<div dir="auto">Hi Nikos</div><div dir="auto"><br></div><div dir="auto">To use prefix propagation feature, your end host must be able to respond to certificate retrieval Interests, including not only your own certificate, but also every intermediate certificate in the chain.</div><div dir="auto"><br></div><div dir="auto">Go to this page, download each certificate mentioned above, and save the files in a folder.</div><div dir="auto"><div><a href="https://ndncert.named-data.net/cert/list/html">https://ndncert.named-data.net/cert/list/html</a></div></div><div dir="auto">Then, run ndn6-serve-certs command to serve these certificates.</div><div dir="auto"><div><a href="https://github.com/yoursunny/ndn6-tools/blob/main/serve-certs.md">https://github.com/yoursunny/ndn6-tools/blob/main/serve-certs.md</a></div><div dir="auto">You can install ndn6-serve-certs either from source code, or from ndn6-tools package available on <a href="https://nfd-nightly.ndn.today">https://nfd-nightly.ndn.today</a> repository.</div><div dir="auto"><br></div><div dir="auto">Yours, Junxiao</div></div><div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Jun 2, 2022 at 17:57 Nikos Fotiou <<a href="mailto:fotiou@aueb.gr">fotiou@aueb.gr</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;padding-left:1ex;border-left-color:rgb(204,204,204)"><div lang="EL" link="blue" vlink="purple" style="word-wrap:break-word"><div class="m_-3576640172817958702WordSection1"><p class="MsoNormal"><span lang="EN-US">Dear </span><span lang="EN-US">Junxiao,<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">Indeed I tried again and it worked. <u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-US">I received a certificate from UMemphis and everything work as expected. But I have a problem with /ndn/gr/edu/mmlab1/. <u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">I installed a certificate for the prexif “/ndn/gr/edu/mmlab1/%40GUEST/fotiou%<a href="http://40aueb.gr" target="_blank">40aueb.gr</a>” and my app that used to work now fails to propagate the prefix. In nfd console I see errors like the following:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-US">1654203850.713789 DEBUG: [nfd.Forwarder] onIncomingInterest in=(262,0) interest=/ndn/gr/edu/mmlab1/KEY/sq%ECC1%28%ACY<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">1654203850.714001 DEBUG: [nfd.ContentStore] find /ndn/gr/edu/mmlab1/KEY/sq%ECC1%28%ACY no-match<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">1654203850.714157 DEBUG: [nfd.Forwarder] onContentStoreMiss interest=/ndn/gr/edu/mmlab1/KEY/sq%ECC1%28%ACY<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">1654203850.714413 DEBUG: [nfd.BestRouteStrategy2] /ndn/gr/edu/mmlab1/KEY/sq%ECC1%28%ACY?CanBePrefix&Nonce=063a7833 from=(262,0) noNextHop<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">1654203850.714782 DEBUG: [nfd.Forwarder] onOutgoingNack out=262 nack=/ndn/gr/edu/mmlab1/KEY/sq%ECC1%28%ACY~NoRoute OK<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">1654203850.715591 DEBUG: [nfd.Forwarder] onInterestFinalize interest=/ndn/gr/edu/mmlab1/KEY/sq%ECC1%28%ACY unsatisfied<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">1654203854.714271 DEBUG: [nfd.Forwarder] onIncomingInterest in=(262,0) interest=/ndn/gr/edu/mmlab1/KEY/sq%ECC1%28%ACY<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">1654203854.714609 DEBUG: [nfd.ContentStore] find /ndn/gr/edu/mmlab1/KEY/sq%ECC1%28%ACY no-match<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">1654203854.715022 DEBUG: [nfd.Forwarder] onContentStoreMiss interest=/ndn/gr/edu/mmlab1/KEY/sq%ECC1%28%ACY<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">1654203854.715156 DEBUG: [nfd.BestRouteStrategy2] /ndn/gr/edu/mmlab1/KEY/sq%ECC1%28%ACY?CanBePrefix&Nonce=109a721f from=(262,0) noNextHop<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">1654203854.715425 DEBUG: [nfd.Forwarder] onOutgoingNack out=262 nack=/ndn/gr/edu/mmlab1/KEY/sq%ECC1%28%ACY~NoRoute