draft-ietf-sidr-rpki-oob-setup-02.txt | draft-ietf-sidr-rpki-oob-setup-03.txt | |||
---|---|---|---|---|
Network Working Group R. Austein | Network Working Group R. Austein | |||
Internet-Draft Dragon Research Labs | Internet-Draft Dragon Research Labs | |||
Intended status: Standards Track October 16, 2015 | Intended status: Standards Track October 19, 2015 | |||
Expires: April 18, 2016 | Expires: April 21, 2016 | |||
An Out-Of-Band Setup Protocol For RPKI Production Services | An Out-Of-Band Setup Protocol For RPKI Production Services | |||
draft-ietf-sidr-rpki-oob-setup-02 | draft-ietf-sidr-rpki-oob-setup-03 | |||
Abstract | Abstract | |||
This note describes a simple out-of-band protocol to ease setup of | This note describes a simple out-of-band protocol to ease setup of | |||
the RPKI provisioning and publication protocols between two parties. | the RPKI provisioning and publication protocols between two parties. | |||
The protocol is encoded in a small number of XML messages, which can | The protocol is encoded in a small number of XML messages, which can | |||
be passed back and forth by any mutually agreeable secure means. | be passed back and forth by any mutually agreeable secure means. | |||
This setup protocol is not part of the provisioning or publication | This setup protocol is not part of the provisioning or publication | |||
protocol, rather, it is intended to simplify configuration of these | protocol, rather, it is intended to simplify configuration of these | |||
skipping to change at page 1, line 38 | skipping to change at page 1, line 38 | |||
Internet-Drafts are working documents of the Internet Engineering | Internet-Drafts are working documents of the Internet Engineering | |||
Task Force (IETF). Note that other groups may also distribute | Task Force (IETF). Note that other groups may also distribute | |||
working documents as Internet-Drafts. The list of current Internet- | working documents as Internet-Drafts. The list of current Internet- | |||
Drafts is at http://datatracker.ietf.org/drafts/current/. | Drafts is at http://datatracker.ietf.org/drafts/current/. | |||
Internet-Drafts are draft documents valid for a maximum of six months | Internet-Drafts are draft documents valid for a maximum of six months | |||
and may be updated, replaced, or obsoleted by other documents at any | and may be updated, replaced, or obsoleted by other documents at any | |||
time. It is inappropriate to use Internet-Drafts as reference | time. It is inappropriate to use Internet-Drafts as reference | |||
material or to cite them other than as "work in progress." | material or to cite them other than as "work in progress." | |||
This Internet-Draft will expire on April 18, 2016. | This Internet-Draft will expire on April 21, 2016. | |||
Copyright Notice | Copyright Notice | |||
Copyright (c) 2015 IETF Trust and the persons identified as the | Copyright (c) 2015 IETF Trust and the persons identified as the | |||
document authors. All rights reserved. | document authors. All rights reserved. | |||
This document is subject to BCP 78 and the IETF Trust's Legal | This document is subject to BCP 78 and the IETF Trust's Legal | |||
Provisions Relating to IETF Documents | Provisions Relating to IETF Documents | |||
(http://trustee.ietf.org/license-info) in effect on the date of | (http://trustee.ietf.org/license-info) in effect on the date of | |||
publication of this document. Please review these documents | publication of this document. Please review these documents | |||
skipping to change at page 9, line 49 | skipping to change at page 9, line 49 | |||
publisher_handle: The publisher_handle attribute is the repository's | publisher_handle: The publisher_handle attribute is the repository's | |||
name for the publisher. This may or may not match the | name for the publisher. This may or may not match the | |||
publisher_handle attribute in the publisher's <publisher_request/> | publisher_handle attribute in the publisher's <publisher_request/> | |||
message. | message. | |||
sia_base: The sia_base attribute is the rsync:// URI for the base of | sia_base: The sia_base attribute is the rsync:// URI for the base of | |||
