<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
Junxiao,
<div class=""><br class="">
</div>
<div class="">
<blockquote type="cite" class="">
<p dir="ltr" class="">If I set "any" trust anchor, do I still need to create the certificates?</p>
</blockquote>
<div apple-content-edited="true" class="">
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; direction: ltr;" class="">
No, you would not need to create the certificates.</div>
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; direction: ltr;" class="">
<br class="">
</div>
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; direction: ltr;" class="">
<blockquote type="cite" style="orphans: auto; widows: auto;" class="">
<p dir="ltr" class="">Will the router create certificates automatically?<br class="">
If certificates are created automatically but I later revert the trust anchor setting, I'll need to delete those untrusted certificates, correct?</p>
</blockquote>
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; direction: ltr;" class="">
The router will not automatically create certificates so you will not need to remove untrusted certificates when changing the trust anchor settings.</div>
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; direction: ltr;" class="">
<br class="">
</div>
--</div>
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; direction: ltr;" class="">
Vince Lehman</div>
</div>
</div>
</div>
<br class="">
<div>
<blockquote type="cite" class="">
<div class="">On Mar 2, 2015, at 10:07 AM, Junxiao Shi <<a href="mailto:shijunxiao@email.arizona.edu" class="">shijunxiao@email.arizona.edu</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<p dir="ltr" class="">Hi Vince</p>
<p dir="ltr" class="">If I set "any" trust anchor, do I still need to create the certificates?<br class="">
Will the router create certificates automatically?<br class="">
If certificates are created automatically but I later revert the trust anchor setting, I'll need to delete those untrusted certificates, correct?</p>
<p dir="ltr" class="">Yours, Junxiao</p>
<div class="gmail_quote">On Mar 2, 2015 9:03 AM, "Vince Lehman (vslehman)" <<a href="mailto:vslehman@memphis.edu" class="">vslehman@memphis.edu</a>> wrote:<br type="attribution" class="">
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap:break-word" class="">Hi Shuo,
<div class=""><br class="">
</div>
<div class="">If you would like to make sure that security is the issue, you can disable security by commenting out the below lines and changing the type to “any":</div>
<div class=""><br class="">
</div>
<div class="">
<div style="margin:0px;font-family:Menlo;color:rgb(232,232,232);background-color:rgb(1,43,54)" class="">
...</div>
<div style="margin:0px;font-family:Menlo;color:rgb(232,232,232);background-color:rgb(1,43,54)" class="">
trust-anchor</div>
<div style="margin:0px;font-family:Menlo;color:rgb(232,232,232);background-color:rgb(1,43,54)" class="">
<span style="color:#e9e9ea" class="">{</span></div>
<div style="margin:0px;font-family:Menlo;color:rgb(232,232,232);background-color:rgb(1,43,54)" class="">
<span style="color:#c7dfe3" class=""> </span> type any</div>
<div style="margin:0px;font-family:Menlo;color:rgb(232,232,232);background-color:rgb(1,43,54)" class="">
<span style="color:#c7dfe3" class=""> </span> ;file-name "root.cert"</div>
<div style="margin:0px;font-family:Menlo;color:rgb(232,232,232);background-color:rgb(1,43,54)" class="">
<span style="color:#e9e9ea" class="">}</span></div>
<div style="margin:0px;background-color:rgb(1,43,54);font-family:Menlo;color:rgb(232,232,232)" class="">
<span style="color:#e9e9ea" class="">...</span></div>
<div style="margin:0px;font-family:Menlo;color:rgb(232,232,232);background-color:rgb(1,43,54)" class="">
<span style="color:#e9e9ea" class=""><br class="">
</span></div>
<div style="margin:0px;font-family:Menlo;color:rgb(232,232,232);background-color:rgb(1,43,54)" class="">
<div style="margin:0px" class="">;cert-to-publish "router.cert" ; required, a file containing the router certificate.</div>
</div>
<div class=""><br class="">
</div>
<div class="">It is important though that you leave the rest of the security section unmodified.</div>
<div class="">
<div style="font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; word-wrap: break-word;" class="">
<div style="font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; word-wrap: break-word;" class="">
<div style="font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; direction: ltr;" class="">
<br class="">
--</div>
<div style="font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; direction: ltr;" class="">
Vince Lehman</div>
</div>
</div>
</div>
<br class="">
<div class="">
<blockquote type="cite" class="">
<div class="">On Mar 2, 2015, at 2:02 AM, Junxiao Shi <<a href="mailto:shijunxiao@email.arizona.edu" target="_blank" class="">shijunxiao@email.arizona.edu</a>> wrote:</div>
<br class="">
<div class="">
<p class="">Hi Shuo</p>
<p class="">I don't know whether that's possible, but this is a bad idea in any production deployment.</p>
<p class="">Yours, Junxiao</p>
<div class="gmail_quote">On Mar 2, 2015 12:44 AM, "Shuo Chen" <<a href="mailto:chenatu2006@gmail.com" target="_blank" class="">chenatu2006@gmail.com</a>> wrote:<br type="attribution" class="">
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr" class="">Can I temporarily turn off the security function by adding the config below?
