RFC 8995: Bootstrapping Remote Secure Key Infrastructure (BRSKI)

This document specifies automated bootstrapping of an Autonomic Control Plane. To do this, a Secure Key Infrastructure is bootstrapped. This is done using…

Read RFC 8995 on the RFC Editor

Outgoing relationships (41 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3
Normative reference — RFC 3688: The IETF XML Registry
Normative reference — RFC 4086: Randomness Requirements for Security
Normative reference — RFC 6241: Network Configuration Protocol (NETCONF)
Normative reference — RFC 4648: The Base16, Base32, and Base64 Data Encodings
Normative reference — RFC 6020: YANG - A Data Modeling Language for the Network Configuration Protocol (NETCONF)
Normative reference — RFC 4862: IPv6 Stateless Address Autoconfiguration
Normative reference — RFC 7950: The YANG 1.1 Data Modeling Language
Normative reference — RFC 8040: RESTCONF Protocol
Normative reference — RFC 5652: Cryptographic Message Syntax (CMS)
Normative reference — RFC 3748: Extensible Authentication Protocol (EAP)
Normative reference — RFC 7230: Hypertext Transfer Protocol (HTTP/1.1): Message Syntax and Routing
Normative reference — RFC 8259: The JavaScript Object Notation (JSON) Data Interchange Format
Normative reference — RFC 3339: Date and Time on the Internet: Timestamps
Normative reference — RFC 6125: Representation and Verification of Domain-Based Application Service Identity within Internet Public Key Infrastructure Using X.509 (PKIX) Certificates in the Context of Transport Layer Security (TLS)
Normative reference — RFC 7231: Hypertext Transfer Protocol (HTTP/1.1): Semantics and Content
Normative reference — RFC 8610: Concise Data Definition Language (CDDL): A Notational Convention to Express Concise Binary Object Representation (CBOR) and JSON Data Structures
Normative reference — RFC 6763: DNS-Based Service Discovery
Normative reference — RFC 6762: Multicast DNS
Normative reference — RFC 3927: Dynamic Configuration of IPv4 Link-Local Addresses
Normative reference — RFC 7951: JSON Encoding of Data Modeled with YANG
Normative reference — RFC 5272: Certificate Management over CMS (CMC)
Normative reference — RFC 8407: Guidelines for Authors and Reviewers of Documents Containing YANG Data Models
Normative reference — RFC 4519: Lightweight Directory Access Protocol (LDAP): Schema for User Applications
Normative reference — RFC 7030: Enrollment over Secure Transport
Normative reference — RFC 7469: Public Key Pinning Extension for HTTP
Normative reference — RFC 8368: Using an Autonomic Control Plane for Stable Connectivity of Network Operations, Administration, and Maintenance (OAM)
Normative reference — RFC 8366: A Voucher Artifact for Bootstrapping Protocols
Informative reference — RFC 2131: Dynamic Host Configuration Protocol
Informative reference — RFC 8340: YANG Tree Diagrams
Informative reference — RFC 2663: IP Network Address Translator (NAT) Terminology and Considerations
Informative reference — RFC 7258: Pervasive Monitoring Is an Attack
Informative reference — RFC 7228: Terminology for Constrained-Node Networks
Informative reference — RFC 6960: X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP
Informative reference — RFC 7435: Opportunistic Security: Some Protection Most of the Time
Informative reference — RFC 7575: Autonomic Networking: Definitions and Design Goals
Informative reference — RFC 5209: Network Endpoint Assessment (NEA): Overview and Requirements
Informative reference — RFC 6961: The Transport Layer Security (TLS) Multiple Certificate Status Request Extension

Incoming relationships (5 related RFCs)

Normatively referenced by — RFC 9222: Guidelines for Autonomic Service Agents
Informatively referenced by — RFC 9030: An Architecture for IPv6 over the Time-Slotted Channel Hopping Mode of IEEE 802.15.4 (6TiSCH)
Informatively referenced by — RFC 9483: Lightweight Certificate Management Protocol (CMP) Profile
Informatively referenced by — RFC 9810: Internet X.509 Public Key Infrastructure -- Certificate Management Protocol (CMP)
Informatively referenced by — RFC 9908: Clarification and Enhancement of the CSR Attributes Definition in RFC 7030