archive-size=3D256k;
- = ex: = chassis/cluster/fabric-monitoring/heartbeat-interval=3D1000;
= - ex: security/zones/security-zone/junos-host;
- ex: = security/alg/sip/inactive-media-timeout=3D120;

2) config that is =E2=80=9Capplied=E2= =80=9D only after being referenced by other config (e.g., = ACLs)
= - ex: applications/ftp/=E2=80=A6
- = ex: applications/tftp/...
- ex: = applications/smtp/=E2=80=A6
- ex: = utm/custom-objects/Adult_Material/...
- = ex: utm/custom-objects/Religion/...
- = ex: utm/custom-objects/Gambling/=E2=80=A6

It would be good if we could determine = if there are any other "resource-independent=E2=80=9D configuration = categories here.

As for "resource-dependent=E2=80=9D configuration, I = wonder how this is supposed to work=E2=80=A6more specifically, I wonder = to what extent the IETF needs to care how if works (perhaps the same = could be said for "resource-independent=E2=80=9D configuration = too).  For instance, in JUNOS, there exists a config-template that = is automatically applied to any user-defined interface, such = as:

  =   junos-default-profile {
      =   interfaces {
        =     "$junos-interface-ifd-name" {
  =               unit = "$junos-underlying-interface-unit" {
      =               family inet;
                =     family inet6;
      =           }
    =         }
      =   }
    }

Notably, RFC 8342 mentions templates as something = that might be expanded when converting <running> to = <intended>.  Actually, knowing that it is <intended> = that is subject to validation, it seems that much (if not all) of = <system> should be consumed when converting = <running> to <intended> - agreed? 


2) Please treat = NETCONF and RESTCONF equally.  Currently the draft speaks only = to how it impacts NETCONF, but it should equally show how RESTCONF = in impacted.
[Qiufang Ma] Thanks for bringing it to my attention, I would = take RESTCONF into consideration and see how the proposal works on = RESTCONF.

It will work nearly transparently, if not = completely so.   

What you = need to do, mostly, is search/replace =E2=80=9CNETCONF=E2=80=9D =E2=80=94&= gt; =E2=80=9CYANG-driven management protocols such as NETCONF and = RESTCONF=E2=80=9D

=E2=80=A6and also = =E2=80=9C=E2=80=A6The following example is provided using NETCONF, but = could just as easily be provided using RESTCONF, in XML or JSON.=E2=80=9D =   Alternately, and perhaps better, have a mix of both kinds of = examples throughout your document.


3) The =E2=80=9Cbasic = mode=E2=80=9D term sounds too close to the =E2=80=9Cwith-default= s=E2=80=9D basic modes...can we please pick another name (e.g., = system-datastore-operating-mode)?  
[Qiufang Ma] Yes, agree. Actually we don=E2=80=99t really = want to cause any confusion or misunderstandings. This term controls = whether the device will update <running> with system configuration = change or not. 
Your proposal looks good to me, other suggestions are also = welcome = here.

Ack.


 Regarding your question below I don=E2=80=99t feel ready to = comment on it yet.  I do understand the JUNOS model and, if it = is compatible, would recommend considering, as it is = implemented and seems to be working well enough.  That said, it = might be the case that every vendor has defined their own way and = each needs to be documented in turn...
[Qiufang Ma] = The issue we try to resolve here is that in order for system = configurations being referenced or to make sure a successful validation = when the system configuration is in the when/must statement, the system = configuration must be retrieved from <operational> firstly and = then copied into <running> manually, which is cumbersome. In this = case, we would like to define some kind of mechanism to synchronize = system configuration into <running>. Currently two system = configuration data handling modes are specified. One will update = <running> with any system configuration change automatically, and = the other will not, so that the implementer may choose the mode more = suitable for them. Hopefully this clarifies what we try to do. Please = feel free to comment or = suggest.


I=E2=80=99m beginning to = think that:
  • auto-copying into = <running> is likely never a good idea, because it violates the = definition of <running>
  • having in = <operational> doesn=E2=80=99t make sense, since the tweaks = wouldn=E2=80=99t go thru <running> --> <intended> = validation.

I=E2=80=99m = wondering if a model like below would work for everyone - = thoughts?

     +-------------+   =               = +-----------+
     | <candidate> |     =             | <startup> = |
  =    |  (ct, rw)   |<---+       = +--->| (ct, rw)  |
     +-------------+   =  |       |   =  +-----------+
            |     =       |       |       =     |
            |     =     +-----------+         = |
  =           +-------->| <running> = |<--------+
                =       | (ct, rw)  |
            =           +-----------+
        =                     = |
 +----------+             =   |        // configuration = transformations,
 | <system> |-------------->|     =    // e.g., removal of nodes marked as
 | (ct, ro) | // = underlay   |        // "inactive", expansion = of
 +----------+ =              |       =  // templates
                =             v
        =               = +------------+
                =       | <intended> | // subject to = validation
                =       | (ct, ro)   |
            =           +------------+
        =                     | =        // changes applied, subject = to
  =                     =       |        // local factors, = e.g., missing
                =             |       =  // resources, delays
            =                 = |
  =      dynamic             =  |   +-------- learned configuration
      =  configuration        |   +-------- system = configuration
       datastores -----+    | =   +-------- default configuration
            =            |    |   = |
  =                     =  v    v   v
            =         +---------------+
        =             | <operational> | <-- = system state
                =     | (ct + cf, ro) |
            =         +---------------+






