Given a must-expression like this:
uses ts:local-or-truststore-public-keys-grouping { refine "local-or-truststore/truststore/truststore-reference" { must 'derived-from-or-self(deref(.)/../ts:public-key/ts:public-key-format, "ct:ssh-public-key-format")'; } } Where "ts:public-key" is a list, currently the expression evals true if there is just one element in the list having public-key-format="ct:ssh-public-key-format", but it is needed to eval true only when *all* the elements have that value. Any pro-tips? I think I saw this posted before, but can't find it now... K. _______________________________________________ netmod mailing list netmod@ietf.org https://www.ietf.org/mailman/listinfo/netmod