<div dir="ltr">Hi Zhiyi<div><br></div><div>I tested ndncert-client and it did not work.<br><div class="gmail_extra"><br><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><p class="gmail-m_-4627947280912498766gmail-p2" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Helvetica Neue";color:rgb(69,69,69);min-height:14px">NFD is running on your device and your NFD has connected either NDN testbed or the CA server. You can run the following commands in your terminal to connect your NFD to the testbed</p></div></blockquote><div> </div><div>My node is already connected to testbed. The connectivity is established via NDN-FCH service. I confirmed that ndnping /ndn/edu/ucla works.</div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">
<p class="gmail-m_-4627947280912498766gmail-p2" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Helvetica Neue";color:rgb(69,69,69);min-height:14px"><br></p>
<p class="gmail-m_-4627947280912498766gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Helvetica Neue";color:rgb(69,69,69)"><b>1. Get NDNCERT command line tools:</b></p>
<p class="gmail-m_-4627947280912498766gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Helvetica Neue";color:rgb(69,69,69)">Option B: install from NDN PPA (For Debian OSes)<br></p>
<blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote">sudo add-apt-repository ppa:named-data/ppa<br>sudo apt-get update<br>sudo apt-get ndncert</blockquote></div></blockquote><div><br></div><div>This repository is for Ubuntu. It does not work for Debian.</div><div>I'm using the Debian repository found at <a href="https://bintray.com/yoursunny/named-data">https://bintray.com/yoursunny/named-data</a> . It has ndncert 0.0.2-2-g047386ef-ppa1 backported from Ubuntu PPA.</div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">


<p class="gmail-m_-4627947280912498766gmail-p2" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Helvetica Neue";color:rgb(69,69,69);min-height:14px"><br></p>
<p class="gmail-m_-4627947280912498766gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Helvetica Neue";color:rgb(69,69,69)"><b>2. Bootstrapping by downloading the trust anchor certificate</b></p>
<p class="gmail-m_-4627947280912498766gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Helvetica Neue";color:rgb(69,69,69)">Run the command in your terminal:</p>
<blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote">curl -o /usr/local/etc/ndncert/client.<wbr>conf <a href="https://zhiyi-zhang.com/ucla-client.txt" target="_blank"><span class="gmail-m_-4627947280912498766gmail-s1" style="text-decoration:underline;color:rgb(228,175,10)">https://zhiyi-zhang.com/<wbr>ucla-client.txt</span></a></blockquote></div></blockquote><div><br></div><div>This command does not work for a Debian installation. It needs sudo and cannot have /usr/local:</div><div><font face="monospace, monospace">sudo curl -o /etc/ndncert/client.conf <a href="https://zhiyi-zhang.com/ucla-client.txt">https://zhiyi-zhang.com/ucla-client.txt</a></font><br></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">
<p class="gmail-m_-4627947280912498766gmail-p2" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Helvetica Neue";color:rgb(69,69,69);min-height:14px"><br></p>
<p class="gmail-m_-4627947280912498766gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Helvetica Neue";color:rgb(69,69,69)"><b>3. Get your own certificate!</b></p>
<p class="gmail-m_-4627947280912498766gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Helvetica Neue";color:rgb(69,69,69)">Run the command line tool:</p>
<blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote">ndncert-client</blockquote>
<p class="gmail-m_-4627947280912498766gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Helvetica Neue";color:rgb(69,69,69)"><br></p><p class="gmail-m_-4627947280912498766gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Helvetica Neue";color:rgb(69,69,69)">You are supposed to get prompt like this:</p>
<blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote">******************************<wbr>*********<br>Index: 0<br>CA prefix:/ndn/edu/ucla/CA<br>Introduction: UCLA Certificate Authority of NDN Testbed<br>******************************<wbr>*********<br>Step 0: Please type in the CA namespace index that you want to apply</blockquote>





<p class="gmail-m_-4627947280912498766gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Helvetica Neue";color:rgb(69,69,69)">Type in "0" to select the CA /ndn/edu/ucla/CA.</p>
<p class="gmail-m_-4627947280912498766gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Helvetica Neue";color:rgb(69,69,69)"><br></p><p class="gmail-m_-4627947280912498766gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Helvetica Neue";color:rgb(69,69,69)">Then you will get the prompt:</p>
<blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote">Step 1: Please type in the identity name</blockquote>
<p class="gmail-m_-4627947280912498766gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Helvetica Neue";color:rgb(69,69,69)">You can type in the name that you want to obtain, e.g., alice.</p>
<p class="gmail-m_-4627947280912498766gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Helvetica Neue";color:rgb(69,69,69)"><br></p><p class="gmail-m_-4627947280912498766gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Helvetica Neue";color:rgb(69,69,69)">Then you will get the available challenges through which you can prove your identity and get a certificate:</p></div></blockquote><div><br></div><div>This step does not work:</div><div><div><font face="monospace, monospace">debian@beaglebone:~$ ndncert-client</font></div><div><font face="monospace, monospace">***************************************</font></div><div><font face="monospace, monospace">Index: 0</font></div><div><font face="monospace, monospace">CA prefix:/ndn/edu/ucla/CA</font></div><div><font face="monospace, monospace">Introduction: UCLA Certificate Authority of NDN Testbed</font></div><div><font face="monospace, monospace">***************************************</font></div><div><font face="monospace, monospace">Step 0: Please type in the CA namespace index that you want to apply</font></div><div><font face="monospace, monospace">0</font></div><div><font face="monospace, monospace">Step 1: Please type in the identity name</font></div><div><font face="monospace, monospace">alice</font></div><div><font face="monospace, monospace">Error: Got Nack</font></div></div><div><br></div><div>tcpdump (attached) indicates that two Interests were transmitted, but none got a reply.</div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">
<blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote">Step 2: Please select one challenge from following types<br><span class="gmail-m_-4627947280912498766gmail-Apple-tab-span" style="white-space:pre-wrap">     </span>PIN<br><span class="gmail-m_-4627947280912498766gmail-Apple-tab-span" style="white-space:pre-wrap">        </span>Email</blockquote>


<p class="gmail-m_-4627947280912498766gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Helvetica Neue";color:rgb(69,69,69)">For now, there are two challenges available: PIN and Email.</p>
<p class="gmail-m_-4627947280912498766gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Helvetica Neue";color:rgb(69,69,69)">Type in "Email" to select email challenge and then follow the prompt to type in your email address. After that, you will get an email (if no, the email is probably in your spam box or blocked by your email service provider). Copy the PIN code from the email and paste it in the command line tool.</p>
<p class="gmail-m_-4627947280912498766gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Helvetica Neue";color:rgb(69,69,69)">You will then get a certificate installed on your device.</p><p class="gmail-m_-4627947280912498766gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Helvetica Neue";color:rgb(69,69,69)"><br></p></div></blockquote><div><br></div><div><br></div><div>Yours, Junxiao </div></div></div></div></div>