Best Regards,
Qiufang = Ma

K. // contributor





= --Apple-Mail=_7C5CEEC4-DD69-4E5A-99BB-1CCFD3EF2F06-- From nobody Tue Jun 29 17:56:40 2021 Return-Path: <0100017a5a6ac423-889b9d5b-51cb-4f86-8977-c5bac1e021ec-000000@amazonses.watsen.net> X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D7DEA3A0F4D; Tue, 29 Jun 2021 17:56:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.894 X-Spam-Level: X-Spam-Status: No, score=-1.894 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=amazonses.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vMs_u5zLK8Gz; Tue, 29 Jun 2021 17:56:26 -0700 (PDT) Received: from a48-94.smtp-out.amazonses.com (a48-94.smtp-out.amazonses.com [54.240.48.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E1D573A0F4A; Tue, 29 Jun 2021 17:56:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1625014584; h=From:Message-Id:Content-Type:Mime-Version:Subject:Date:In-Reply-To:Cc:To:References:Feedback-ID; bh=5o7AundQLPCa5GgKBTNBBgRhcgqoPo8U69O+tcSLsMc=; b=GJENVq/evMMhUSkmGMMtZLnIiQu5U5eHVSCtCGhJfBYivuKYjOlKEzUttTiyzSZc WxcL2Bh/PHOX/TLQ4UJEUAcOosu1f5K1psRHvXgRyRGUw8pFLGbDNwcUjObdSLApqca ysplwhDr6R2pGULnnkPAfKVCRJzaSKomZEJVULsM= From: Kent Watsen Message-ID: <0100017a5a6ac423-889b9d5b-51cb-4f86-8977-c5bac1e021ec-000000@email.amazonses.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_C8690CC8-008F-4449-8584-4E2ACDD872F1" Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.100.0.2.22\)) Date: Wed, 30 Jun 2021 00:56:24 +0000 In-Reply-To: <27560.1625013411@localhost> Cc: "Rob Wilton (rwilton)" , "anima@ietf.org" , "netmod@ietf.org" , Toerless Eckert , "Fries, Steffen" , "netconf@ietf.org" To: Michael Richardson References: <20210625190512.GB30200@faui48e.informatik.uni-erlangen.de> <5025.1624653668@localhost> <27560.1625013411@localhost> X-Mailer: Apple Mail (2.3654.100.0.2.22) Feedback-ID: 1.us-east-1.DKmIRZFhhsBhtmFMNikgwZUWVrODEw9qVcPhqJEI2DA=:AmazonSES X-SES-Outgoing: 2021.06.30-54.240.48.94 Archived-At: Subject: Re: [netconf] [Anima] revising RFC8366 -- Re: BRSKI-AE enum issue -> empty, but what's he encoding ? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Jun 2021 00:56:32 -0000 --Apple-Mail=_C8690CC8-008F-4449-8584-4E2ACDD872F1 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Jun 29, 2021, at 8:36 PM, Michael Richardson = wrote: >=20 >=20 > Rob Wilton (rwilton) wrote: >> An RFC8366bis is the right option. If the changes are minor then I = may >> be able to ease the passage through the IESG, but I can't do much to >> affect the elapsed time. If considering a bis, can we consider changing the = "pinned-domain-cert=E2=80=9D node from a X.509v3 cert to a =E2=80=9Cchoice= =E2=80=9D between that and a chain of certs? =20 In particular, from: +---- pinned-domain-cert binary To: +---- (domain-cert-format) +---- pinned-domain-cert binary +---- pinned-domain-certs binary Or, better, using ietf-crypto-types: +---- (domain-cert-format) +---- pinned-domain-cert ct:end-entity-cert-x509 +---- pinned-domain-certs ct:end-entity-cert-cms > I will prepare a draft for this week. >=20 > I thought I wrote a really nice ASCII art version of what documents = inherit > from RFC8366. I can't find it in my outbox... I wonder if I nuked the = draft > by mistake. Check this: = https://yangcatalog.org/yang-search/impact_analysis/?modtags=3Dietf-vouche= r%402017-10-25.yang&orgtags=3D&recursion=3D0&show_rfcs=3D1&show_subm=3D1&s= how_dir=3Ddependents = K. --Apple-Mail=_C8690CC8-008F-4449-8584-4E2ACDD872F1 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8

On Jun 29, 2021, at 8:36 PM, Michael Richardson <mcr+ietf@sandelman.ca> wrote:


Rob Wilton (rwilton) <rwilton@cisco.com> wrote:
An RFC8366bis is the right option.  If the = changes are minor then I may
be able to ease the passage = through the IESG, but I can't do much to
affect the = elapsed time.

If considering a bis, can we consider changing the = "pinned-domain-cert=E2=80=9D node from a X.509v3 cert to a =E2=80=9Cchoice= =E2=80=9D between that and a chain of certs?   

In particular, from:

   +---- pinned-domain-cert               binary

To:

   +---- (domain-cert-format)
      +---- pinned-domain-cert               binary

      +---- pinned-domain-certs         =
     binary



Or, better, using =
ietf-crypto-types:

   +---- (domain-cert-format)
      +---- pinned-domain-cert          =
     ct:end-entity-cert-x509

      +---- pinned-domain-certs         =
     ct:end-entity-cert-cms





I will prepare a draft for = this week.

I thought I wrote a really nice = ASCII art version of what documents inherit
from RFC8366. =  I can't find it in my outbox... I wonder if I nuked the draft
by mistake.

Check this:

https://yangcatalog.org/yang-search/impact_analysis/?modtags=3D= ietf-voucher%402017-10-25.yang&orgtags=3D&recursion=3D0&show_r= fcs=3D1&show_subm=3D1&show_dir=3Ddependents


K.


