Hi Lada,

The schema trees are just those defined by the groupings in the 
ssh-client-server and tis-client-server drafts (which are pending Shepherd 
write-up).

I found the issues using Yangson to validate an "ietf-netconf-client" instance 
(which uses both groupings) and it was failing.  That's when I realized that 
the 'must' expressions seemed to be wrong...

Following are the diffs for the fixes.  Could you please review the first one 
or few to confirm that the fix is good?

  SSH: 
https://github.com/netconf-wg/ssh-client-server/commit/6d984148a49a48b79d8db2ec72315d14755e14d7
 
<https://github.com/netconf-wg/ssh-client-server/commit/6d984148a49a48b79d8db2ec72315d14755e14d7>
  TLS: 
https://github.com/netconf-wg/tls-client-server/commit/b90fd3466313a0c6f33a42a0141d1d77d81f844c
 
<https://github.com/netconf-wg/tls-client-server/commit/b90fd3466313a0c6f33a42a0141d1d77d81f844c>

Thanks!
Kent


> On Aug 18, 2022, at 3:15 AM, Ladislav Lhotka 
> <[email protected]> wrote:
> 
> Hi Kent,
> 
> can you show the schema tree, or a relevant part of it?
> 
> Lada
> 
> Dne 17. 08. 22 v 23:08 Kent Watsen napsal(a):
>> Given a must-expression like this:
>>    uses ts:local-or-truststore-public-keys-grouping {
>>       refine "local-or-truststore/truststore/truststore-reference" {
>>          must 
>> 'derived-from-or-self(deref(.)/../ts:public-key/ts:public-key-format, 
>> "ct:ssh-public-key-format")';
>>       }
>>    }
>> Where "ts:public-key" is a list, currently the expression evals true if 
>> there is just one element in the list having 
>> public-key-format="ct:ssh-public-key-format", but it is needed to eval true 
>> only when *all* the elements have that value.
>> Any pro-tips?  I think I saw this posted before, but can't find it now...
>> K.
>> _______________________________________________
>> netmod mailing list
>> [email protected]
>> https://www.ietf.org/mailman/listinfo/netmod
> 
> -- 
> Ladislav Lhotka <[email protected]>
> Head, CZ.NIC Labs
> PGP Key ID: 0xB8F92B08A9F76C67
> 
> _______________________________________________
> netmod mailing list
> [email protected]
> https://www.ietf.org/mailman/listinfo/netmod

_______________________________________________
netmod mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/netmod

Reply via email to