OK<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">1654203854.716321 DEBUG: [nfd.Forwarder] onInterestFinalize interest=/ndn/gr/edu/mmlab1/KEY/sq%ECC1%28%ACY unsatisfied<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">1654203858.714413 DEBUG: [nfd.Forwarder] onIncomingInterest in=(262,0) interest=/ndn/gr/edu/mmlab1/KEY/sq%ECC1%28%ACY<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">1654203858.714740 DEBUG: [nfd.ContentStore] find /ndn/gr/edu/mmlab1/KEY/sq%ECC1%28%ACY no-match<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">1654203858.715035 DEBUG: [nfd.Forwarder] onContentStoreMiss interest=/ndn/gr/edu/mmlab1/KEY/sq%ECC1%28%ACY<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">1654203858.715158 DEBUG: [nfd.BestRouteStrategy2] /ndn/gr/edu/mmlab1/KEY/sq%ECC1%28%ACY?CanBePrefix&Nonce=94ae0e67 from=(262,0) noNextHop<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">1654203858.715383 DEBUG: [nfd.Forwarder] onOutgoingNack out=262 nack=/ndn/gr/edu/mmlab1/KEY/sq%ECC1%28%ACY~NoRoute OK<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">1654203858.716061 DEBUG: [nfd.Forwarder] onInterestFinalize interest=/ndn/gr/edu/mmlab1/KEY/sq%ECC1%28%ACY unsatisfied<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">1654203860.716052 DEBUG: [nfd.Readvertise] advertise /ndn/gr/edu/mmlab1/%40GUEST/fotiou%<a href="http://40aueb.gr" target="_blank">40aueb.gr</a> failure request timed out<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-US">The machine I am using is properly connected to the testbed ( I can do ndnping to testbed nodes) and I can see from ndnsec-ls-identity -vvv that “</span><span lang="EN-US">=/ndn/gr/edu/mmlab1/KEY/sq%ECC1%28%ACY” is the key that singed my certificate.</span><span lang="EN-US"><u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-US">* /ndn/gr/edu/mmlab1/%40GUEST/fotiou%<a href="http://40aueb.gr" target="_blank">40aueb.gr</a><u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">  +->* /ndn/gr/edu/mmlab1/%40GUEST/fotiou%<a href="http://40aueb.gr/KEY/%BC%2Cj%FA%91K%C0w" target="_blank">40aueb.gr/KEY/%BC%2Cj%FA%91K%C0w</a><u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">       +->* /ndn/gr/edu/mmlab1/%40GUEST/fotiou%<a href="http://40aueb.gr/KEY/%BC%2Cj%FA%91K%C0w/NA/v=1654200301902" target="_blank">40aueb.gr/KEY/%BC%2Cj%FA%91K%C0w/NA/v=1654200301902</a><u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">            Certificate Name:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              /ndn/gr/edu/mmlab1/%40GUEST/fotiou%<a href="http://40aueb.gr/KEY/%BC%2Cj%FA%91K%C0w/NA/v=1654200301902" target="_blank">40aueb.gr/KEY/%BC%2Cj%FA%91K%C0w/NA/v=1654200301902</a><u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">            Additional Description:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              advisor:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              email: <a href="mailto:fotiou@aueb.gr" target="_blank">fotiou@aueb.gr</a><u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              fullname:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              group:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              homeurl:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              organization: Athens University of Economics and Business, Greece<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">            Public Key:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              Key Type: 256-bit EC<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE6gHv39YElwoOuXMWVVk2LYpjsuwf<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              AX0VxoTNy3sIqAbq3sTr6ctB7n336aw057JdPW90BZgygtsgDoI8HBoNqQ==<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">            Validity:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              Not Before: 2022-06-01T20:05:01<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              Not After: 