module openconfig-keychain {

    yang-version 1;

    namespace
      "http://openconfig.net/yang/oc-keychain";

    prefix oc-keychain;

    import openconfig-extensions {
      prefix oc-ext;
    }
    import openconfig-keychain-types {
      prefix oc-keychain-types;
    }
    import openconfig-types {
      prefix oc-types;
    }
    import openconfig-yang-types {
      prefix oc-yang;
    }

    organization "OpenConfig working group";

    contact
      "OpenConfig working group
www.openconfig.net";

    description
      "This module describes a YANG model for keychain configuration
and management. These keys can be changed frequently to
increase security in long-lived connections. A keychain can be used
for authenticaion in a number of scenarios, including in routing protocols
(e.g. BGP, IS-IS, OSPF).  A keychain provides a solution for storing
a number of different keys, each key string value is associated with a
specific key id, name, the lifetime that the key is valid and an
encryption algorithm.

This model defines a central location for defining named keychains,
which may be then referenced by other models such as routing protocol
management.";

    revision "2022-11-05" {
      description
        "Update key-id to a union of hex-string and uint64.";
      reference
        "0.4.0";

    }

    revision "2022-03-05" {
      description
        "Add prefix qualification to keychain-ref";
      reference
        "0.3.0";

    }

    revision "2021-12-31" {
      description
        "Add keychain-ref type to allow for a resuable reference to a keychain.";
      reference
        "0.2.0";

    }

    revision "2021-10-01" {
      description
        "Initial revision of keychain model.";
      reference
        "0.1.0";

    }

    oc-ext:openconfig-version "0.4.0";

    typedef keychain-ref {
      type leafref {
        path "/oc-keychain:keychains/oc-keychain:keychain/oc-keychain:config/oc-keychain:name";
      }
      description
        "A reference to a keychain defined on the system that can be used by
modules that require access to keychains.";
    }
  }  // module openconfig-keychain