Preliminary version of rpkid et al with all the TLS code ripped out.

Not quite ready for cutover yet, may need some conversion tools and
instructions, but checking this into a branch (well, sort of) so that
others can look at the code changes involved, try it out themselves,
etc.  At some point this will merge back into rpkid/ directory and
there will be only one, without TLS, but converting the testbed is
going to require a flag day, so need to keep the TLS version around
until then.

svn path=/rpkid.without_tls; revision=3449

1 files changed, 978 insertions, 0 deletions

diff --git a/rpkid.without_tls/left-right-schema.rng b/rpkid.without_tls/left-right-schema.rng
new file mode 100644
index 00000000..3a182ac7
--- /dev/null
+++ b/rpkid.without_tls/left-right-schema.rng
@@ -0,0 +1,978 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  $Id: left-right-schema.rnc 3302 2010-06-29 01:51:45Z sra $
+  
+  RelaxNG Schema for RPKI left-right protocol.
+  
+  libxml2 (including xmllint) only groks the XML syntax of RelaxNG, so
+  run the compact syntax through trang to get XML syntax.
+  
+  Copyright (C) 2009-2010  Internet Systems Consortium ("ISC")
+  
+  Permission to use, copy, modify, and distribute this software for any
+  purpose with or without fee is hereby granted, provided that the above
+  copyright notice and this permission notice appear in all copies.
+  
+  THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
+  REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+  AND FITNESS.  IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
+  INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+  LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
+  OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+  PERFORMANCE OF THIS SOFTWARE.
+  
+  Portions copyright (C) 2007-2008  American Registry for Internet Numbers ("ARIN")
+  
+  Permission to use, copy, modify, and distribute this software for any
+  purpose with or without fee is hereby granted, provided that the above
+  copyright notice and this permission notice appear in all copies.
+  
+  THE SOFTWARE IS PROVIDED "AS IS" AND ARIN DISCLAIMS ALL WARRANTIES WITH
+  REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+  AND FITNESS.  IN NO EVENT SHALL ARIN BE LIABLE FOR ANY SPECIAL, DIRECT,
+  INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+  LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
+  OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+  PERFORMANCE OF THIS SOFTWARE.
+-->
+<grammar ns="http://www.hactrn.net/uris/rpki/left-right-spec/" xmlns="http://relaxng.org/ns/structure/1.0" datatypeLibrary="http://www.w3.org/2001/XMLSchema-datatypes">
+  <!-- Top level PDU -->
+  <start>
+    <element name="msg">
+      <attribute name="version">
+        <data type="positiveInteger">
+          <param name="maxInclusive">1</param>
+        </data>
+      </attribute>
+      <choice>
+        <group>
+          <attribute name="type">
+            <value>query</value>
+          </attribute>
+          <zeroOrMore>
+            <ref name="query_elt"/>
+          </zeroOrMore>
+        </group>
+        <group>
+          <attribute name="type">
+            <value>reply</value>
+          </attribute>
+          <zeroOrMore>
+            <ref name="reply_elt"/>
+          </zeroOrMore>
+        </group>
+      </choice>
+    </element>
+  </start>
+  <!-- PDUs allowed in a query -->
+  <define name="query_elt" combine="choice">
+    <ref name="self_query"/>
+  </define>
+  <define name="query_elt" combine="choice">
+    <ref name="bsc_query"/>
+  </define>
+  <define name="query_elt" combine="choice">
+    <ref name="parent_query"/>
+  </define>
+  <define name="query_elt" combine="choice">
+    <ref name="child_query"/>
+  </define>
+  <define name="query_elt" combine="choice">
+    <ref name="repository_query"/>
+  </define>
+  <define name="query_elt" combine="choice">
+    <ref name="list_roa_requests_query"/>
+  </define>
+  <define name="query_elt" combine="choice">
+    <ref name="list_resources_query"/>
+  </define>
+  <define name="query_elt" combine="choice">
+    <ref name="list_published_objects_query"/>
+  </define>
+  <define name="query_elt" combine="choice">
+    <ref name="list_received_resources_query"/>
+  </define>
+  <!-- PDUs allowed in a reply -->
+  <define name="reply_elt" combine="choice">
+    <ref name="self_reply"/>
+  </define>
+  <define name="reply_elt" combine="choice">
+    <ref name="bsc_reply"/>
+  </define>
+  <define name="reply_elt" combine="choice">
+    <ref name="parent_reply"/>
+  </define>
+  <define name="reply_elt" combine="choice">
+    <ref name="child_reply"/>
+  </define>
+  <define name="reply_elt" combine="choice">
+    <ref name="repository_reply"/>
+  </define>
+  <define name="reply_elt" combine="choice">
+    <ref name="list_resources_reply"/>
+  </define>
+  <define name="reply_elt" combine="choice">
+    <ref name="list_roa_requests_reply"/>
+  </define>
+  <define name="reply_elt" combine="choice">
+    <ref name="list_published_objects_reply"/>
+  </define>
+  <define name="reply_elt" combine="choice">
+    <ref name="list_received_resources_reply"/>
+  </define>
+  <define name="reply_elt" combine="choice">
+    <ref name="report_error_reply"/>
+  </define>
+  <!-- Tag attributes for bulk operations -->
+  <define name="tag">
+    <optional>
+      <attribute name="tag">
+        <data type="token">
+          <param name="maxLength">1024</param>
+        </data>
+      </attribute>
+    </optional>
+  </define>
+  <!--
+    Combinations of action and type attributes used in later definitions.