2023-06-02T20:05:01<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">            Signature Information:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              Signature Type: SignatureSha256WithEcdsa<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              Key Locator: Name=/ndn/gr/edu/mmlab1/KEY/sq%ECC1%28%ACY<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">       +->  /ndn/gr/edu/mmlab1/%40GUEST/fotiou%<a href="http://40aueb.gr/KEY/%BC%2Cj%FA%91K%C0w/self/v=1654200086756" target="_blank">40aueb.gr/KEY/%BC%2Cj%FA%91K%C0w/self/v=1654200086756</a><u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">            Certificate Name:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              /ndn/gr/edu/mmlab1/%40GUEST/fotiou%<a href="http://40aueb.gr/KEY/%BC%2Cj%FA%91K%C0w/self/v=1654200086756" target="_blank">40aueb.gr/KEY/%BC%2Cj%FA%91K%C0w/self/v=1654200086756</a><u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">            Public Key:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              Key Type: 256-bit EC<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE6gHv39YElwoOuXMWVVk2LYpjsuwf<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              AX0VxoTNy3sIqAbq3sTr6ctB7n336aw057JdPW90BZgygtsgDoI8HBoNqQ==<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">            Validity:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              Not Before: 2022-06-02T20:01:26<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              Not After: 2042-05-28T20:01:26<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">            Signature Information:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              Signature Type: SignatureSha256WithEcdsa<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              Key Locator: Name=/ndn/gr/edu/mmlab1/%40GUEST/fotiou%<a href="http://40aueb.gr/KEY/%BC%2Cj%FA%91K%C0w" target="_blank">40aueb.gr/KEY/%BC%2Cj%FA%91K%C0w</a><u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              Self-Signed: yes<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-US">Any idea what is happening?<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-US">By the way, I didn’t have success with ndncert client: I never receive the verification code. I tried both <a href="mailto:nikosft@gmail.com" target="_blank">nikosft@gmail.com</a> (which corresponds to  /ndn/com/gmail/nikosft) as well as <a href="mailto:fotiou@aueb.gr" target="_blank">fotiou@aueb.gr</a> (which corresponds to  /ndn/gr/edu/mmlab1/aueb/fotiou)<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-US">Best,<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">Nikos<u></u><u></u></span></p></div></div><div lang="EL" link="blue" vlink="purple" style="word-wrap:break-word"><div class="m_-3576640172817958702WordSection1"><p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p><div style="border-style:solid none none;border-top-width:1pt;padding:3pt 0cm 0cm;border-top-color:rgb(225,225,225)"><p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> Junxiao Shi <<a href="mailto:shijunxiao@email.arizona.edu" target="_blank">shijunxiao@email.arizona.edu</a>> <br><b>Sent:</b> Thursday, June 2, 2022 9:40 PM<br><b>To:</b> Nikos Fotiou <<a href="mailto:fotiou@aueb.gr" target="_blank">fotiou@aueb.gr</a>><br><b>Cc:</b> <a href="mailto:nfd-dev@lists.cs.ucla.edu" target="_blank">nfd-dev@lists.cs.ucla.edu</a><br><b>Subject:</b> Re: [Nfd-dev] certificate for interacting with NDN testbed<u></u><u></u></span></p></div><p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p><div><p class="MsoNormal"><span lang="EN-US">Hi Nikos<u></u><u></u></span></p><div><p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p></div><div><p class="MsoNormal"><span lang="EN-US">There's no known outage of NDNCERT-legacy website </span><a href="https://ndncert.named-data.net/" target="_blank"><span lang="EN-US">https://ndncert.named-data.net/</span></a><span lang="EN-US"> . The frontpage appears accessible at this moment.