<div dir="ltr">Oh, forgot to mention: the prefix is /ndn/CA served by <a href="http://suns.cs.ucla.edu">suns.cs.ucla.edu</a> (<a href="http://suns.cs.ucla.edu/">http://suns.cs.ucla.edu/</a>)<div><br></div><div>Best,</div><div>Zhiyi</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Jan 8, 2021 at 2:25 PM Zhiyi Zhang <<a href="mailto:zhiyi@cs.ucla.edu">zhiyi@cs.ucla.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Hi Junxiao,<div><br></div><div>Yeah. It has been running and it supports both PIN code challenge and email challenge.</div><div><br></div><div>I just applied a cert on my laptop (MacOS) from Suns server.</div><div>Since now we support RDR discovery and fetch of CA profile, so we don't need to pre-config the client. Instead, in the step 2, type in the CA name that you want to contact, and in step 2, check the certificate information (the one shown below is a valid cert).</div><div><br></div><div>➜ ~ ndncert-client<br>***************************************<br>Step 1: CA SELECTION<br>> Index: 0<br>>> CA prefix:/example<br>>> Introduction: An example NDNCERT CA<br>Please type in the CA's index that you want to apply or type in NONE if your expected CA is not in the list:<br>none<br><br>***************************************<br>Step 2: ADD NEW CA<br>Please type in the CA's Name:<br>/ndn<br><br>***************************************<br>Step 2: Will use a new trust anchor, please double check the identity info:<br>> New CA name: /ndn<br>> This trust anchor information is signed by: Name=/ndn/KEY/e%9D%7F%A5%C5%81%10%7D<br>> The certificate: > The certificate: Certificate name:<br> /ndn/KEY/e%9D%7F%A5%C5%81%10%7D/ndn/%FD%00%00%01%60qJQ%9B<br>Validity:<br> NotBefore: 20171220T001939<br> NotAfter: 20201231T235959<br>Additional Description:<br> fullname: NDN Testbed Root<br>Public key bits:<br> MIIBSzCCAQMGByqGSM49AgEwgfcCAQEwLAYHKoZIzj0BAQIhAP////8AAAABAAAA<br> AAAAAAAAAAAA////////////////MFsEIP////8AAAABAAAAAAAAAAAAAAAA////<br> ///////////8BCBaxjXYqjqT57PrvVV2mIa8ZR0GsMxTsPY7zjw+J9JgSwMVAMSd<br> NgiG5wSTamZ44ROdJreBn36QBEEEaxfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5<br> RdiYwpZP40Li/hp/m47n60p8D54WK84zV2sxXs7LtkBoN79R9QIhAP////8AAAAA<br> //////////+85vqtpxeehPO5ysL8YyVRAgEBA0IABAUIdqatSflni6u9XO2ZSmBA<br> +MjDwkx2RiPtCCLsm4oKVn2Jyfa/yOSgZseGqnTEdbN1rDWvlIgAmxI0MUXVM1g=<br>Signature Information:<br> Signature Type: SignatureSha256WithEcdsa<br> Key Locator: Self-Signed Name=/ndn/KEY/e%9D%7F%A5%C5%81%10%7D</div><div><br>Do you trust the information? Type in YES or NO<br>yes<br>You answered YES: new CA /ndn will be used<br><br>***************************************<br>Step 3: Do you know your identity name to be certified by CA /ndn already? Type in YES or NO<br>no<br>You answered NO<br><br>***************************************<br>Step 4: Please provide information for name assignment<br>Please input: email<br><a href="mailto:zhangzhiyi1919@gmail.com" target="_blank">zhangzhiyi1919@gmail.com</a><br>Got it. This is what you've provided:<br>email : <a href="mailto:zhangzhiyi1919@gmail.com" target="_blank">zhangzhiyi1919@gmail.com</a><br><br>***************************************<br>Step 5: You can either select one of the following names suggested by the CA:<br>> Index: 0<br>>> Suggested name: /ndn/zhangzhiyi1919%<a href="http://40gmail.com" target="_blank">40gmail.com</a><br>>> Corresponding Max sufiix length: 2<br><br>Or choose another trusted CA suggested by the CA:<br>Please type in the index of your choice:<br>0<br>You selected name: /ndn/zhangzhiyi1919%<a href="http://40gmail.com" target="_blank">40gmail.com</a><br>Enter Suffix if you would like one (Enter to skip):<br><br>***************************************<br>Step 6: Please type in your expected validity period of your certificate. Type the number of hours (168 for week, 730 for month, 8760 for year). The CA may reject your application if your expected period is too long.