+    The same patterns repeat in most of the elements in this protocol.
+  -->
+  <define name="ctl_create">
+    <attribute name="action">
+      <value>create</value>
+    </attribute>
+    <ref name="tag"/>
+  </define>
+  <define name="ctl_set">
+    <attribute name="action">
+      <value>set</value>
+    </attribute>
+    <ref name="tag"/>
+  </define>
+  <define name="ctl_get">
+    <attribute name="action">
+      <value>get</value>
+    </attribute>
+    <ref name="tag"/>
+  </define>
+  <define name="ctl_list">
+    <attribute name="action">
+      <value>list</value>
+    </attribute>
+    <ref name="tag"/>
+  </define>
+  <define name="ctl_destroy">
+    <attribute name="action">
+      <value>destroy</value>
+    </attribute>
+    <ref name="tag"/>
+  </define>
+  <!-- Base64 encoded DER stuff -->
+  <define name="base64">
+    <data type="base64Binary">
+      <param name="maxLength">512000</param>
+    </data>
+  </define>
+  <!--
+    Base definition for all fields that are really just SQL primary indices
+    sql_id = xsd:nonNegativeInteger
+  -->
+  <!--
+    ...except that fields containing SQL primary indicies don't belong
+    in this protocol, so they're turninging into handles.
+    Length restriction is a MySQL implementation issue.
+    Handles are case-insensitive (because SQL is, among other reasons).
+  -->
+  <define name="object_handle">
+    <data type="string">
+      <param name="maxLength">255</param>
+      <param name="pattern">[\-_A-Za-z0-9]*</param>
+    </data>
+  </define>
+  <!-- URIs -->
+  <define name="uri">
+    <data type="anyURI">
+      <param name="maxLength">4096</param>
+    </data>
+  </define>
+  <!-- Name fields imported from up-down protocol -->
+  <define name="up_down_name">
+    <data type="token">
+      <param name="maxLength">1024</param>
+    </data>
+  </define>
+  <!-- Resource lists -->
+  <define name="asn_list">
+    <data type="string">
+      <param name="maxLength">512000</param>
+      <param name="pattern">[\-,0-9]*</param>
+    </data>
+  </define>
+  <define name="ipv4_list">
+    <data type="string">
+      <param name="maxLength">512000</param>
+      <param name="pattern">[\-,0-9/.]*</param>
+    </data>
+  </define>
+  <define name="ipv6_list">
+    <data type="string">
+      <param name="maxLength">512000</param>
+      <param name="pattern">[\-,0-9/:a-fA-F]*</param>
+    </data>
+  </define>
+  <!-- <self/> element -->
+  <define name="self_bool">
+    <optional>
+      <attribute name="rekey">
+        <value>yes</value>
+      </attribute>
+    </optional>
+    <optional>
+      <attribute name="reissue">
+        <value>yes</value>
+      </attribute>
+    </optional>
+    <optional>
+      <attribute name="revoke">
+        <value>yes</value>
+      </attribute>
+    </optional>
+    <optional>
+      <attribute name="run_now">
+        <value>yes</value>
+      </attribute>
+    </optional>
+    <optional>
+      <attribute name="publish_world_now">
+        <value>yes</value>
+      </attribute>
+    </optional>
+    <optional>
+      <attribute name="revoke_forgotten">
+        <value>yes</value>
+      </attribute>
+    </optional>
+  </define>
+  <define name="self_payload">
+    <optional>
+      <attribute name="use_hsm">
+        <choice>
+          <value>yes</value>
+          <value>no</value>
+        </choice>
+      </attribute>
+    </optional>
+    <optional>
+      <attribute name="crl_interval">
+        <data type="positiveInteger"/>
+      </attribute>
+    </optional>
+    <optional>
+      <attribute name="regen_margin">
+        <data type="positiveInteger"/>
+      </attribute>
+    </optional>
+    <optional>
+      <element name="bpki_cert">
+        <ref name="base64"/>
+      </element>
+    </optional>
+    <optional>
+      <element name="bpki_glue">
+        <ref name="base64"/>
