diff options
Diffstat (limited to 'vnfs/TestVNF/netconftemplates/netconftemplates/ietf-tls-server@2016-11-02.yang')
| -rw-r--r-- | vnfs/TestVNF/netconftemplates/netconftemplates/ietf-tls-server@2016-11-02.yang | 141 |
1 files changed, 141 insertions, 0 deletions
diff --git a/vnfs/TestVNF/netconftemplates/netconftemplates/ietf-tls-server@2016-11-02.yang b/vnfs/TestVNF/netconftemplates/netconftemplates/ietf-tls-server@2016-11-02.yang new file mode 100644 index 00000000..6a15a551 --- /dev/null +++ b/vnfs/TestVNF/netconftemplates/netconftemplates/ietf-tls-server@2016-11-02.yang @@ -0,0 +1,141 @@ +<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="m-1"> + <data xmlns="urn:ietf:params:xml:ns:yang:ietf-netconf-monitoring">module ietf-tls-server { + yang-version 1.1; + namespace "urn:ietf:params:xml:ns:yang:ietf-tls-server"; + prefix tlss; + + import ietf-inet-types { + prefix inet; + reference + "RFC 6991: Common YANG Data Types"; + } + + import ietf-keystore { + prefix ks; + reference + "RFC YYYY: Keystore Model"; + } + + organization + "IETF NETCONF (Network Configuration) Working Group"; + contact + "WG Web: <http://tools.ietf.org/wg/netconf/> + WG List: <mailto:netconf@ietf.org> + + WG Chair: Mehmet Ersue + <mailto:mehmet.ersue@nsn.com> + + WG Chair: Mahesh Jethanandani + <mailto:mjethanandani@gmail.com> + + Editor: Kent Watsen + <mailto:kwatsen@juniper.net>"; + description + "This module defines a reusable grouping for a TLS server that + can be used as a basis for specific TLS server instances. + + Copyright (c) 2014 IETF Trust and the persons identified as + authors of the code. All rights reserved. + + Redistribution and use in source and binary forms, with or + without modification, is permitted pursuant to, and subject + to the license terms contained in, the Simplified BSD + License set forth in Section 4.c of the IETF Trust's + Legal Provisions Relating to IETF Documents + (http://trustee.ietf.org/license-info). + + This version of this YANG module is part of RFC XXXX; see + the RFC itself for full legal notices."; + + revision 2016-11-02 { + description + "Initial version"; + reference + "RFC XXXX: TLS Client and Server Models"; + } + + grouping non-listening-tls-server-grouping { + description + "A reusable grouping for a TLS server that can be used as a + basis for specific TLS server instances."; + container certificates { + description + "The list of certificates the TLS server will present when + establishing a TLS connection in its Certificate message, + as defined in Section 7.4.2 in RRC 5246."; + reference + "RFC 5246: + The Transport Layer Security (TLS) Protocol Version 1.2"; + list certificate { + key "name"; + min-elements 1; + description + "An unordered list of certificates the TLS server can pick + from when sending its Server Certificate message."; + reference + "RFC 5246: The TLS Protocol, Section 7.4.2"; + leaf name { + type leafref { + path "/ks:keystore/ks:private-keys/ks:private-key/ks:certificate-chains/ks:certificate-chain/ks:name"; + } + description + "The name of the certificate in the keystore."; + } + } + } + + container client-auth { + description + "A reference to a list of trusted certificate authority (CA) + certificates and a reference to a list of trusted client + certificates."; + leaf trusted-ca-certs { + type leafref { + path "/ks:keystore/ks:trusted-certificates/ks:name"; + } + description + "A reference to a list of certificate authority (CA) + certificates used by the TLS server to authenticate + TLS client certificates."; + } + + leaf trusted-client-certs { + type leafref { + path "/ks:keystore/ks:trusted-certificates/ks:name"; + } + description + "A reference to a list of client certificates used by + the TLS server to authenticate TLS client certificates. + A clients certificate is authenticated if it is an + exact match to a configured trusted client certificate."; + } + } + } + + grouping listening-tls-server-grouping { + description + "A reusable grouping for a TLS server that can be used as a + basis for specific TLS server instances."; + leaf address { + type inet:ip-address; + description + "The IP address of the interface to listen on. The TLS + server will listen on all interfaces if no value is + specified. Please note that some addresses have special + meanings (e.g., '0.0.0.0' and '::')."; + } + + leaf port { + type inet:port-number; + description + "The local port number on this interface the TLS server + listens on. When this grouping is used, it is RECOMMENDED + that refine statement is used to either set a default port + value or to set mandatory true."; + } + + uses non-listening-tls-server-grouping; + } +} +</data> +</rpc-reply> |