= --Apple-Mail=_C8690CC8-008F-4449-8584-4E2ACDD872F1-- From nobody Tue Jun 29 18:23:44 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1E0DB3A1147; Tue, 29 Jun 2021 18:23:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.877 X-Spam-Level: X-Spam-Status: No, score=-1.877 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, NO_DNS_FOR_FROM=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, T_SPF_HELO_TEMPERROR=0.01, T_SPF_TEMPERROR=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZLz0fhXTMvcn; Tue, 29 Jun 2021 18:23:21 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1113B3A10E7; Tue, 29 Jun 2021 18:23:08 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 14A6C389DC; Tue, 29 Jun 2021 21:25:11 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 5GFoYZ_2JBNt; Tue, 29 Jun 2021 21:25:08 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 77F15389DA; Tue, 29 Jun 2021 21:25:08 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 91B9222B; Tue, 29 Jun 2021 21:23:04 -0400 (EDT) From: Michael Richardson To: Kent Watsen , "Rob Wilton \(rwilton\)" , "anima\@ietf.org" , "netmod\@ietf.org" , Toerless Eckert , "Fries\, Steffen" , "netconf\@ietf.org" In-Reply-To: <0100017a5a6ac423-889b9d5b-51cb-4f86-8977-c5bac1e021ec-000000@email.amazonses.com> References: <20210625190512.GB30200@faui48e.informatik.uni-erlangen.de> <5025.1624653668@localhost> <27560.1625013411@localhost> <0100017a5a6ac423-889b9d5b-51cb-4f86-8977-c5bac1e021ec-000000@email.amazonses.com> X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [netconf] [Anima] revising RFC8366 -- Re: BRSKI-AE enum issue -> empty, but what's he encoding ? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Jun 2021 01:23:35 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Kent Watsen wrote: >> Rob Wilton (rwilton) wrote: >>> An RFC8366bis is the right option. If the changes are minor then I= may >>> be able to ease the passage through the IESG, but I can't do much to >>> affect the elapsed time. > If considering a bis, can we consider changing the "pinned-domain-cer= t=E2=80=9D > node from a X.509v3 cert to a =E2=80=9Cchoice=E2=80=9D between that a= nd a chain of > certs? Yeah, I think it's a good idea. Could we also have the choice be a RPK? > Or, better, using ietf-crypto-types: :-) > Check this: > https://yangcatalog.org/yang-search/impact_analysis/?modtags=3Dietf-v= oucher%402017-10-25.yang&orgtags=3D&recursion=3D0&show_rfcs=3D1&show_subm= =3D1&show_dir=3Ddependents > Yeah, I knew about that, but others might not. I was basically trying to distill it down into a few words. =2D- ] Never tell me the odds! | ipv6 mesh network= s [ ] Michael Richardson, Sandelman Software Works | IoT architect = [ ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on rails = [ --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAmDbx3gACgkQgItw+93Q 3WX38wgAuOrFmWzGEw6pq4Rkl39TSRyswF2IgWJgSytBKxZsm0JBKBPLjCkwyPhy +TUyP2WEJgLO1FAHPOB26rBjbTp3C3JKuloZMUdZZ9MTKi34aBdhQL/5Gdkf9H71 NlKJx3fNHr5AeJTMDWirpBjNa0Tt50Ut6BrksLiaj3zxrV1YG0BuqESKii8iD/yz 59UkXSkJvZJVSjYOdP+Z0CdL/bQncTUz1xi2K/pLye+hzjCpuRVOTDQVmRq2pC/p 1ziu7XHk+0BF090Kca06cWV0SHXDNSS9/zHBOT6rU9GepWmrlCo6DM+aeS6tjN+H LtOhzLpO2w9ykG0zhQxP8ZzigTmELQ== =EN3e -----END PGP SIGNATURE----- --=-=-=-- From nobody Wed Jun 30 01:33:33 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 60BA43A131C for ; Wed, 30 Jun 2021 01:33:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.099 X-Spam-Level: X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mg-soft.si Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4iXSILBoXpSe for ; Wed, 30 Jun 2021 01:33:24 -0700 (PDT) Received: from galileo.mg-soft.si (gate.mg-soft.si [212.30.73.66]) by ietfa.amsl.com (Postfix) with ESMTP id 99CCC3A1311 for ; Wed, 30 Jun 2021 01:33:24 -0700 (PDT) Received: from [10.0.0.222] (tp-x61t.mg-soft.si [10.0.0.222]) by galileo.mg-soft.si (Postfix) with ESMTP id A7448C000664 for ; Wed, 30 Jun 2021 10:33:20 +0200 (CEST) DKIM-Filter: OpenDKIM Filter v2.11.0 galileo.mg-soft.si A7448C000664 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mg-soft.si; s=default; t=1625042000; bh=yB2eMDO/NwueayFh/QcBa2TNUgpK32wQlPVokg79iEM=; h=To:From:Subject:Date:From; b=OV2QYM0Luc0ltFJeHmFi5oq9Tt/uIWjW8EaVtc4jvp0mYMZrbh33yOmm7ZFv1uufG VuBgsh9XVkOjDS+ES0hLs1eEhhRZbkoo3skp3JAnr0BcRQopuAIf3qlzbpgyJri9es KU/mbqYiQRhazu33RblQGlTOK0EogpJiUKG3hO/1LbdC5UnZVHPTs6xNjVtq+OX9fY AL+rLxonmXEZPJtzCvC6f/v+otfoAIQZyhiXcUrjrGupmw4VPyvWqTs6HFC6hSApT6 ImsMXzbC4B5bvp7kcYPxo94VOcU5OyMPyYrXO0hvyynWDM23TDGhnIWK27OFnWo1No 3HLBxrXX+QKpA== To: Netconf From: Jernej Tuljak Message-ID: Date: Wed, 30 Jun 2021 10:33:20 +0200 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.11.