<br>100<br>The validity period of your certificate will be: 100 hours<br><br>***************************************<br>Step 7: CHALLENGE SELECTION<br>> Index: 0<br>>> Challenge:email<br>> Index: 1<br>>> Challenge:pin<br>Please type in the challenge index that you want to perform:<br>0<br>The challenge has been selected: email<br><br>***************************************<br>Step 8: Please provide parameters used for Identity Verification Challenge<br>Please input your email address<br><a href="mailto:zhangzhiyi1919@gmail.com" target="_blank">zhangzhiyi1919@gmail.com</a><br>Got it. This is what you've provided:<br>email : <a href="mailto:zhangzhiyi1919@gmail.com" target="_blank">zhangzhiyi1919@gmail.com</a><br><br>***************************************<br>Step 8: Please provide parameters used for Identity Verification Challenge<br>Please input your verification code<br>537720<br>Got it. This is what you've provided:<br>code : 537720<br>Certificate has already been issued, downloading certificate...<br><br>***************************************<br>Step 8: DONE<br>Certificate with Name: /ndn/zhangzhiyi1919%<a href="http://40gmail.com/KEY/%9B%93%17L%81%11%7C%AE/NDNCERT/725316137953299380has" target="_blank">40gmail.com/KEY/%9B%93%17L%81%11%7C%AE/NDNCERT/725316137953299380has</a> already been installed to your local keychain<br>Exit now%<br></div><div><div><br></div><div><br></div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Jan 8, 2021 at 12:41 PM Junxiao Shi <<a href="mailto:shijunxiao@email.arizona.edu" target="_blank">shijunxiao@email.arizona.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>Hi Zhiyi</div><div><br></div><div>As discussed on the 2020-12-18 NFD call, you are going to deploy one instance of NDNCERT server (using <a href="https://github.com/Zhiyi-Zhang/ndncert" target="_blank">https://github.com/Zhiyi-Zhang/ndncert</a> v0.3 branch) on an end host connected to the testbed for trial usage.</div><div>Moreover, you agreed to perform the deployment within one week from that call.</div><div>Have you completed this task?</div><div><br></div><div>Yours, Junxiao</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Jul 27, 2018 at 2:54 PM Zhiyi Zhang <<a href="mailto:zhiyi@cs.ucla.edu" target="_blank">zhiyi@cs.ucla.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">
<span></span>
<p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Helvetica Neue";color:rgb(69,69,69)">Hi all,</p>
<p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Helvetica Neue";color:rgb(69,69,69);min-height:14px"><br></p>
<p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Helvetica Neue";color:rgb(69,69,69)">I deployed NDNCERT CA server on UCLA site and the server has been connected to the NDN testbed.</p>
<p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Helvetica Neue";color:rgb(69,69,69)">Now the NDNCERT CA is available and we encourage you to have a try and get an NDN certificate (your certificate’s trust anchor is NDN testbed anchor).</p>
<p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Helvetica Neue";color:rgb(69,69,69)">To get an NDN certificate with NDNCERT, you can simply follow these steps:</p>
<p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:12px;line-height:normal;font-family:"Helvetica Neue";color:rgb(69,69,69);min-height:14px"><br></p></div>
</blockquote></div></div>
</blockquote></div>
</blockquote></div>