<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" id="owaParaStyle">P {margin-top:0;margin-bottom:0;}</style>
</head>
<body fpstyle="1" ocsi="0">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">Dear Junxiao,<br>
<br>
Thanks for you reply.<br>
<div> By the way, what are the conditions that the NDN node replies this error message to the producer regarding auto prefix registration: "authorization rejected"<br>
<br>
Best wishes,<br>
<div style="font-family:Tahoma; font-size:13px">
<div style="font-family:Tahoma; font-size:13px">
<div>Jongdeog Lee (JD)</div>
<div><br>
</div>
<div>------------------------------------------------</div>
<div><i>Ph.D. Student</i></div>
<div><i>Department of Computer Science</i></div>
<div><i>University of Illinois at Urbana-Champaign</i></div>
</div>
</div>
</div>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px">
<hr tabindex="-1">
<div id="divRpF618174" style="direction: ltr;"><font size="2" face="Tahoma" color="#000000"><b>From:</b> Junxiao Shi [shijunxiao@email.arizona.edu]<br>
<b>Sent:</b> Thursday, March 16, 2017 2:00 PM<br>
<b>To:</b> Lee, Jongdeog; nfd-dev@lists.cs.ucla.edu<br>
<b>Subject:</b> Re: [Nfd-dev] Auto prefix propagation on multiple machines<br>
</font><br>
</div>
<div></div>
<div>Hi Jongdeog<br>
<div class="gmail_quote">
<div><br>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
<div class="gmail_msg">
<div class="gmail_msg" style="direction:ltr; font-family:Tahoma; color:#000000; font-size:10pt">
1. I have a valid certificate (/ndn/edu/illinois/jlee700) on machine A and want to use the same certificate on machine B.</div>
</div>
</blockquote>
<div>Command Interests design do not support having same certificate on multiple machines, because timestamp checking would fail if clocks are perfectly synchronized.</div>
<div><br>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
<div class="gmail_msg">
<div class="gmail_msg" style="direction:ltr; font-family:Tahoma; color:#000000; font-size:10pt">
<br class="gmail_msg">
After restarting NFD, nfd commands make this error:<br class="gmail_msg">
"Private key doesn't exist"</div>
</div>
</blockquote>
<div>This error means the key is in PIB but not TPM. It isn't related to clock synchronization. I don't know the cause.</div>
<div><br>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
<div class="gmail_msg">
<div class="gmail_msg" style="direction:ltr; font-family:Tahoma; color:#000000; font-size:10pt">
2. Instead of using the same certificate, I tried to issue my own NDN certificate (/ndn/edu/illinois/jlee700/apollo) signed by my trusted certificate. I could see the apollo certificate installed on machine B after following Junxiao's post. However, when the
producer (ndnpingserver /ndn/edu/illinois/jlee700/apollo/test) runs on machine B, it starts to advertise /ndn/edu/illinois/jlee700 instead of /ndn/edu/illinois/jlee700/apollo.</div>
</div>
</blockquote>
<div>This means identity /ndn/edu/illinois/jlee700/apollo exists in NFD-RIB's PIB.</div>
<div><br>
</div>
<div>Yours, Junxiao</div>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
<div class="gmail_msg">
<div class="gmail_msg" style="direction:ltr; font-family:Tahoma; color:#000000; font-size:10pt">
</div>
</div>
</blockquote>
</div>
</div>
</div>
</div>
</body>
</html>