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US Archived-At: Subject: [netconf] Should a NETCONF server implement YANG Library 1.1 if it does not support NETCONF NMDA? X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Jun 2021 08:33:30 -0000 Hi, I have a relatively simple question, stated in the subject. I cannot find any concrete text that would advise against, prohibit or encourage such a thing, but is ietf-yang-library@2019-01-04 intended to be used in such a way; to be implemented in a non-NMDA NETCONF server? How should a NMDA enabled NETCONF client handle a situation where :yang-library:1.1 capability is advertised by the NETCONF server, but ietf-netconf-nmda module is not (assuming that the client is also capable of acting as a legacy client)? Jernej From nobody Wed Jun 30 01:49:17 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CC2A43A13CB for ; Wed, 30 Jun 2021 01:49:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=btconnect.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zgS4WdYTzZbg for ; Wed, 30 Jun 2021 01:49:11 -0700 (PDT) Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-eopbgr80102.outbound.protection.outlook.com [40.107.8.102]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B340D3A13C9 for ; Wed, 30 Jun 2021 01:49:10 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=EqgCBvp1rdmXobRkGBhlfAo7AsYxCIfCR/LTMoI9Kebvns0uwFc78OzG4SbVjiR5++mVx2bhqTys5w5z4Kq+4EKjibr0H0K2pA7Ij+dxU0W95AQJh9ynGT2ocYWHVZzuSUltnFF/gONOleJ3CqfZoELSDofL+NyZuBotyFEtmOpbVVsKgBaeNW4Ic4DDOO9KsffM0+tyCWIrqqjuv+6kyCQnrm1ob9zqA+tDgjedl9St5N4herP0JNwdaUC0vndM5uCULTPUlEsvYnrnZbDTgTBj38ggzQ/n7YCYTYWUqTMXglYB5wqpwZ+IFvmqUYwXr5CmCD2nXvSwWGWPQeM1jw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=jz3MEijlTECo1eYoyjPxL2wOvGzsNDZe2yKopt5A0fA=; b=IQc3XTrcAKaY1FkD1AOjm7vkR7dP491/1dZnuH4wAWBzv8qQceUcl2o3g6XSVRA20gFx+KlnoSO/S8XRRFQez500ICPwe+lR/MAFcBI71FiBvuBQpvP1dZwnrewJ+bjOzS44fEEpw3tlz9A9Izjat7n50g2GaVa0zMlM70ll9Fsb3clHRFJD3N2Con02gEu6kVpB1Sij3gQ+L9nwy4rG+05jdRhl1RjiBvIc65vPL+gIQt9l1jBskI5vmhsMm7SychjGiKOupj1MvFHIlHgV0gfCfxQbNmDTi713TsuJ95KsVgZsFyrEn3A2KSiwvEBR4ZgC3GLIkjBUGzPKvSRCgQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=btconnect.com; dmarc=pass action=none header.from=btconnect.com; dkim=pass header.d=btconnect.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btconnect.onmicrosoft.com; s=selector2-btconnect-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=jz3MEijlTECo1eYoyjPxL2wOvGzsNDZe2yKopt5A0fA=; b=Vqh4NHQXy5XHHi98Mf9sQGWGS7pmjvWV4CEEQGXSpInrURtqTU0ybNOUQWaxcAlB/G+R+9m/c/dD15XhhZn5xhRMmZBWWjEFbf1hL5WkRjGmuqbW6x62WMfxUzm3ql4TnyG8C+DOuk8fJA9ATpsLCMPEXYDe6bbaLmWYvyuPdos= Received: from AM7PR07MB6248.eurprd07.prod.outlook.com (2603:10a6:20b:134::11) by AS8PR07MB7366.eurprd07.prod.outlook.com (2603:10a6:20b:2a1::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4264.7; Wed, 30 Jun 2021 08:49:06 +0000 Received: from AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::fc5d:ca7a:e2ea:ca9d]) by AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::fc5d:ca7a:e2ea:ca9d%7]) with mapi id 15.20.4287.022; Wed, 30 Jun 2021 08:49:06 +0000 From: tom petch To: Kent Watsen , Henk Birkholz CC: "netconf@ietf.org" , "garywu@cisco.com" Thread-Topic: TLS 1.3 and pre-shared-keys and raw-public-keys (was: More complications) Thread-Index: AQHXbSgm1p+QF4Pjqk2AvMPGlpA4yassPBhd Date: Wed, 30 Jun 2021 08:49:06 +0000 Message-ID: References: <0100017980c49236-7975b99d-b591-4da2-a118-f6598517c4e5-000000@email.amazonses.com> <010001798c0d947e-4d2d14f5-9f0e-450d-ac99-e18c260f0c2b-000000@email.amazonses.com> <01000179a0aa5d37-4810234e-8db2-434d-b8fa-780c1648955a-000000@email.amazonses.com> <01000179a5bdc371-b665451f-61d4-4364-9d55-e9369f3adc8e-000000@email.amazonses.com> <0100017a0aebfbf3-9e9c22e8-da12-4364-a572-8ce7fd43bf0f-000000@email.amazonses.com> <540b31e5-10a6-495f-cf44-820adb6213b3@sit.fraunhofer.de>, <0100017a5987fa69-bb2b90f9-bdd5-44f7-935f-38c568121eeb-000000@email.amazonses.com> In-Reply-To: <0100017a5987fa69-bb2b90f9-bdd5-44f7-935f-38c568121eeb-000000@email.amazonses.com> Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: watsen.net; dkim=none (message not signed) header.d=none;watsen.net; dmarc=none action=none header.from=btconnect.com; x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 7d126dd9-8296-45f2-a0ce-08d93ba3eb93 x-ms-traffictypediagnostic: AS8PR07MB7366: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6790; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM7PR07MB6248.