module iana-tls-profile {

    yang-version 1.1;

    namespace
      "urn:ietf:params:xml:ns:yang:iana-tls-profile";

    prefix ianatp;

    organization "IANA";

    contact
      "        Internet Assigned Numbers Authority

     Postal: ICANN
             12025 Waterfront Drive, Suite 300
             Los Angeles, CA  90094-2536
             United States

     Tel:    +1 310 301 5800
     Email:  iana@iana.org>";

    description
      "This module contains the YANG definition for the (D)TLS profile.

     Copyright (c) 2025 IETF Trust and the persons identified as
     authors of the code.  All rights reserved.

     Redistribution and use in source and binary forms, with or
     without modification, is permitted pursuant to, and subject
     to the license terms contained in, the Revised BSD License
     set forth in Section 4.c of the IETF Trust's Legal Provisions
     Relating to IETF Documents
     (http://trustee.ietf.org/license-info).

     All revisions of IETF and IANA published modules can be found
     at the YANG Parameters registry
     (https://www.iana.org/assignments/yang-parameters).

     The initial version of this YANG module is part of RFC 9761;
     see the RFC itself for full legal notices.

     The latest version of this YANG module is available at
     https://www.iana.org/assignments/yang-parameters.";

    revision "2025-04-18" {
      description "Initial revision.";
      reference
        "RFC 9761: Manufacturer Usage Description (MUD) for TLS and
        	  DTLS Profiles for Internet of Things (IoT) Devices";

    }


    typedef extension-type {
      type uint16;
      description
        "Extension type in the TLS ExtensionType Values registry as
       defined in Section 7 of RFC 8447.";
    }

    typedef supported-group {
      type uint16;
      description
        "Supported Group in the TLS Supported Groups registry as
       defined in Section 9 of RFC 8447.";
    }

    typedef signature-algorithm {
      type uint16;
      description
        "Signature algorithm in the TLS SignatureScheme registry as
       defined in Section 11 of RFC 8446.";
    }

    typedef psk-key-exchange-mode {
      type uint8;
      description
        "Pre-shared key exchange mode in the TLS PskKeyExchangeMode
       registry as defined in Section 11 of RFC 8446.";
    }

    typedef application-protocol {
      type string;
      description
        "Application-Layer Protocol Negotiation (ALPN) Protocol ID
       registry as defined in Section 6 of RFC 7301.";
    }

    typedef cert-compression-algorithm {
      type uint16;
      description
        "Certificate compression algorithm in TLS Certificate
       Compression Algorithm IDs registry as defined in
       Section 7.3 of RFC 8879.";
    }

    typedef cipher-algorithm {
      type uint16;
      description
        "Cipher suite in TLS Cipher Suites registry
       as discussed in Section 11 of RFC 8446.";
    }

    typedef tls-version {
      type enumeration {
        enum "tls12" {
          value 1;
          description
            "TLS Protocol Version 1.2.

           TLS 1.2 ClientHello contains
           0x0303 in 'legacy_version'.";
          reference
            "RFC 5246: The Transport Layer Security (TLS) Protocol
            	  Version 1.2";

        }
        enum "tls13" {
          value 2;
          description
            "TLS Protocol Version 1.3.

           TLS 1.3 ClientHello contains a
           supported_versions extension with 0x0304
           contained in its body and the ClientHello contains
           0x0303 in 'legacy_version'.";
          reference
            "RFC 8446: The Transport Layer Security (TLS) Protocol
            	  Version 1.3";

        }
      }
      description
        "Indicates the TLS version.";
    }

    typedef dtls-version {
      type enumeration {
        enum "dtls12" {
          value 1;
          description
            "DTLS Protocol Version 1.2.

           DTLS 1.2 ClientHello contains
           0xfefd in 'legacy_version'.";
          reference
            "RFC 6347: Datagram Transport Layer Security 1.2";

        }
        enum "dtls13" {
          value 2;
          description
            "DTLS Protocol Version 1.3.

           DTLS 1.3 ClientHello contains a
           supported_versions extension with 0x0304
           contained in its body and the ClientHello contains
           0xfefd in 'legacy_version'.";
          reference
            "RFC 9147: Datagram Transport Layer Security 1.3";

        }
      }
      description
        "Indicates the DTLS version.";
    }
  }  // module iana-tls-profile