+      </element>
+    </optional>
+  </define>
+  <define name="self_handle">
+    <attribute name="self_handle">
+      <ref name="object_handle"/>
+    </attribute>
+  </define>
+  <define name="self_query" combine="choice">
+    <element name="self">
+      <ref name="ctl_create"/>
+      <ref name="self_handle"/>
+      <ref name="self_bool"/>
+      <ref name="self_payload"/>
+    </element>
+  </define>
+  <define name="self_reply" combine="choice">
+    <element name="self">
+      <ref name="ctl_create"/>
+      <ref name="self_handle"/>
+    </element>
+  </define>
+  <define name="self_query" combine="choice">
+    <element name="self">
+      <ref name="ctl_set"/>
+      <ref name="self_handle"/>
+      <ref name="self_bool"/>
+      <ref name="self_payload"/>
+    </element>
+  </define>
+  <define name="self_reply" combine="choice">
+    <element name="self">
+      <ref name="ctl_set"/>
+      <ref name="self_handle"/>
+    </element>
+  </define>
+  <define name="self_query" combine="choice">
+    <element name="self">
+      <ref name="ctl_get"/>
+      <ref name="self_handle"/>
+    </element>
+  </define>
+  <define name="self_reply" combine="choice">
+    <element name="self">
+      <ref name="ctl_get"/>
+      <ref name="self_handle"/>
+      <ref name="self_payload"/>
+    </element>
+  </define>
+  <define name="self_query" combine="choice">
+    <element name="self">
+      <ref name="ctl_list"/>
+    </element>
+  </define>
+  <define name="self_reply" combine="choice">
+    <element name="self">
+      <ref name="ctl_list"/>
+      <ref name="self_handle"/>
+      <ref name="self_payload"/>
+    </element>
+  </define>
+  <define name="self_query" combine="choice">
+    <element name="self">
+      <ref name="ctl_destroy"/>
+      <ref name="self_handle"/>
+    </element>
+  </define>
+  <define name="self_reply" combine="choice">
+    <element name="self">
+      <ref name="ctl_destroy"/>
+      <ref name="self_handle"/>
+    </element>
+  </define>
+  <!-- <bsc/> element.  Key parameters hardwired for now. -->
+  <define name="bsc_bool">
+    <optional>
+      <attribute name="generate_keypair">
+        <value>yes</value>
+      </attribute>
+      <optional>
+        <attribute name="key_type">
+          <value>rsa</value>
+        </attribute>
+      </optional>
+      <optional>
+        <attribute name="hash_alg">
+          <value>sha256</value>
+        </attribute>
+      </optional>
+      <optional>
+        <attribute name="key_length">
+          <value>2048</value>
+        </attribute>
+      </optional>
+    </optional>
+  </define>
+  <define name="bsc_handle">
+    <attribute name="bsc_handle">
+      <ref name="object_handle"/>
+    </attribute>
+  </define>
+  <define name="bsc_payload">
+    <optional>
+      <element name="signing_cert">
+        <ref name="base64"/>
+      </element>
+    </optional>
+    <optional>
+      <element name="signing_cert_crl">
+        <ref name="base64"/>
+      </element>
+    </optional>
+  </define>
+  <define name="bsc_pkcs10">
+    <optional>
+      <element name="pkcs10_request">
+        <ref name="base64"/>
+      </element>
+    </optional>
+  </define>
+  <define name="bsc_query" combine="choice">
+    <element name="bsc">
+      <ref name="ctl_create"/>
+      <ref name="self_handle"/>
+      <ref name="bsc_handle"/>
+      <ref name="bsc_bool"/>
+      <ref name="bsc_payload"/>
+    </element>
+  </define>
+  <define name="bsc_reply" combine="choice">
+    <element name="bsc">
+      <ref name="ctl_create"/>
+      <ref name="self_handle"/>
+      <ref name="bsc_handle"/>
+      <ref name="bsc_pkcs10"/>
+    </element>
+  </define>
+  <define name="bsc_query" combine="choice">
+    <element name="bsc">
+      <ref name="ctl_set"/>
+      <ref name="self_handle"/>
+      <ref name="bsc_handle"/>