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(136003)(39860400002)(396003)(376002)(346002)(366004)(52536014)(186003)(478600001)(54906003)(8676002)(6506007)(5660300002)(86362001)(4326008)(83380400001)(71200400001)(2906002)(53546011)(8936002)(7696005)(316002)(9686003)(76116006)(38100700002)(91956017)(66946007)(66476007)(66556008)(64756008)(66446008)(55016002)(26005)(122000001)(110136005)(33656002); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?Windows-1252?Q?/hRfApn1gR5IYquGMNYA0JpHcNuqFFBWAPPJJa5H48yjJ+JFwuPLv/BQ?= =?Windows-1252?Q?WMiNj/702bjLx5gDj+514+BlHADOXhupYRjMhNPcxx+EDxeajK6/ehuq?= =?Windows-1252?Q?X59hnsN+CxRi38gIn106//bGdMWBnmGEUnRtcG52/G32VvAb/eL5gQhv?= =?Windows-1252?Q?nYx5xZRUXJzcrg4lGuBnmgXYY/146l0XQSJloZpiQT+Xp6GN0W8k9MRS?= =?Windows-1252?Q?Wgy709fKFref1gRatGtFpsNtDCuwMjyL07e/JSnR/9rIHlH39uwFVdOA?= =?Windows-1252?Q?X+H41Kaff2es6qNpOqwMtWJ3zsDWr9zr+0PzhRJCZzjWk9adn7HY1J68?= =?Windows-1252?Q?Ov0ZeA6nbwT7srKUM8Z9V1YJrrFebSqPl0JwKCr1ci/xzeZPhdRJbkaP?= =?Windows-1252?Q?ukTGqxL8ozJFQ/L6nFZ1biGq9VYCRP8WcUbJR+RMBagLzJPn/z9anHA5?= =?Windows-1252?Q?TptEOsNsXZaKFS2bBwkly7oaK6De+WDqdF+MfQQ+2q86GZ+z8v7SbbNN?= =?Windows-1252?Q?RJP6VlWcmeYrQeaLvJzoUebfsGgGrqKikjxaD+Js2CKCiwVoef3L5O1k?= =?Windows-1252?Q?GMiOtMY2G5htVGjaKhChYHPJhxe4r5roLThyMH2RWEaFfjNkKJ3TP8SF?= =?Windows-1252?Q?3uxNyPX7S5ASmKBHl1l0RRufx+8xrWJFRzJhmAnlOJUnez4m++009o75?= =?Windows-1252?Q?S61585yR2wA8Cxk6wwKlrYBFehDvE4dv6qIEfUCMGpRjcqxYAnYrrbD2?= =?Windows-1252?Q?SNJlXVx/+gUC06G2MZSEOuW5P3KjScHmtygkMo39tOx5s0FGKlA4P5hK?= =?Windows-1252?Q?vhjrzEXRnoU/chd5HXaLsa3mPSDRixSbwjeC6hxGQzPcjgYcKcALMY1L?= =?Windows-1252?Q?36APSAo2S3j/r2fWjeQU7XJM77gx6o7qbfzw2IM5MXgvVhXBcJut9kmS?= =?Windows-1252?Q?ZXU3cgg6FuRnE1J04sKKmmX5d9+4QVkASyyqfQ04ey0ftjWjiyKZ3OPl?= =?Windows-1252?Q?VSTmKAgj/mKXTiZYRphIS6829v7nXEjUJJeXh2LUHUunRC3OrffoL7di?= =?Windows-1252?Q?foaZ05ViIH81uY/Y6t1RnPzvEnLclrenR9hVMKsO7X0qwtkotegLgSsA?= =?Windows-1252?Q?3FW+Zxmh5L3vZA2W1vkKXCVyC8cVeJbezPuE3bAGmnV9asco46+HTpgY?= =?Windows-1252?Q?ngcaAj1BXQrOp0uw8/llVVaMYxV8CaAX18uVkI5oj+DYqk5FHqxTx4Yw?= =?Windows-1252?Q?ZbWnyW5+Hb9757gu3zsEls3aw45nzd9oHxz1vHQqB8MPTaCRM+xYLU3v?= =?Windows-1252?Q?+D35xj+8GHT4qN7yYmE28tGCXb32nSBYpBE33KFT8Nm2GUnJgwK/ZtsR?= =?Windows-1252?Q?ldcFMc+3daESNUz0nzF3dRi0UWVvm6b1kUk=3D?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: btconnect.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AM7PR07MB6248.eurprd07.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 7d126dd9-8296-45f2-a0ce-08d93ba3eb93 X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Jun 2021 08:49:06.6529 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: cf8853ed-96e5-465b-9185-806bfe185e30 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: gPx1xMVB262D31u/2mQhS5yt2Eb5vYve5nFoqm094+k0Pcmm2ixBI0dHDFcnQzK/mpHNYDVJmsRLFnA5z+MNLg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8PR07MB7366 Archived-At: Subject: Re: [netconf] TLS 1.3 and pre-shared-keys and raw-public-keys (was: More complications) X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Jun 2021 08:49:16 -0000 From: Kent Watsen =0A= Sent: 29 June 2021 21:48=0A= =0A= [tweaking the Subject line]=0A= =0A= Hi Henk,=0A= =0A= I just realized that I never replied to your question below regarding urgen= cy.=0A= =0A= It would be good to get a high-level response ASAP so that a quick-patch ca= n be made that will pass the eminent SecDir review.=0A= =0A= A more thorough response would ideally be "ASAP" also, but it is the case t= hat this draft will remain open while a couple other drafts go through WGLC= , so the hard-stop window is a few weeks out yet.=0A= =0A= =0A= On IoT, there is an I-D on this =0A= draft-ietf-uta-tls13-iot-profile-01=0A= which looks comprehensive and includes a statement about a plain PSK-based = client but I am not clear that this covers the options. It does cater for = authentication by certificate followed by resumption with PSK with warnings= about early data (which may be strong enough for a Security AD) but seems = to skate over the case where no certificates are involved, in particular it= makes no reference to the two TLS I-D about the use of PSK without certifi= cates. My understanding is that you need those two I-D to make PSK without= certificates work and so the I-D is incomplete. That apart, I think that = it is the sort of TLS1.3 profile that the TLS WG expects to see for every a= pplication that uses TLS1.3 e.g Netconf must do something similar one day.= =0A= =0A= raw-public-keys are, to me, different, TLS1.3 simply treats them as another= kind of certificate (although the UTA I-D does not) and so does not create= similar issues.