the publication space allocated to the publisher. | the publication space allocated to the publisher. | |||
rrdp_notification_uri: The optional rrdp_notification_uri attribute | rrdp_notification_uri: The optional rrdp_notification_uri attribute | |||
is the URI for the RRDP notification file covering the publication | is the URI for the RRDP notification file covering the publication | |||
space allocated to the publisher | space allocated to the publisher ([I-D.ietf-sidr-delta-protocol]). | |||
([I-D.tbruijnzeels-sidr-delta-protocol]). | ||||
repository_bpki_ta: The <repository_bpki_ta/> element is the | repository_bpki_ta: The <repository_bpki_ta/> element is the | |||
repository's BPKI identity, a self-signed X.509 BPKI certificate. | repository's BPKI identity, a self-signed X.509 BPKI certificate. | |||
--------------------------------------------------------------------- | --------------------------------------------------------------------- | |||
<repository_response | <repository_response | |||
publisher_handle="Alice/Bob-42" | publisher_handle="Alice/Bob-42" | |||
rrdp_notification_uri="https://rpki.example/rrdp/notify.xml" | rrdp_notification_uri="https://rpki.example/rrdp/notify.xml" | |||
service_uri="http://a.example/publication/Alice/Bob-42" | service_uri="http://a.example/publication/Alice/Bob-42" | |||
sia_base="rsync://a.example/rpki/Alice/Bob-42/" | sia_base="rsync://a.example/rpki/Alice/Bob-42/" | |||
skipping to change at page 17, line 25 | skipping to change at page 17, line 25 | |||
7. Acknowledgements | 7. Acknowledgements | |||
The author would like to thank: Byron Ellacott, George Michaelson, | The author would like to thank: Byron Ellacott, George Michaelson, | |||
Leif Johansson, Matsuzaki Yoshinobu, Michael Elkins, Randy Bush, | Leif Johansson, Matsuzaki Yoshinobu, Michael Elkins, Randy Bush, | |||
Seiichi Kawamura, Tim Bruijnzeels, and anybody else who helped along | Seiichi Kawamura, Tim Bruijnzeels, and anybody else who helped along | |||
the way whose name the author has temporarily forgotten. | the way whose name the author has temporarily forgotten. | |||
8. Normative References | 8. Normative References | |||
[I-D.ietf-sidr-delta-protocol] | ||||
Bruijnzeels, T., Muravskiy, O., Weber, B., Austein, R., | ||||
and D. Mandelberg, "RPKI Repository Delta Protocol", | ||||
draft-ietf-sidr-delta-protocol-01 (work in progress), | ||||
October 2015. | ||||
[I-D.ietf-sidr-publication] | [I-D.ietf-sidr-publication] | |||
Weiler, S., Sonalker, A., and R. Austein, "A Publication | Weiler, S., Sonalker, A., and R. Austein, "A Publication | |||
Protocol for the Resource Public Key Infrastructure | Protocol for the Resource Public Key Infrastructure | |||
(RPKI)", draft-ietf-sidr-publication-07 (work in | (RPKI)", draft-ietf-sidr-publication-07 (work in | |||
progress), September 2015. | progress), September 2015. | |||
[I-D.tbruijnzeels-sidr-delta-protocol] | ||||
Bruijnzeels, T., Muravskiy, O., Weber, B., Austein, R., | ||||
and D. Mandelberg, "RPKI Repository Delta Protocol", | ||||
draft-tbruijnzeels-sidr-delta-protocol-03 (work in | ||||
progress), December 2014. | ||||
[RFC5280] Cooper, D., Santesson, S., Farrell, S., Boeyen, S., | [RFC5280] Cooper, D., Santesson, S., Farrell, S., Boeyen, S., | |||
Housley, R., and W. Polk, "Internet X.509 Public Key | Housley, R., and W. Polk, "Internet X.509 Public Key | |||
Infrastructure Certificate and Certificate Revocation List | Infrastructure Certificate and Certificate Revocation List | |||
(CRL) Profile", RFC 5280, May 2008. | (CRL) Profile", RFC 5280, May 2008. | |||
[RFC5652] Housley, R., "Cryptographic Message Syntax (CMS)", RFC | [RFC5652] Housley, R., "Cryptographic Message Syntax (CMS)", RFC | |||
5652, STD 70, September 2009. | 5652, STD 70, September 2009. | |||
[RFC6492] Huston, G., Loomans, R., Ellacott, B., and R. Austein, "A | [RFC6492] Huston, G., Loomans, R., Ellacott, B., and R. Austein, "A | |||
Protocol for Provisioning Resource Certificates", RFC | Protocol for Provisioning Resource Certificates", RFC | |||
End of changes. 6 change blocks. | ||||
12 lines changed or deleted | 11 lines changed or added | |||
This html diff was produced by rfcdiff 1.42. The latest version is available from http://tools.ietf.org/tools/rfcdiff/ |