+      <ref name="bsc_bool"/>
+      <ref name="bsc_payload"/>
+    </element>
+  </define>
+  <define name="bsc_reply" combine="choice">
+    <element name="bsc">
+      <ref name="ctl_set"/>
+      <ref name="self_handle"/>
+      <ref name="bsc_handle"/>
+      <ref name="bsc_pkcs10"/>
+    </element>
+  </define>
+  <define name="bsc_query" combine="choice">
+    <element name="bsc">
+      <ref name="ctl_get"/>
+      <ref name="self_handle"/>
+      <ref name="bsc_handle"/>
+    </element>
+  </define>
+  <define name="bsc_reply" combine="choice">
+    <element name="bsc">
+      <ref name="ctl_get"/>
+      <ref name="self_handle"/>
+      <ref name="bsc_handle"/>
+      <ref name="bsc_payload"/>
+      <ref name="bsc_pkcs10"/>
+    </element>
+  </define>
+  <define name="bsc_query" combine="choice">
+    <element name="bsc">
+      <ref name="ctl_list"/>
+      <ref name="self_handle"/>
+    </element>
+  </define>
+  <define name="bsc_reply" combine="choice">
+    <element name="bsc">
+      <ref name="ctl_list"/>
+      <ref name="self_handle"/>
+      <ref name="bsc_handle"/>
+      <ref name="bsc_payload"/>
+      <ref name="bsc_pkcs10"/>
+    </element>
+  </define>
+  <define name="bsc_query" combine="choice">
+    <element name="bsc">
+      <ref name="ctl_destroy"/>
+      <ref name="self_handle"/>
+      <ref name="bsc_handle"/>
+    </element>
+  </define>
+  <define name="bsc_reply" combine="choice">
+    <element name="bsc">
+      <ref name="ctl_destroy"/>
+      <ref name="self_handle"/>
+      <ref name="bsc_handle"/>
+    </element>
+  </define>
+  <!-- <parent/> element -->
+  <define name="parent_handle">
+    <attribute name="parent_handle">
+      <ref name="object_handle"/>
+    </attribute>
+  </define>
+  <define name="parent_bool">
+    <optional>
+      <attribute name="rekey">
+        <value>yes</value>
+      </attribute>
+    </optional>
+    <optional>
+      <attribute name="reissue">
+        <value>yes</value>
+      </attribute>
+    </optional>
+    <optional>
+      <attribute name="revoke">
+        <value>yes</value>
+      </attribute>
+    </optional>
+    <optional>
+      <attribute name="revoke_forgotten">
+        <value>yes</value>
+      </attribute>
+    </optional>
+  </define>
+  <define name="parent_payload">
+    <optional>
+      <attribute name="peer_contact_uri">
+        <ref name="uri"/>
+      </attribute>
+    </optional>
+    <optional>
+      <attribute name="sia_base">
+        <ref name="uri"/>
+      </attribute>
+    </optional>
+    <optional>
+      <ref name="bsc_handle"/>
+    </optional>
+    <optional>
+      <ref name="repository_handle"/>
+    </optional>
+    <optional>
+      <attribute name="sender_name">
+        <ref name="up_down_name"/>
+      </attribute>
+    </optional>
+    <optional>
+      <attribute name="recipient_name">
+        <ref name="up_down_name"/>
+      </attribute>
+    </optional>
+    <optional>
+      <element name="bpki_cms_cert">
+        <ref name="base64"/>
+      </element>
+    </optional>
+    <optional>
+      <element name="bpki_cms_glue">
+        <ref name="base64"/>
+      </element>
+    </optional>
+  </define>
+  <define name="parent_query" combine="choice">
+    <element name="parent">
+      <ref name="ctl_create"/>
+      <ref name="self_handle"/>
+      <ref name="parent_handle"/>
+      <ref name="parent_bool"/>
+      <ref name="parent_payload"/>
+    </element>
+  </define>
+  <define name="parent_reply" combine="choice">
+    <element name="parent">
+      <ref name="ctl_create"/>
+      <ref name="self_handle"/>
+      <ref name="parent_handle"/>
+    </element>
+  </define>
+  <define name="parent_query" combine="choice">
+    <element name="parent">
+      <ref name="ctl_set"/>
+      <ref name="self_handle"/>
+      <ref name="parent_handle"/>