<div class=""><br class="">
</div>
<div class="">
<div class="">security</div>
<div class="">{</div>
<div class=""> validator</div>
<div class=""> {</div>
<div class=""> trust-anchor {</div>
<div class=""> type any</div>
<div class=""> }</div>
<div class=""> }</div>
<div class="">}</div>
</div>
</div>
<div class="gmail_extra"><br class="">
<div class="gmail_quote">On Mon, Mar 2, 2015 at 3:30 PM, Junxiao Shi <span dir="ltr" class="">
<<a href="mailto:shijunxiao@email.arizona.edu" target="_blank" class="">shijunxiao@email.arizona.edu</a>></span> wrote:<br class="">
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<p dir="ltr" class="">Hi Shuo</p>
<p dir="ltr" class="">Follow this manual to create certificates.<br class="">
<a href="http://named-data.net/doc/NLSR/current/SECURITY-CONFIG.html" target="_blank" class="">http://named-data.net/doc/NLSR/current/SECURITY-CONFIG.html</a></p>
<p dir="ltr" class="">It's critical to get the certificate chain right. This thread has some command lines:<br class="">
<a href="http://www.lists.cs.ucla.edu/pipermail/nfd-dev/2014-November/000616.html" target="_blank" class="">http://www.lists.cs.ucla.edu/pipermail/nfd-dev/2014-November/000616.html</a></p>
<p dir="ltr" class="">Yours, Junxiao</p>
<div class="">
<div class="">
<p dir="ltr" class="">On Mar 2, 2015 12:24 AM, "Shuo Chen" <<a href="mailto:chenatu2006@gmail.com" target="_blank" class="">chenatu2006@gmail.com</a>> wrote:<br class="">
><br class="">
> I did not create any certificates.</p>
</div>
</div>
</blockquote>
</div>
<br class="">
</div>
</blockquote>
</div>
_______________________________________________<br class="">
Ndn-interest mailing list<br class="">
<a href="mailto:Ndn-interest@lists.cs.ucla.edu" target="_blank" class="">Ndn-interest@lists.cs.ucla.edu</a><br class="">
<a href="http://www.lists.cs.ucla.edu/mailman/listinfo/ndn-interest" target="_blank" class="">http://www.lists.cs.ucla.edu/mailman/listinfo/ndn-interest</a><br class="">
</div>
</blockquote>
</div>
<br class="">
</div>
</div>
<br class="">
_______________________________________________<br class="">
Ndn-interest mailing list<br class="">
<a href="mailto:Ndn-interest@lists.cs.ucla.edu" class="">Ndn-interest@lists.cs.ucla.edu</a><br class="">
<a href="http://www.lists.cs.ucla.edu/mailman/listinfo/ndn-interest" target="_blank" class="">http://www.lists.cs.ucla.edu/mailman/listinfo/ndn-interest</a><br class="">
<br class="">
</blockquote>
</div>
</div>
</blockquote>
</div>
<br class="">
</div>
</body>
</html>