<u></u><u></u></span></p></div><div><p class="MsoNormal"><span lang="EN-US">If you receive a server error on a specific HTTP request, please provide an HAR or SAZ capture.<u></u><u></u></span></p></div><div><p class="MsoNormal"><span lang="EN-US">You can generate an HAR capture with Chrome devtools, in Network tab right click and select "Save all as HAR".<u></u><u></u></span></p></div><div><p class="MsoNormal"><span lang="EN-US">You can generate a SAZ capture with Fiddler app.<u></u><u></u></span></p></div><div><p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p></div><div><p class="MsoNormal"><span lang="EN-US">The "new" way to obtain NDN testbed certificate is through the NDNCERT 0.3 protocol.<u></u><u></u></span></p></div><div><p class="MsoNormal"><span lang="EN-US">See instructions for the C++ NDNCERT client: </span><a href="https://gist.github.com/tianyuan129/dc97822f263612dd2a4df288fcbb3bc7" target="_blank"><span lang="EN-US">https://gist.github.com/tianyuan129/dc97822f263612dd2a4df288fcbb3bc7</span></a><span lang="EN-US"><u></u><u></u></span></p></div><div><p class="MsoNormal"><span lang="EN-US">There are other clients available, but no instructions yet.<u></u><u></u></span></p></div><div><p class="MsoNormal"><span lang="EN-US">Nevertheless, I anticipate that the NDNCERT-legacy website would stay operational in next few months.<u></u><u></u></span></p></div><div><p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p></div><div><p class="MsoNormal"><span lang="EN-US">Yours, Junxiao<u></u><u></u></span></p></div></div><p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p><div><div><p class="MsoNormal"><span lang="EN-US">On Thu, Jun 2, 2022 at 11:45 AM Nikos Fotiou via Nfd-dev <</span><a href="mailto:nfd-dev@lists.cs.ucla.edu" target="_blank"><span lang="EN-US">nfd-dev@lists.cs.ucla.edu</span></a><span lang="EN-US">> wrote:<u></u><u></u></span></p></div><blockquote style="border-style:none none none solid;border-left-width:1pt;padding:0cm 0cm 0cm 6pt;margin:5pt 0cm 5pt 4.8pt;border-left-color:rgb(204,204,204)"><div><div><p class="MsoNormal"><span lang="EN-US">Hi,<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">Some time ago we developed an NDN application that used NDN testbed. In order to interact with the testbed we obtained a certificate from </span><a href="https://ndncert.named-data.net" target="_blank"><span lang="EN-US">https://ndncert.named-data.net</span></a><span lang="EN-US"> However our certificate has expired and the ndncert web site seems unresponsive (it outputs “internal server error”). Is this a temporary glitch, or has the process for obtaining a certificate changed?<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">Best,<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">Nikos<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">Nikos Fotiou - </span><a href="http://pages.cs.aueb.gr/~fotiou" target="_blank"><span lang="EN-US" style="color:rgb(5,99,193)">http://pages.cs.aueb.gr/~fotiou</span></a><span lang="EN-US"><u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">Researcher - Mobile Multimedia Laboratory<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">Athens University of Economics and Business<u></u><u></u></span></p><p class="MsoNormal"><a href="https://mm.aueb.gr" target="_blank"><span lang="EN-US" style="color:rgb(5,99,193)">https://mm.aueb.gr</span></a><span lang="EN-US"><u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p></div></div><p class="MsoNormal"><span lang="EN-US">_______________________________________________<br>Nfd-dev mailing list<br></span><a href="mailto:Nfd-dev@lists.cs.ucla.edu" target="_blank"><span lang="EN-US">Nfd-dev@lists.cs.ucla.edu</span></a><span lang="EN-US"><br></span><a href="https://www.lists.cs.ucla.edu/mailman/listinfo/nfd-dev" target="_blank"><span lang="EN-US">https://www.lists.cs.ucla.edu/mailman/listinfo/nfd-dev</span></a><span lang="EN-US"><u></u><u></u></span></p></blockquote></div></div></div></blockquote></div></div>