+      <ref name="parent_bool"/>
+      <ref name="parent_payload"/>
+    </element>
+  </define>
+  <define name="parent_reply" combine="choice">
+    <element name="parent">
+      <ref name="ctl_set"/>
+      <ref name="self_handle"/>
+      <ref name="parent_handle"/>
+    </element>
+  </define>
+  <define name="parent_query" combine="choice">
+    <element name="parent">
+      <ref name="ctl_get"/>
+      <ref name="self_handle"/>
+      <ref name="parent_handle"/>
+    </element>
+  </define>
+  <define name="parent_reply" combine="choice">
+    <element name="parent">
+      <ref name="ctl_get"/>
+      <ref name="self_handle"/>
+      <ref name="parent_handle"/>
+      <ref name="parent_payload"/>
+    </element>
+  </define>
+  <define name="parent_query" combine="choice">
+    <element name="parent">
+      <ref name="ctl_list"/>
+      <ref name="self_handle"/>
+    </element>
+  </define>
+  <define name="parent_reply" combine="choice">
+    <element name="parent">
+      <ref name="ctl_list"/>
+      <ref name="self_handle"/>
+      <ref name="parent_handle"/>
+      <ref name="parent_payload"/>
+    </element>
+  </define>
+  <define name="parent_query" combine="choice">
+    <element name="parent">
+      <ref name="ctl_destroy"/>
+      <ref name="self_handle"/>
+      <ref name="parent_handle"/>
+    </element>
+  </define>
+  <define name="parent_reply" combine="choice">
+    <element name="parent">
+      <ref name="ctl_destroy"/>
+      <ref name="self_handle"/>
+      <ref name="parent_handle"/>
+    </element>
+  </define>
+  <!-- <child/> element -->
+  <define name="child_handle">
+    <attribute name="child_handle">
+      <ref name="object_handle"/>
+    </attribute>
+  </define>
+  <define name="child_bool">
+    <optional>
+      <attribute name="reissue">
+        <value>yes</value>
+      </attribute>
+    </optional>
+  </define>
+  <define name="child_payload">
+    <optional>
+      <ref name="bsc_handle"/>
+    </optional>
+    <optional>
+      <element name="bpki_cert">
+        <ref name="base64"/>
+      </element>
+    </optional>
+    <optional>
+      <element name="bpki_glue">
+        <ref name="base64"/>
+      </element>
+    </optional>
+  </define>
+  <define name="child_query" combine="choice">
+    <element name="child">
+      <ref name="ctl_create"/>
+      <ref name="self_handle"/>
+      <ref name="child_handle"/>
+      <ref name="child_bool"/>
+      <ref name="child_payload"/>
+    </element>
+  </define>
+  <define name="child_reply" combine="choice">
+    <element name="child">
+      <ref name="ctl_create"/>
+      <ref name="self_handle"/>
+      <ref name="child_handle"/>
+    </element>
+  </define>
+  <define name="child_query" combine="choice">
+    <element name="child">
+      <ref name="ctl_set"/>
+      <ref name="self_handle"/>
+      <ref name="child_handle"/>
+      <ref name="child_bool"/>
+      <ref name="child_payload"/>
+    </element>
+  </define>
+  <define name="child_reply" combine="choice">
+    <element name="child">
+      <ref name="ctl_set"/>
+      <ref name="self_handle"/>
+      <ref name="child_handle"/>
+    </element>
+  </define>
+  <define name="child_query" combine="choice">
+    <element name="child">
+      <ref name="ctl_get"/>
+      <ref name="self_handle"/>
+      <ref name="child_handle"/>
+    </element>
+  </define>
+  <define name="child_reply" combine="choice">
+    <element name="child">
+      <ref name="ctl_get"/>
+      <ref name="self_handle"/>
+      <ref name="child_handle"/>
+      <ref name="child_payload"/>
+    </element>
+  </define>
+  <define name="child_query" combine="choice">
+    <element name="child">
+      <ref name="ctl_list"/>
+      <ref name="self_handle"/>
+    </element>
+  </define>
+  <define name="child_reply" combine="choice">
+    <element name="child">
