sync from today's OpenDaylight master (using YangModels#556 sync.sh)

experimental/odp/aaa-app-config.yang

@@ -0,0 +1,63 @@
+module aaa-app-config {
+    yang-version 1;
+    namespace "urn:opendaylight:aaa:app:config";
+    prefix "aaa-app-config";
+    organization "OpenDaylight";
+
+    contact "[email protected], [email protected]";
+
+    revision "2017-06-19" {
+        description "aaa-app-config is used to manipulate aspects of AAA clustered-app-config.";
+    }
+
+    grouping string-pair {
+        description "Used to store string key/value pairs.";
+        leaf pair-key {
+            type string;
+            description "The key.";
+        }
+        leaf pair-value {
+            type string;
+            description "The value.";
+        }
+    }
+
+    container shiro-configuration {
+        description "AAA shiro related configuration.";
+        list main {
+            key "pair-key";
+            uses string-pair;
+            ordered-by user;
+            description "The main section of shiro.ini.";
+        }
+
+        list urls {
+            key "pair-key";
+            uses string-pair;
+            ordered-by user;
+            description "The urls section of shiro.ini.";
+        }
+    }
+
+    container datastore-config {
+        leaf store {
+            description "Available data store types.";
+            type enumeration {
+                enum h2-data-store {
+                    description "H2 DataStore.";
+                }
+            }
+        }
+        leaf time-to-live {
+            description "Time to live for tokens in second.";
+             type uint64;
+             default 36000;
+         }
+         leaf time-to-wait {
+             description "Time to wait for tokens in second.";
+             type uint64;
+             default 3600;
+         }
+    }
+
+}

experimental/odp/aaa-cert-mdsal.yang

@@ -0,0 +1,117 @@
+/*
+Copyright (c) 2016 Inocybe Technology All rights reserved.
+
+This program and the accompanying materials are made available under the
+terms of the Eclipse Public License v1.0 which accompanies this distribution,
+and is available at http://www.eclipse.org/legal/epl-v10.html INTERNAL
+*/
+module aaa-cert-mdsal {
+    yang-version 1;
+    namespace "urn:opendaylight:yang:aaa:cert:mdsal";
+    prefix "aaa-cert-mdsal";
+
+    revision 2016-03-21 {
+        description "Initial revision";
+    }
+
+    description
+        "Yang model definition for aaa certificate using MDSAL";
+
+    contact
+        "[email protected]";
+
+    grouping node-certificate {
+        leaf alias {
+            description "network node certificate alias";
+            type string;
+        }
+        leaf x500-certificate {
+            description "network node certificate";
+            type string;
+        }
+    }
+
+    grouping keystore {
+        leaf name {
+            description "keystore name";
+            type string;
+        }
+        leaf alias {
+            description "key alias";
+            type string;
+        }
+        leaf store-password {
+            description "keystore password";
+            type string;
+        }
+        leaf dname {
+            description "X.500 Distinguished Names should be in the following formate
+                CN=commonName
+                OU=organizationUnit
+                O=organizationName
+                L=localityName
+                S=stateName
+                C=country";
+            type string;
+        }
+        leaf validity {
+            description "validity";
+            type int32;
+        }
+        leaf key-alg {
+            description "supported key geneartion algorithmes are DSA and RSA";
+            type string;
+        }
+        leaf sign-alg {
+            description "supported sign algorithmes for DSA the default sign Alg is SHA1withDSA and for RSA the
+                default sign Alg is MD5withRSA";
+            type string;
+        }
+        leaf keysize {
+            description "key size is 1024 or 2048";
+            type int32;
+        }
+        leaf keystoreFile {
+            description "keystore file as Binary";
+            type binary;
+        }
+    }
+
+    grouping cipher-suite {
+        list cipher-suites {
+             leaf suiteName {
+                 type string;
+             }
+        }
+    }
+
+    grouping ssl-data {
+        leaf bundle-name {
+            description "bundle name";
+            type string;
+            mandatory true;
+        }
+        leaf tls-protocols {
+            description "the TLS supported protocols (SSLv2Hello,TLSv1.1,TLSv1.2) the selected protocol should be seperated by ',' char";
+            type string;
+        }
+        container odl-keystore {
+            uses keystore;
+        }
+        container trust-keystore {
+            uses keystore;
+        }
+        uses cipher-suite;
+    }
+
+    container key-stores {
+        leaf id {
+            type string;
+            mandatory true;
+        }
+        list ssl-data {
+            key bundle-name;
+            uses ssl-data;
+        }
+    }
+}

