module Cisco-IOS-XR-lib-keychain-oper {

    yang-version 1;

    namespace
      "http://cisco.com/ns/yang/Cisco-IOS-XR-lib-keychain-oper";

    prefix lib-keychain-oper;

    import Cisco-IOS-XR-types {
      prefix xr;
    }
    import cisco-semver {
      prefix semver;
    }

    include Cisco-IOS-XR-lib-keychain-oper-sub1 {
      revision-date "2019-04-05";
    }

    organization "Cisco Systems, Inc.";

    contact
      "Cisco Systems, Inc.
Customer Service

Postal: 170 West Tasman Drive
San Jose, CA 95134

Tel: +1 800 553-NETS

E-mail: cs-yang@cisco.com";

    description
      "This module contains a collection of YANG definitions
for Cisco IOS-XR lib-keychain package operational data.

This module contains definitions
for the following management objects:
  keychain: Keychain operational data

Copyright (c) 2013-2019 by Cisco Systems, Inc.
All rights reserved.";

    revision "2019-04-05" {
      description
        "Establish semantic version baseline.";
    }

    revision "2018-01-31" {
      description
        "Fixed incorrect plural rendering.";
    }

    revision "2015-01-07" {
      description "IOS XR 5.3.1 revision.";
    }

    semver:module-version "1.0.1";

    container keychain {
      config false;
      description
        "Keychain operational data";
      container keys {
        description
          "List of configured key names";
        list key {
          key "key-name";
          description "Configured key name";
          leaf key-name {
            type xr:Cisco-ios-xr-string;
            description "Key name";
          }

          container key {
            description "Key properties";
            list key-id {
              description "key id";
              container macsec {
                description
                  "To check if it's a macsec key";
                leaf is-macsec-key {
                  type boolean;
                  description
                    "To check if it's a macsec key";
                }
              }  // container macsec

              container send-lifetime {
                description
                  "Lifetime of the key";
                leaf start {
                  type string;
                  description
                    "Key life start time in format : day-of-week
month date-of-month HH:MM:SS year eg: Thu Feb 1
18:32:14 2011";
                }

                leaf end {
                  type string;
                  description
                    "Key life end time in format : day-of-week month
date-of-month HH:MM:SS year eg: Thu Feb 1 18:32
:14 2011";
                }

                leaf duration {
                  type string;
                  units "second";
                  description
                    "Duration of the key in seconds. value 0xffffffff
reflects infinite, never expires, is configured ";
                }

                leaf is-always-valid {
                  type boolean;
                  description
                    "Is TRUE if duration is 0xffffffff ";
                }

                leaf is-valid-now {
                  type boolean;
                  description
                    "Is TRUE if current time is betweenstart and end
lifetime , else FALSE";
                }
              }  // container send-lifetime

              container accept-lifetime {
                description
                  "Accept Lifetime of the key";
                leaf start {
                  type string;
                  description
                    "Key life start time in format : day-of-week
month date-of-month HH:MM:SS year eg: Thu Feb 1
18:32:14 2011";
                }

                leaf end {
                  type string;
                  description
                    "Key life end time in format : day-of-week month
date-of-month HH:MM:SS year eg: Thu Feb 1 18:32
:14 2011";
                }

                leaf duration {
                  type string;
                  units "second";
                  description
                    "Duration of the key in seconds. value 0xffffffff
reflects infinite, never expires, is configured ";
                }

                leaf is-always-valid {
                  type boolean;
                  description
                    "Is TRUE if duration is 0xffffffff ";
                }

                leaf is-valid-now {
                  type boolean;
                  description
                    "Is TRUE if current time is betweenstart and end
lifetime , else FALSE";
                }
              }  // container accept-lifetime

              leaf key-string {
                type string;
                description "Key string";
              }

              leaf type {
                type Enc;
                description
                  "Type of key encryption";
              }

              leaf key-id {
                type string;
                description "Key ID";
              }

              leaf cryptographic-algorithm {
                type Cryto-algo;
                description
                  "Cryptographic algorithm";
              }
            }  // list key-id
          }  // container key

          leaf accept-tolerance {
            type string;
            description
              "Accept tolerance is infinite if value is
0xffffffff";
          }
        }  // list key
      }  // container keys
    }  // container keychain
  }  // module Cisco-IOS-XR-lib-keychain-oper