=0A= =0A= Tom Petch=0A= =0A= =0A= Thanks,=0A= Kent=0A= =0A= =0A= > On Jun 15, 2021, at 7:53 AM, Henk Birkholz wrote:=0A= >=0A= > Hi all,=0A= >=0A= > a fellow IETF'ler poked me to pay attention to this thread. Sorry for the= latency.=0A= >=0A= > Hm - dropping PSK support for TLS 1.3 seems to be leaving a bunch of impl= ementations in the IoT space behind that are inching towards migration, cur= rently.=0A= >=0A= > How urgent is this? I can certainly massage the current YANG module, but = (in theory) I am occupied by another SDO meeting this week.=0A= >=0A= > Viele Gr=FC=DFe,=0A= >=0A= > Henk=0A= >=0A= >=0A= > On 15.06.21 13:36, tom petch wrote:=0A= >> From: Kent Watsen =0A= >> Sent: 14 June 2021 15:27=0A= >> [CC-ing Henk, to whom a question is directed to below]=0A= >> Hi Tom,=0A= >>> Top posting a new and different issue.=0A= >> Thanks for updating the subject line.=0A= >>> server case psk references ServerKeyExchange and psk-identity-hint neit= her of which exist in TLS1.3. The client sends an extension PreSharedKeyEx= tension which contains a list of identities from which the server selects o= ne as selected-identity for which the identifier is uint16 indexing into th= e client's list. RFC8446 s.4.2.11.=0A= >>>=0A= >>> The client description also needs amending.=0A= >>>=0A= >>> TLS1.2 was extended to use tickets in this area to aid session resumpti= on; these have now gone and been replaced by this extension. I would not s= uggest adding support for tickets.=0A= >>>=0A= >>> As I may have said before, TLS 1.3 is different.=0A= >> Henk, could you help with these edits? Support for PSK and raw public = key were added to draft-ietf-netconf-tls-client-server per your request and= , if memory serves me, didn=92t you help me with the YANG update too? I s= uppose what is needed is a either a =93choice=94 statement (with cases for = 1.2 and 1.3) *or* sibling-container statements (in case it=92s necessary bo= th are configured in case, e.g., the client sends one or the other)...=0A= >> =0A= >> Or else drop support for PSK with TLS1.3 at this time because too little= is known about it outside the use for HTTP. I am starting to see I-D abou= t how to use TLS1.3 with application X, even for HTTP, and I think that su= ch an I-D will be needed for many applications with or without PSK.=0A= >> Tom Petch=0A= >>> Tom Petch=0A= >> Kent=0A= =0A= From nobody Wed Jun 30 09:09:58 2021 Return-Path: X-Original-To: netconf@ietfa.amsl.com Delivered-To: netconf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 36A153A2175 for ; Wed, 30 Jun 2021 09:09:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=btconnect.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H5DOt7i7w0_L for ; Wed, 30 Jun 2021 09:09:52 -0700 (PDT) Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-eopbgr130095.outbound.protection.outlook.com [40.107.13.95]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1503F3A2172 for ; Wed, 30 Jun 2021 09:09:51 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=UIueEGG7pDKfpqA+I8R43NR7Bup4HPh1zwmjrQGrUuVJbhMuvUGkxeyu8rZvLXOdIoAk2BOL0mmC7FItEWvviA17amvd92up/0xurpR1FcHtCUCqlUQarUpYT25HrkJ0Db2eA+ib535YWVRV+vyLJED/a1fYkpBxqFJgBNJDXBiYasmdUPAauoLbQHY2sUyaZbAHMztElXw15F39qJaQB7bAIZqr480S8PBnR7PJHnRHFuWAwVPzunAP+ZQ2X8Zdqz9oQsMWulKiE/AsoCK/AonbI+XIgLmSPtpPXtKPpbi7KeqVA9iN8HgCKepmcPGktRDSGnEv1wrarb84NWYtlw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=GyMvIqJcMHMJRIkifwS+EBXUAFV6jnCPqhlR3w8PeX0=; b=KNYdhynZBT2IO2/+vAI6LLw4lT2H/o/LlGq+VcUe9vqUuLvy2+onRdknt+V0JGcUH0oFdtErMiEOlJR6IfNrG0rEE1P4FtoFWKHcKQ51D1xMtvf5sqvfCP14HVxoYzdSguH1+vPhxfdgOhS08SJabno99nQO75asMqwpljOJckqCg6V69Gjj57AowUJbIi51WfKFWWEL49ceBKHTXeTyAOtQjPs4zG7/E/af+VixM2gW4u6Vmtvxs0dTnrJpTAraqvZF/qCNOI5//TvfZQxvRcEYPwF+u52yvo0o0YM454KvPkPDtFY9yFDLcMc+rAaSt/TFU28Rr1Y6MramTfiw9w== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=btconnect.com; dmarc=pass action=none header.from=btconnect.com; dkim=pass header.d=btconnect.