+      <ref name="ctl_list"/>
+      <ref name="self_handle"/>
+      <ref name="child_handle"/>
+      <ref name="child_payload"/>
+    </element>
+  </define>
+  <define name="child_query" combine="choice">
+    <element name="child">
+      <ref name="ctl_destroy"/>
+      <ref name="self_handle"/>
+      <ref name="child_handle"/>
+    </element>
+  </define>
+  <define name="child_reply" combine="choice">
+    <element name="child">
+      <ref name="ctl_destroy"/>
+      <ref name="self_handle"/>
+      <ref name="child_handle"/>
+    </element>
+  </define>
+  <!-- <repository/> element -->
+  <define name="repository_handle">
+    <attribute name="repository_handle">
+      <ref name="object_handle"/>
+    </attribute>
+  </define>
+  <define name="repository_payload">
+    <optional>
+      <attribute name="peer_contact_uri">
+        <ref name="uri"/>
+      </attribute>
+    </optional>
+    <optional>
+      <ref name="bsc_handle"/>
+    </optional>
+    <optional>
+      <element name="bpki_cert">
+        <ref name="base64"/>
+      </element>
+    </optional>
+    <optional>
+      <element name="bpki_glue">
+        <ref name="base64"/>
+      </element>
+    </optional>
+  </define>
+  <define name="repository_query" combine="choice">
+    <element name="repository">
+      <ref name="ctl_create"/>
+      <ref name="self_handle"/>
+      <ref name="repository_handle"/>
+      <ref name="repository_payload"/>
+    </element>
+  </define>
+  <define name="repository_reply" combine="choice">
+    <element name="repository">
+      <ref name="ctl_create"/>
+      <ref name="self_handle"/>
+      <ref name="repository_handle"/>
+    </element>
+  </define>
+  <define name="repository_query" combine="choice">
+    <element name="repository">
+      <ref name="ctl_set"/>
+      <ref name="self_handle"/>
+      <ref name="repository_handle"/>
+      <ref name="repository_payload"/>
+    </element>
+  </define>
+  <define name="repository_reply" combine="choice">
+    <element name="repository">
+      <ref name="ctl_set"/>
+      <ref name="self_handle"/>
+      <ref name="repository_handle"/>
+    </element>
+  </define>
+  <define name="repository_query" combine="choice">
+    <element name="repository">
+      <ref name="ctl_get"/>
+      <ref name="self_handle"/>
+      <ref name="repository_handle"/>
+    </element>
+  </define>
+  <define name="repository_reply" combine="choice">
+    <element name="repository">
+      <ref name="ctl_get"/>
+      <ref name="self_handle"/>
+      <ref name="repository_handle"/>
+      <ref name="repository_payload"/>
+    </element>
+  </define>
+  <define name="repository_query" combine="choice">
+    <element name="repository">
+      <ref name="ctl_list"/>
+      <ref name="self_handle"/>
+    </element>
+  </define>
+  <define name="repository_reply" combine="choice">
+    <element name="repository">
+      <ref name="ctl_list"/>
+      <ref name="self_handle"/>
+      <ref name="repository_handle"/>
+      <ref name="repository_payload"/>
+    </element>
+  </define>
+  <define name="repository_query" combine="choice">
+    <element name="repository">
+      <ref name="ctl_destroy"/>
+      <ref name="self_handle"/>
+      <ref name="repository_handle"/>
+    </element>
+  </define>
+  <define name="repository_reply" combine="choice">
+    <element name="repository">
+      <ref name="ctl_destroy"/>
+      <ref name="self_handle"/>
+      <ref name="repository_handle"/>
+    </element>
+  </define>
+  <!-- <list_resources/> element -->
+  <define name="list_resources_query">
+    <element name="list_resources">
+      <ref name="tag"/>
+      <ref name="self_handle"/>
+      <ref name="child_handle"/>
+    </element>
+  </define>
+  <define name="list_resources_reply">
+    <element name="list_resources">
+      <ref name="tag"/>
