<div dir="ltr"><div dir="ltr">Hi Nikos<div><br></div><div>I was wondering why "Let the World Reach Your NFD" <a href="https://yoursunny.com/t/2016/nfd-prefix/">https://yoursunny.com/t/2016/nfd-prefix/</a> is getting a lot of views from Greece in the past few days. Now I know.</div><div>Since I wrote that article, the testbed gained a few new bugs. As a consequence of these bugs, your end host must run a producer to publish its own certificate.<br></div><div><div dir="ltr"><div>See <a href="https://talks.ndn.today">https://talks.ndn.today</a> PersonalCA_20200529.pptx page 32-37 and page 19 for explanation.</div><div><br></div><div>As you can see from the logs, the testbed router (face 261) is sending Interests to the end host to retrieve the certificate, but the end host is not answering those Interests. Consequently, the router is unable to validate the prefix registration command, and therefore the prefix propagation fails.</div><div>You can use ndn6-serve-certs service from <a href="https://github.com/yoursunny/ndn6-tools">https://github.com/yoursunny/ndn6-tools</a> repository to publish your certificates on the end host. You should be publishing the whole certificate chain including intermediate and root CA certificates, because the validator may need to retrieve them from your end host if it's not already in their cache.</div><div><br></div><div>An easier workaround is to send an Interest to each certificate to the testbed router, before sending the prefix registration command. This would cause the router to retrieve the certificate from elsewhere and insert it in their Content Store.</div><div>However, this method is less reliable because it requires the CA that issued your certificate to be online, which may not be the case at all times.</div><div><br></div><div>See also: NFD nightly packages <a href="https://nfd-nightly.ndn.today/">https://nfd-nightly.ndn.today/</a> , for when you want the latest software but don't want to compile yourself.</div><div><br></div><div>Yours, Junxiao</div></div></div><div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Jan 13, 2021 at 3:16 AM Nikos Fotiou via Nfd-dev <<a href="mailto:nfd-dev@lists.cs.ucla.edu">nfd-dev@lists.cs.ucla.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hi all and happy new year.<br>
<br>
I am having trouble implementing prefix propagation. I have a machine (M) which can connect to the testbed node <a href="http://mmlab-aueb-1.mmlab.edu.gr" rel="noreferrer" target="_blank">mmlab-aueb-1.mmlab.edu.gr</a>. Furthermore, using <a href="https://ndncert.named-data.net" rel="noreferrer" target="_blank">https://ndncert.named-data.net</a> I have received and installed in (M) a certificate for the name /ndn/gr/aueb/fotiou. In (M), I am running NFD 0.7.1-3-g9ab43e67, installed from source, using the sample configuration. <br>
<br>
So in (M) ndnsec list -c outputs:<br>
<br>
* /ndn/gr/aueb/fotiou<br>
+->* /ndn/gr/aueb/fotiou/KEY/%EDA%B0%0E%FF%19%C9%AD<br>
+->* /ndn/gr/aueb/fotiou/KEY/%EDA%B0%0E%FF%19%C9%AD/NA/%FD%00%00%01v%FA%9E%3F%9F<br>
+-> /ndn/gr/aueb/fotiou/KEY/%EDA%B0%0E%FF%19%C9%AD/self/%FD%00%00%01v%FA%9C6%DD<br>
<br>
Then, in (M) I run the following commands:<br>
<br>
> nfdc face create udp://<a href="http://mmlab-aueb-1.mmlab.edu.gr" rel="noreferrer" target="_blank">mmlab-aueb-1.mmlab.edu.gr</a><br>
> nfdc route add /localhop/nfd udp://<a href="http://mmlab-aueb-1.mmlab.edu.gr" rel="noreferrer" target="_blank">mmlab-aueb-1.mmlab.edu.gr</a><br>
<br>
Finally in (M), I execute<br>
<br>
> ndnpingserver /ndn/gr/aueb/fotiou/test<br>
<br>
NFD in (M) outputs the following:<br>
<br>
1610523599.169459 DEBUG: [nfd.Readvertise] add-route /ndn/gr/aueb/fotiou/test/ping(265,app) readvertising-as /ndn/gr/aueb/fotiou signer id:/ndn/gr/aueb/fotiou<br>
1610523599.169540 DEBUG: [nfd.NfdRibReadvertiseDestination] advertise /ndn/gr/aueb/fotiou on /localhop/nfd<br>
1610523599.169936 DEBUG: [nfd.RibManager] RIB update succeeded for RibUpdate {<br>
Name: /ndn/gr/aueb/fotiou/test/ping<br>
Action: REGISTER<br>
Route(faceid: 265, origin: app, cost: 0, flags: 0x1, never expires)<br>
}<br>
...<br>
1610523607.174591 DEBUG: [nfd.Forwarder] onIncomingInterest in=(261,0) interest=/ndn/gr/aueb/fotiou/KEY/%EDA%B0%0E%FF%19%C9%AD<br>
1610523607.174734 DEBUG: [nfd.ContentStore] find /ndn/gr/aueb/fotiou/KEY/%EDA%B0%0E%FF%19%C9%AD no-match<br>
1610523607.174767 DEBUG: [nfd.Forwarder] onContentStoreMiss interest=/ndn/gr/aueb/fotiou/KEY/%EDA%B0%0E%FF%19%C9%AD<br>
1610523607.174808 DEBUG: [nfd.BestRouteStrategy2] /ndn/gr/aueb/fotiou/KEY/%EDA%B0%0E%FF%19%C9%AD?CanBePrefix&Nonce=8ce296cc from=(261,0) noNextHop<br>
1610523607.174855 DEBUG: [nfd.Forwarder] onOutgoingNack out=261 nack=/ndn/gr/aueb/fotiou/KEY/%EDA%B0%0E%FF%19%C9%AD~NoRoute OK<br>
1610523607.175210 DEBUG: [nfd.Forwarder] onInterestFinalize interest=/ndn/gr/aueb/fotiou/KEY/%EDA%B0%0E%FF%19%C9%AD unsatisfied<br>
1610523609.170316 DEBUG: [nfd.Readvertise] advertise /ndn/gr/aueb/fotiou failure request timed out<br>
<br>
What am I missing?<br>
<br>
Best,<br>
Nikos<br>
--<br>
Nikos Fotiou - <a href="http://pages.cs.aueb.gr/~fotiou" rel="noreferrer" target="_blank">http://pages.cs.aueb.gr/~fotiou</a><br>
Researcher - Mobile Multimedia Laboratory<br>
Athens University of Economics and Business<br>
<a href="https://mm.aueb.gr" rel="noreferrer" target="_blank">https://mm.aueb.gr</a><br>
<br>
_______________________________________________<br>
Nfd-dev mailing list<br>
<a href="mailto:Nfd-dev@lists.cs.ucla.edu" target="_blank">Nfd-dev@lists.cs.ucla.edu</a><br>
<a href="http://www.lists.cs.ucla.edu/mailman/listinfo/nfd-dev" rel="noreferrer" target="_blank">http://www.lists.cs.ucla.edu/mailman/listinfo/nfd-dev</a><br>
</blockquote></div></div>