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btconnect.onmicrosoft.com; s=selector2-btconnect-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=GyMvIqJcMHMJRIkifwS+EBXUAFV6jnCPqhlR3w8PeX0=; b=AG/Q3y8TDkkTWs8dU5v1rR6MR78gOVWbl3vShY/HMCdUyLbkKEQqdW9YxDk6vT2B/y4T7Il6OGM+7ycMnjFHO6PvtjXVgqhf3p7EJUUWNLJT20NjeKRP5sGXYtM/RpYKK2ZDtgncN/wWnmwGnZENSezoRIHvsH/J6zJxqUPEW90= Received: from AM7PR07MB6248.eurprd07.prod.outlook.com (2603:10a6:20b:134::11) by AM6PR07MB3845.eurprd07.prod.outlook.com (2603:10a6:209:35::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4287.16; Wed, 30 Jun 2021 16:09:49 +0000 Received: from AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::fc5d:ca7a:e2ea:ca9d]) by AM7PR07MB6248.eurprd07.prod.outlook.com ([fe80::fc5d:ca7a:e2ea:ca9d%7]) with mapi id 15.20.4287.022; Wed, 30 Jun 2021 16:09:49 +0000 From: tom petch To: Juergen Schoenwaelder CC: "netconf@ietf.org" Thread-Topic: [netconf] netconf-tls wasRe: Summary of updates Thread-Index: AQHXUU2yri0EENaQXUOJipepn/woM6r0OwUAgAAKPQCAABCh7YAADbyAgAEWW6+AAC7QAIAAQIAWgAAFfsKANv/7rg== Date: Wed, 30 Jun 2021 16:09:49 +0000 Message-ID: References: <010001798c0d947e-4d2d14f5-9f0e-450d-ac99-e18c260f0c2b-000000@email.amazonses.com> <01000179a0aa5d37-4810234e-8db2-434d-b8fa-780c1648955a-000000@email.amazonses.com> <20210525100652.fd3kbsilxscwk7yj@anna.jacobs.jacobs-university.de> <01000179a3d6eefe-455c9e3e-b42d-4704-8030-a34ae3f52b82-000000@email.amazonses.com> <20210525144040.qn24ruxiof3ydxa2@anna.jacobs.jacobs-university.de> <20210525162921.ec2l7yc276yonzfb@anna.jacobs.jacobs-university.de> , <20210526115310.gysua6ghz5xqnmfz@anna.jacobs.jacobs-university.de>, , In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: jacobs-university.de; dkim=none (message not signed) header.d=none;jacobs-university.de; dmarc=none action=none header.from=btconnect.com; x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: cf229775-53f1-452c-60d0-08d93be17c7e x-ms-traffictypediagnostic: AM6PR07MB3845: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6790; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: Q8XYtzPvEKgxTZSD41WSGuE8z0lb3/3hi5ivN5m3ogpwvYEBsH9sL8OFRzASqTxg+70lbgfamxBdhDAirmIzRKllLXdWNghyW2cTaniZgXOhrIm4SYiB5qm8N0VDwCKRMzWvEddIbimPc123f1Vj8o+C/demsff4VuIrohYA0fCJjzMaI7zToflJJHxljqB5nCOH625joRUbxj9TZPcMbIIBb+uziaGSPc7ScJ5MGJYGg4EUKgfPjWpEkeywb5ro+0/PLajG1Grwn/89gIOH+rVPrJwWihXgQxQaWXLE93BBlPCONP+LxegDO08+VUAcjWxhmNPmlcF+b6LfbjLi3/Zzndx4Vare6M0YnSeoPfUOKwgEgS3J4Tg6XS8XrEQiTAEfFOTuMgNL8n89of2PxM6SPaEzWhh73qPuDB0a3qtUcAajoQcbnFrWtIGQlGElWbR0f7r64UPQonOxKNYIsCzpDy+CqD33ImDA/YV4S1A5P6vEdKEycMeYTibdzXBDurugnO/JFt5dw9ryhkR0tOefQIPX2qp5O5yCbR2a8j5VXFqi1/b16J8qvwGU8sOzaTYAvhWcoM4IbStrOz8k+EPFkUVJVYJPJgF1q/BF/u7mS1LIkfyYNtxxtNruupcWSQeFMxQJCV33fxr/t/OlSnKheVrQ8CSbwtYo6K7QVzN8LixZl9lFhEgX+vKbLsHOuzbec54TsCBRtBQrRO1z2OHKlUD5R7fKAid0ocNgmKHfok/l6hDRd7bCK19Ugpz/62Hd7FApzJRpiCvQRqkT95AM2rqKCW+7/TTBIdzmxqbLIybjcik9XPy8RQYbyKiu x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM7PR07MB6248.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(136003)(366004)(346002)(396003)(376002)(39860400002)(4326008)(86362001)(33656002)(478600001)(83380400001)(186003)(966005)(6916009)(52536014)(316002)(7696005)(66946007)(15650500001)(9686003)(8936002)(71200400001)(122000001)(38100700002)(2906002)(55016002)(6506007)(8676002)(76116006)(91956017)(64756008)(66556008)(5660300002)(66476007)(26005)(66446008); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?iso-8859-1?Q?YBDYJ1haY5wLbawcIKGRZadifpt4SEdQZ5KIVDlGla1nqZAzh767Pr4/U+?= =?iso-8859-1?Q?EJQJXs2Bg2b/E15iKpEJhOXUYGKJTtY+TgsDZzmsLUOEbZvS37awW+Uz7/?= =?iso-8859-1?Q?AOZppqwRaZX5+yEDpgCco5Rd1Y803NiqFFRjzffMyYpuggs4kK+0Ei8IBo?= =?iso-8859-1?Q?alZOpgfAEVS1zr+NH/26+4vgU54uioTimAI9cnEmUhfQlC5MW9J7FTsiJp?= =?iso-8859-1?Q?DepElmYq3guNVdYvKQv10XhH/HLCAr30y+8SAQKuUNVd1tmfagMn86NlDC?= =?iso-8859-1?Q?PCHRIBgjAl1GhsnHR0cY4Nnozkr0W/9uScBMWo/pbgslqZHCtmIazdIxzm?= =?iso-8859-1?Q?9XEnKPFvx6yE3XRCiS3FyWGQjSu2rCit6mzk88rPOghnhSeKlscoRe2EB4?= =?iso-8859-1?Q?qS38tE8xeH3JoUN1+hQacH3jycRsQbFn3nL0SFYU3oRSfXywDrrHlmZl5m?= =?iso-8859-1?Q?RzNgJte83Rrf+gZyEoD3kbJV9CqoKBhcw4Uegnzrtf8E1CgToscs7P+g9T?= =?iso-8859-1?Q?hOgtnjjiwPDR/lfhAjpv1PPcTFHmvKdxILda0LQ24d4zXBVVjzrSFlJ16E?= =?iso-8859-1?Q?QeoHRAsp7AhN4UcU6olA0/4xst/89Cg8C8CsW9MyRtL5vJjHEliKQQ6p+S?= =?iso-8859-1?Q?Qu/3RSpM8RkkvRK8dfTAT5fBsoWrSTs5k7KvqGP4is2es/olH7yjzeDQ35?= =?iso-8859-1?Q?3ZN1a5yi+q+cGgIH2m5LvJ5sy6U4WDv88Fz7YVy3E8X4EPjDWpaP8S6EyK?= =?iso-8859-1?Q?CdAeCZeP07NpxlgEop2QcbE7U5OU1Aj9o6uYgefE6j81tWgeOafS3O21zT?= =?iso-8859-1?Q?a6wjIdNUHUn89W4GV3CsKtiJd8fucHOTU7OjgP0r8pZ2psjvYgLCitmoaY?= =?iso-8859-1?Q?ygK7BiV1CwlMw1IxezZllUsIcpWHaMRmnBt1XxB343xCzai76oXowVJdzA?= =?iso-8859-1?Q?5AWeQZkYYe1T6iIXoDKfTkjnyr3yurdRj2nOVo68YFErZ3MFoTRwOH9OSE?= =?iso-8859-1?Q?U5TK+TUWFYwIfu2A15g5FexMxyLBObv60Br5+8zmdJslXUmQmW9piZFwK1?= =?iso-8859-1?Q?TF+z1C+BE1NIFV/W58Lx5kgPGfo+L2K2f2Ay6U7C7C3OCRtcMlKaex38t1?= =?iso-8859-1?Q?8ibnoEtdB2Lwy4v9XUebtJKkfweJUTX5EenxKRyVJFChEMMUl3WrPfC0zC?= =?iso-8859-1?Q?GoTx2OrzkS5n3j9T/VgR7s/faxfcb3gSacEBVAho3lOG3/RfiaO3DNQi0l?= =?iso-8859-1?Q?GNXlBCBqSOfSPlGN/DNKzccycIsc2x8y80uEyvJJmb6uMrCje/Qp8k4ffg?