+      <ref name="self_handle"/>
+      <ref name="child_handle"/>
+      <attribute name="valid_until">
+        <data type="dateTime">
+          <param name="pattern">.*Z</param>
+        </data>
+      </attribute>
+      <optional>
+        <attribute name="asn">
+          <ref name="asn_list"/>
+        </attribute>
+      </optional>
+      <optional>
+        <attribute name="ipv4">
+          <ref name="ipv4_list"/>
+        </attribute>
+      </optional>
+      <optional>
+        <attribute name="ipv6">
+          <ref name="ipv6_list"/>
+        </attribute>
+      </optional>
+    </element>
+  </define>
+  <!-- <list_roa_requests/> element -->
+  <define name="list_roa_requests_query">
+    <element name="list_roa_requests">
+      <ref name="tag"/>
+      <ref name="self_handle"/>
+    </element>
+  </define>
+  <define name="list_roa_requests_reply">
+    <element name="list_roa_requests">
+      <ref name="tag"/>
+      <ref name="self_handle"/>
+      <attribute name="asn">
+        <data type="positiveInteger"/>
+      </attribute>
+      <optional>
+        <attribute name="ipv4">
+          <ref name="ipv4_list"/>
+        </attribute>
+      </optional>
+      <optional>
+        <attribute name="ipv6">
+          <ref name="ipv6_list"/>
+        </attribute>
+      </optional>
+    </element>
+  </define>
+  <!-- <list_published_objects/> element -->
+  <define name="list_published_objects_query">
+    <element name="list_published_objects">
+      <ref name="tag"/>
+      <ref name="self_handle"/>
+    </element>
+  </define>
+  <define name="list_published_objects_reply">
+    <element name="list_published_objects">
+      <ref name="tag"/>
+      <ref name="self_handle"/>
+      <attribute name="uri">
+        <ref name="uri"/>
+      </attribute>
+      <ref name="base64"/>
+    </element>
+  </define>
+  <!-- <list_received_resources/> element -->
+  <define name="list_received_resources_query">
+    <element name="list_received_resources">
+      <ref name="tag"/>
+      <ref name="self_handle"/>
+    </element>
+  </define>
+  <define name="list_received_resources_reply">
+    <element name="list_received_resources">
+      <ref name="tag"/>
+      <ref name="self_handle"/>
+      <ref name="parent_handle"/>
+      <attribute name="notBefore">
+        <data type="dateTime">
+          <param name="pattern">.*Z</param>
+        </data>
+      </attribute>
+      <attribute name="notAfter">
+        <data type="dateTime">
+          <param name="pattern">.*Z</param>
+        </data>
+      </attribute>
+      <attribute name="uri">
+        <ref name="uri"/>
+      </attribute>
+      <attribute name="sia_uri">
+        <ref name="uri"/>
+      </attribute>
+      <attribute name="aia_uri">
+        <ref name="uri"/>
+      </attribute>
+      <optional>
+        <attribute name="asn">
+          <ref name="asn_list"/>
+        </attribute>
+      </optional>
+      <optional>
+        <attribute name="ipv4">
+          <ref name="ipv4_list"/>
+        </attribute>
+      </optional>
+      <optional>
+        <attribute name="ipv6">
+          <ref name="ipv6_list"/>
+        </attribute>
+      </optional>
+    </element>
+  </define>
+  <!-- <report_error/> element -->
+  <define name="error">
+    <data type="token">
+      <param name="maxLength">1024</param>
+    </data>
+  </define>
+  <define name="report_error_reply">
+    <element name="report_error">
+      <ref name="tag"/>
+      <optional>
+        <ref name="self_handle"/>
+      </optional>
+      <attribute name="error_code">
+        <ref name="error"/>
+      </attribute>
+      <optional>
+        <data type="string">
+          <param name="maxLength">512000</param>
+        </data>
+      </optional>
+    </element>
+  </define>
+</grammar>
+<!--
+  Local Variables:
+  indent-tabs-mode: nil
+  End:
+-->