experimental/odp/aaa-cert-rpc.yang

@@ -0,0 +1,87 @@
+/*
+Copyright (c) 2015 Inocybe Technology All rights reserved.
+
+This program and the accompanying materials are made available under the
+terms of the Eclipse Public License v1.0 which accompanies this distribution,
+and is available at http://www.eclipse.org/legal/epl-v10.html INTERNAL
+*/
+
+module aaa-cert-rpc {
+    yang-version 1;
+    namespace "urn:opendaylight:yang:aaa:cert:rpc";
+    prefix "aaa-cert-rpc";
+
+    description
+        "defination of node certificate grouping and Rpc calls of certificate manipulation";
+
+    contact
+        "[email protected]";
+
+    revision "2015-12-15" {
+        description
+            "Initial revision.";
+    }
+
+    rpc getODLCertificate {
+        description
+            "Get the ODL keystore certificate";
+        output {
+           leaf odl-cert {
+               type string;
+           }
+        }
+    }
+
+    rpc getODLCertificateReq {
+        description
+            "Generate a certificate request from the ODL keystore to be signed by a CA";
+        output {
+           leaf odl-cert-req {
+               type string;
+           }
+        }
+    }
+
+    rpc setODLCertifcate {
+        description
+            "The certifcate should be generated based on
+            a certifcate request generated from the ctl.jks
+            keystore otherwise the certifcated will not be added to ctl keystore";
+        input {
+            leaf odl-cert-alias {
+                type string;
+            }
+           leaf odl-cert {
+               type string;
+           }
+        }
+    }
+
+    rpc setNodeCertifcate {
+        description
+            "Set the certifcate of the network node that will communicate with opendaylight through TLS connection";
+        input {
+           leaf node-alias {
+               type string;
+           }
+           leaf node-cert {
+               type string;
+           }
+        }
+    }
+
+    rpc getNodeCertifcate {
+        description
+            "Get the network node certificate based on node alias";
+        input {
+           leaf node-alias {
+               type string;
+           }
+        }
+        output {
+            leaf node-cert {
+                type string;
+            }
+        }
+    }
+}

experimental/odp/aaa-cert.yang

@@ -0,0 +1,100 @@
+/*
+Copyright (c) 2015 Inocybe Technology All rights reserved.
+
+This program and the accompanying materials are made available under the
+terms of the Eclipse Public License v1.0 which accompanies this distribution,
+and is available at http://www.eclipse.org/legal/epl-v10.html INTERNAL
+*/
+
+module aaa-cert {
+    yang-version 1;
+    namespace "urn:opendaylight:yang:aaa:cert";
+    prefix aaa-cert;
+
+    description
+        "Service definition for aaa certificate";
+
+    contact
+        "[email protected]";
+
+    revision "2015-11-26" {
+        description
+            "Initial revision.";
+    }
+
+    container aaa-cert-service-config {
+        leaf use-config {
+            description "Use the configuration data to create the keystores";
+            type boolean;
+            default false;
+        }
+        leaf use-mdsal {
+            description "Use Mdsal as Data store for the keystore and certificates";
+            type boolean;
+            default false;
+        }
+        leaf bundle-name {
+            description "bundle name of the default TLS config in MdsaL";
+            type string;
+        }
+        container ctlKeystore {
+            leaf name {
+                description "keystore name default is ctl";
+                type string;
+            }
+            leaf alias {
+                description "key alias";
+                type string;
+            }
+            leaf store-password {
+                description "keystore password";
+                type string;
+            }
+            leaf dname {
+                description "X.500 Distinguished Names should be in the following formate
+                    CN=commonName
+                    OU=organizationUnit
+                    O=organizationName
+                    L=localityName
+                    S=stateName
+                    C=country";
+                type string;
+            }
+            leaf validity {
+                description "validity";
+                type int32;
+            }
+            leaf key-alg {
+                description "The supported key generation algorithms i.e: DSA or RSA";
+                type string;
+            }
+            leaf sign-alg {
+                description "The supported sign algorithmes i.e: SHA1withDSA or SHA1withRSA";
+                type string;
+            }
+            leaf keysize {
+                description "the key size i.e: 1024";
+                type int32;
+            }
+            leaf tls-protocols {
+                description "the TLS supported protocols SSLv2Hello,TLSv1.1,TLSv1.2";
+                type string;
+            }
+            list cipher-suites {
+                 leaf suite-name {
+                     type string;
+                 }
+            }
+        }
+        container trustKeystore {
+            leaf name {
+                description "keystore name default is truststore";
+                type string;
+            }
+            leaf store-password {
+                description "keystore password";
+                type string;
+            }
+        }
+    }
+}