[Nfd-dev] [ndn] NDN Seminar: Practical Congestion Control for NDN

[Burke, Jeff]

How / when are we going to be able to delegate in this way?
We have many machines that are not directly associated with a user cert.
Jeff

From: Nfd-dev <nfd-dev-bounces at lists.cs.ucla.edu> on behalf of Junxiao Shi <shijunxiao at email.arizona.edu>
Date: Monday, June 13, 2016 at 9:53 PM
To: "Gusev, Peter" <peter at remap.ucla.edu>
Cc: "<nfd-dev at lists.cs.ucla.edu>" <nfd-dev at lists.cs.ucla.edu>
Subject: Re: [Nfd-dev] [ndn] NDN Seminar: Practical Congestion Control for NDN


These sequence are incorrect. You cannot use any certificate other than the one directly requested from ndncert.
On Jun 13, 2016 12:22 PM, "Gusev, Peter" <peter at remap.ucla.edu<mailto:peter at remap.ucla.edu>> wrote:
Hi Junxiao,

I generated a cert request on freeculture like this:

        $ ndnsec-keygen /ndn/edu/ucla/remap/peter/freeculture > freeculture.pub

Then, I signed it on my machine:

        $ ndnsec-certgen -N freeculture -p /ndn/edu/ucla/remap/peter -r freeculture.pub > freeculture.signed

I sent freeculture.signed back to freeculture machine, as long as my certificate (previously dumped):

        $ ndnsec-cert-dump /ndn/edu/ucla/remap/peter > peter.cert

Finally, I installed both certificates on freeculture machine:

$ ndnsec-install-cert peter.cert
$ ndnsec-install-cert freeculture.signed

Both ended successfully. I then switched default identity to /ndn/edu/ucla/remap/peter/freeculture on freeculture machine:

$ ndnsec set-default /ndn/edu/ucla/remap/peter/freeculture

However, I don’t see connectivity to the testbed after running ndn-autoconfig.

Was the above sequence correct?

Thanks,

--
Peter Gusev

peter at remap.ucla.edu<mailto:peter at remap.ucla.edu>
+1 213 5872748<tel:%2B1%20213%205872748>
peetonn_ (skype)

Software Engineer/Programmer Analyst @ REMAP UCLA

Video streaming/ICN networks/Creative Development

> On Jun 2, 2016, at 12:05 PM, Junxiao Shi <shijunxiao at email.arizona.edu<mailto:shijunxiao at email.arizona.edu>> wrote:
>
> Hi Peter
>
> This is an unsupported configuration. Certificates can only be requested through ndncert web app, and it’s always tied to your email.
>
> Yours, Junxiao
>
>> On Jun 2, 2016, at 12:02 PM, Gusev, Peter <peter at remap.ucla.edu<mailto:peter at remap.ucla.edu>> wrote:
>>
>> hi Junxiao,
>>
>> I generated certs for freeculture and confbridge and signed them on REMAP hub like this:
>>
>> $ ndnsec-certgen -N confbridge -p /ndn/edu/ucla/remap -r confbridge.pub
>>
>> I installed them on corresponding machines, however it seems not working yet.
>> Is the above command correct?
>>
>> Thanks,
>>
>> --
>> Peter Gusev
>>
>> peter at remap.ucla.edu<mailto:peter at remap.ucla.edu>
>> +1 213 5872748<tel:%2B1%20213%205872748>
>> peetonn_ (skype)
>>
>> Software Engineer/Programmer Analyst @ REMAP UCLA
>>
>> Video streaming/ICN networks/Creative Development
>>
>>> On Jun 2, 2016, at 11:13 AM, Peter Gusev <peter at remap.ucla.edu<mailto:peter at remap.ucla.edu>> wrote:
>>>
>>> no, i’m not publishing.
>>>
>>>
>>> Junxiao, I’m generating a certificate for confbridge. But I’m not sure I’ll make it in time for the Seminar.
>>>
>>> Thanks,
>>>
>>> --
>>> Peter Gusev
>>>
>>> peter at remap.ucla.edu<mailto:peter at remap.ucla.edu>
>>> +1 213 5872748<tel:%2B1%20213%205872748>
>>> peetonn_ (skype)
>>>
>>> Software Engineer/Programmer Analyst @ REMAP UCLA
>>>
>>> Video streaming/ICN networks/Creative Development
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.lists.cs.ucla.edu/pipermail/nfd-dev/attachments/20160615/9f8daeca/attachment.html>