<p dir="ltr">Hi Vince</p>
<p dir="ltr">If I set "any" trust anchor, do I still need to create the certificates?<br>
Will the router create certificates automatically?<br>
If certificates are created automatically but I later revert the trust anchor setting, I'll need to delete those untrusted certificates, correct?</p>
<p dir="ltr">Yours, Junxiao</p>
<div class="gmail_quote">On Mar 2, 2015 9:03 AM, "Vince Lehman (vslehman)" <<a href="mailto:vslehman@memphis.edu">vslehman@memphis.edu</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">



<div style="word-wrap:break-word">
Hi Shuo,
<div><br>
</div>
<div>If you would like to make sure that security is the issue, you can disable security by commenting out the below lines and changing the type to “any":</div>
<div><br>
</div>
<div>
<div style="margin:0px;font-family:Menlo;color:rgb(232,232,232);background-color:rgb(1,43,54)">
...</div>
<div style="margin:0px;font-family:Menlo;color:rgb(232,232,232);background-color:rgb(1,43,54)">
    trust-anchor</div>
<div style="margin:0px;font-family:Menlo;color:rgb(232,232,232);background-color:rgb(1,43,54)">
    <span style="color:#e9e9ea">
{</span></div>
<div style="margin:0px;font-family:Menlo;color:rgb(232,232,232);background-color:rgb(1,43,54)">
<span style="color:#c7dfe3">     </span> type any</div>
<div style="margin:0px;font-family:Menlo;color:rgb(232,232,232);background-color:rgb(1,43,54)">
<span style="color:#c7dfe3">     </span> ;file-name "root.cert"</div>
<div style="margin:0px;font-family:Menlo;color:rgb(232,232,232);background-color:rgb(1,43,54)">
    <span style="color:#e9e9ea">
}</span></div>
<div style="margin:0px;background-color:rgb(1,43,54);font-family:Menlo;color:rgb(232,232,232)">
<span style="color:#e9e9ea">...</span></div>
<div style="margin:0px;font-family:Menlo;color:rgb(232,232,232);background-color:rgb(1,43,54)">
<span style="color:#e9e9ea"><br>
</span></div>
<div style="margin:0px;font-family:Menlo;color:rgb(232,232,232);background-color:rgb(1,43,54)">
<div style="margin:0px">;cert-to-publish "router.cert"  ; required, a file containing the router certificate.</div>
</div>
<div><br>
</div>
<div>It is important though that you leave the rest of the security section unmodified.</div>
<div>
<div style="color:rgb(0,0,0);font-family:Helvetica;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word">
<div style="color:rgb(0,0,0);font-family:Helvetica;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word">
<div style="color:rgb(0,0,0);font-family:Helvetica;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;direction:ltr">
<br>
--</div>
<div style="color:rgb(0,0,0);font-family:Helvetica;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;direction:ltr">
Vince Lehman</div>
</div>
</div>
</div>
<br>
<div>
<blockquote type="cite">
<div>On Mar 2, 2015, at 2:02 AM, Junxiao Shi <<a href="mailto:shijunxiao@email.arizona.edu" target="_blank">shijunxiao@email.arizona.edu</a>> wrote:</div>
<br>
<div>
<p>Hi Shuo</p>
<p>I don't know whether that's possible, but this is a bad idea in any production deployment.</p>
<p>Yours, Junxiao</p>
<div class="gmail_quote">On Mar 2, 2015 12:44 AM, "Shuo Chen" <<a href="mailto:chenatu2006@gmail.com" target="_blank">chenatu2006@gmail.com</a>> wrote:<br type="attribution">
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">Can I temporarily turn off the security function by adding the config below?
<div><br>
</div>
<div>
<div>security</div>
<div>{</div>
<div>  validator</div>
<div>  {</div>
<div>    trust-anchor {</div>
<div>        type any</div>
<div>    }</div>
<div>  }</div>
<div>}</div>
</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Mon, Mar 2, 2015 at 3:30 PM, Junxiao Shi <span dir="ltr">
<<a href="mailto:shijunxiao@email.arizona.edu" target="_blank">shijunxiao@email.arizona.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<p dir="ltr">Hi Shuo</p>
<p dir="ltr">Follow this manual to create certificates.<br>
<a href="http://named-data.net/doc/NLSR/current/SECURITY-CONFIG.html" target="_blank">http://named-data.net/doc/NLSR/current/SECURITY-CONFIG.html</a></p>
<p dir="ltr">It's critical to get the certificate chain right. This thread has some command lines:<br>
<a href="http://www.lists.cs.ucla.edu/pipermail/nfd-dev/2014-November/000616.html" target="_blank">http://www.lists.cs.ucla.edu/pipermail/nfd-dev/2014-November/000616.html</a></p>
<p dir="ltr">Yours, Junxiao</p>
<div>
<div>
<p dir="ltr">On Mar 2, 2015 12:24 AM, "Shuo Chen" <<a href="mailto:chenatu2006@gmail.com" target="_blank">chenatu2006@gmail.com</a>> wrote:<br>
><br>
> I did not create any certificates.</p>
</div>
</div>
</blockquote>
</div>
<br>
</div>
</blockquote>
</div>
_______________________________________________<br>
Ndn-interest mailing list<br>
<a href="mailto:Ndn-interest@lists.cs.ucla.edu" target="_blank">Ndn-interest@lists.cs.ucla.edu</a><br>
<a href="http://www.lists.cs.ucla.edu/mailman/listinfo/ndn-interest" target="_blank">http://www.lists.cs.ucla.edu/mailman/listinfo/ndn-interest</a><br>
</div>
</blockquote>
</div>
<br>
</div>
</div>

<br>_______________________________________________<br>
Ndn-interest mailing list<br>
<a href="mailto:Ndn-interest@lists.cs.ucla.edu">Ndn-interest@lists.cs.ucla.edu</a><br>
<a href="http://www.lists.cs.ucla.edu/mailman/listinfo/ndn-interest" target="_blank">http://www.lists.cs.ucla.edu/mailman/listinfo/ndn-interest</a><br>
<br></blockquote></div>