= =?iso-8859-1?Q?LtIi7WBCLWRvXXhqFF2O73szLDrelqWRpKLYP22OY8vIMXw=3D?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: btconnect.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AM7PR07MB6248.eurprd07.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: cf229775-53f1-452c-60d0-08d93be17c7e X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Jun 2021 16:09:49.1435 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: cf8853ed-96e5-465b-9185-806bfe185e30 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: FRSZogQ5Fi6cNg2zLkoDUtYSr9X7y/Qv/fhq1VAWhHnoRe+77IvT48LBL51LtSrDyu3mn+Qfsp0G2y0BcnzJ6A== X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR07MB3845 Archived-At: Subject: Re: [netconf] netconf-tls wasRe: Summary of updates X-BeenThere: netconf@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: NETCONF WG list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Jun 2021 16:09:57 -0000 From: netconf on behalf of tom petch =0A= Sent: 26 May 2021 17:12=0A= From: netconf on behalf of tom petch =0A= Sent: 26 May 2021 16:45=0A= From: Juergen Schoenwaelder =0A= Sent: 26 May 2021 12:53=0A= =0A= This sounds like 'lets wait and see what comes out of the RFC 6125=0A= revision' is the best approach for now.=0A= =0A= =0A= Oh dear; I got the wrong WG. The 6125 update I-D exists and is in the UTA = WG (which I am not subscribed to but saw a cross post thereof). It is quite= short and is very much an updates, requiring the use of SAN, prohibiting C= N-ID. It was published on April 1st, 2021:-)=0A= =0A= =0A= =0A= Following on to this, =0A= draft-ietf-uta-rfc6125bis-00 =0A= has now been submitted. So far, the proposal is for the use of CN to be r= emoved and the rules for the use of asterisk to be changed, although I do n= ot yet see the former in the I-D -00!=0A= Still time to wait and see!=0A= =0A= As the I-D says, there is an issue tracker in the personal github of one of= the authors.=0A= =0A= Tom Petch=0A= =0A= =0A= WFM=0A= =0A= I do have an element of FUD about this (as I have about TLS1.3) which hopef= ully will diminish with time.=0A= =0A= Tom Petch=0A= =0A= /js=0A= =0A= On Wed, May 26, 2021 at 09:23:17AM +0000, tom petch wrote:=0A= > From: Juergen Schoenwaelder =0A= > Sent: 25 May 2021 17:29=0A= >=0A= > On Tue, May 25, 2021 at 03:58:10PM +0000, tom petch wrote:=0A= > >=0A= > > I guess someone (Tom?) should review RFC 5539 from the TLS 1.3=0A= > > perspective to tell the WG if any changes are needed so that the WG=0A= > > can take an informed decision whether an update of RFC 5539 is=0A= > > necessary or whether what we have is good enough.=0A= > >=0A= > > =0A= > > Well, I tend to forget that RFC5539 is obsolete, obsoleted by RFC7589 w= hich is X.509 certificate only; no PSK, no naked public keys. My concerns = with TLS1.3 mostly relate to PSK which allows data to flow before the hands= hake is complete, before authentication is complete, which is a problem for= some applications as I mentioned before; but staying with X.509 authentica= tion only for Netconf makes life simpler for a 7589bis, replace 1.2 by 1.3 = and think about the extensions to see what may be needed.=0A= > >=0A= >=0A= > So regarding a possible update of RFC 7589, what is needed?=0A= >=0A= > + Require TLS 1.3 (update section 8)=0A= >=0A= > Which extensions should one think about? Do you mean RFC 8773 or=0A= > something else?=0A= >=0A= > =0A= > It is more a question of going through 8446 s.4.2 s.9.2 to see what we wa= nt by way of an Application Profile. Thus I would like to prohibit PSK but= that prohibits session resumption which is fine by me but I have limited e= xposure to what the world is doing so may be it is not that simple.=0A= >=0A= > There is another problem which I see as larger and that is that the TAPS = WG is revising RFC6125 and this leans heavily on that RFC and that might ta= ke a year or two to get revised. I don't have a sense of where a 6125bis i= s going.=0A= >=0A= > Tom Petch=0A= >=0A= > /js=0A= >=0A= > --=0A= > Juergen Schoenwaelder Jacobs University Bremen gGmbH=0A= > Phone: +49 421 200 3587 Campus Ring 1 | 28759 Bremen | Germany=0A= > Fax: +49 421 200 3103 =0A= =0A= --=0A= Juergen Schoenwaelder Jacobs University Bremen gGmbH=0A= Phone: +49 421 200 3587 Campus Ring 1 | 28759 Bremen | Germany=0A= Fax: +49 421 200 3103 =0A= =0A= _______________________________________________=0A= netconf mailing list=0A= netconf@ietf.org=0A= https://www.ietf.org/mailman/listinfo/netconf=0A= =0A= _______________________________________________=0A= netconf mailing list=0A= netconf@ietf.org=0A= https://www.ietf.org/mailman/listinfo/netconf=0A=