<div dir="ltr">Thank you for pointing this out. I will update the documentation.<div>Now the config directly goes to the top level, because now each ndncert-ca-server only takes care of one CA instance, therefore there is no need to have a ca-config top-level attribute.</div><div><br></div><div>Best,</div><div>Zhiyi</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Nov 12, 2019 at 10:01 AM Junxiao Shi <<a href="mailto:shijunxiao@email.arizona.edu">shijunxiao@email.arizona.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Hi Zhiyi<div><br></div><div>It seems that the deployed CA is not implementing /CA/_PROBE/INFO protocol correctly.</div><div><br></div><div><a href="https://github.com/named-data/ndncert/wiki/NDNCERT-Protocol-0.2/6a0aab2e7ffe8fd6f68f04dccd27e84ed65b3e32" target="_blank">NDNCERT protocol 0.2</a> section 2.3.1 says:</div><div><br></div><blockquote style="margin:0px 0px 0px 40px;border:none;padding:0px"><div>JSON format:</div></blockquote><div><ul><ul><li>"name": assigned sub-namespace (appears when PROBE Interest carries Parameters).</li><li>"ca-config": ca configuration content (appears when PROBE Interest ends with CA/PROBE/INFO).</li></ul></ul></div><div>and gives an example:</div><blockquote style="margin:0px 0px 0px 40px;border:none;padding:0px"><div><font face="monospace">Interest:</font></div><div><font face="monospace">Name: /ndn/CA/_PROBE/INFO</font></div><div><font face="monospace"><br></font></div><div><font face="monospace">Data:</font></div><div><font face="monospace">Name: /ndn/CA/_PROBE/INFO</font></div><div><font face="monospace">Content:</font></div><div><font face="monospace">{</font></div><div><font face="monospace">  "ca-config": {</font></div><div><font face="monospace">    "ca-prefix": "/zhiyi-home/controller"</font></div><div><font face="monospace">    "probe": "email"</font></div><div><font face="monospace">    "certificate": "Bv0CJAcsCANuZG4IBXNpd..."</font></div><div><font face="monospace">  }</font></div><div><font face="monospace">}</font></div><div><font face="monospace">Signature</font></div></blockquote><div><br></div><div><br></div><div>According to the protocol, the /CA/_PROBE/INFO response should be a JSON object that contains a key "ca-config".</div><div><br></div><div>However, the packet retrieved from the deployed CA is missing the "ca-config" key, but incorrectly placed the config object at top level:</div><div><br></div><div><font face="monospace">$ ndnpeek -p /ndn/edu/ucla/yufeng/CA/_PROBE/INFO<br>{<br>    "ca-prefix": "\/ndn\/edu\/ucla\/yufeng",<br>    "ca-info": "UCLA CA",<br>    "probe": "email",<br>    "certificate": "Bv0DfQc2CANuZG4IA2VkdQgEdWNsYQgGeXVmZW5nCANLRVkICHelnivON8k8CAJO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\naBPyI2Q511N3nuHVtrDAnPjnEddNSoF4NRDILg6iCSrJ\n"<br>}</font><br></div><div><br></div><div>Yours, Junxiao</div></div>
</blockquote></div>