<div dir="auto">Hi Nikos</div><div dir="auto"><br></div><div dir="auto">Prefix propagation feature uses the default certificate of an identity to sign the commands.</div><div dir="auto">Currently your default certificate is a self signed certificate:</div><div dir="auto"><span style="word-spacing:1px;color:rgb(49,49,49)">/ndn/gr/edu/mmlab1/aueb/</span><span style="word-spacing:1px;color:rgb(49,49,49)">second22/KEY/%A3%F3%F7%8F%20%</span><span style="word-spacing:1px;color:rgb(49,49,49)">077%84/self/v=1654290874758</span></div><div dir="auto">You need to set the obtained certificate as the default:</div><div dir="auto">/ndn/gr/edu/mmlab1/aueb/second22/KEY/%A3%F3%F7%8F%20%077%84/NDNCERT/v=1654290901284</div><div dir="auto">You may change the default with `ndnsec set-default` command.</div><div dir="auto"><br></div><div dir="auto">Also, don't forget to serve the certificates with ndn6-serve-certs.</div><div dir="auto">You can export your own certificate with:</div><div dir="auto">ndnsec cert-dump <span style="border-color:rgb(0,0,0)">/ndn/gr/edu/mmlab1/aueb/</span><span style="border-color:rgb(0,0,0)">second22/KEY/%A3%F3%F7%8F%20%</span><span style="border-color:rgb(0,0,0)">077%84/NDNCERT/v=1654290901284 > 0.ndncert</span></div><div dir="auto">You can retrieve an intermediate certificate with:</div><div dir="auto"><div dir="auto" style="border-color:rgb(0,0,0)">ndnpeek -Pf /ndn/gr/edu/mmlab1/KEY/%F7%9C%E4%D3gL%A2%21 | base64 > 1.ndncert</div><div dir="auto">Right after you retrieve those certificates, they will be in the router cache so that your end host won't be asked for them.</div><div dir="auto">However, serving them locally would become useful when you attempt to connect to a different router.</div><div dir="auto"><br></div></div><div dir="auto">Yours, Junxiao</div><div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Jun 3, 2022 at 17:36 Nikos Fotiou via Nfd-dev <<a href="mailto:nfd-dev@lists.cs.ucla.edu">nfd-dev@lists.cs.ucla.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;padding-left:1ex;border-left-color:rgb(204,204,204)"><div lang="EL" link="blue" vlink="purple" style="word-wrap:break-word"><div class="m_-232196604987000014WordSection1"><p class="MsoNormal"><span lang="EN-US">Nevertheless, when I advertise the prefix now I receive:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">“failure authorization rejected”<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-US">This is the output of ndnsec-list -vvv<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">/ndn/gr/edu/mmlab1/aueb/second22<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">  +->* /ndn/gr/edu/mmlab1/aueb/second22/KEY/%A3%F3%F7%8F%20%077%84<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">       +->* /ndn/gr/edu/mmlab1/aueb/second22/KEY/%A3%F3%F7%8F%20%077%84/self/v=1654290874758<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">            Certificate Name:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              /ndn/gr/edu/mmlab1/aueb/second22/KEY/%A3%F3%F7%8F%20%077%84/self/v=1654290874758<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">            Public Key:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              Key Type: 256-bit EC<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEn/rAURbPdsUqj/7u6xN05O81A6Jt<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              yWrcljlhxzLrVP+WC5cniRGg22rzREDRL1GTXWd5LM1PVoI640Ix2cUEXA==<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">            Validity:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              Not Before: 2022-06-03T21:14:34<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              Not After: 2042-05-29T21:14:34<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">            Signature Information:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              Signature Type: SignatureSha256WithEcdsa<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              Key Locator: Name=/ndn/gr/edu/mmlab1/aueb/second22/KEY/%A3%F3%F7%8F%20%077%84<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              Self-Signed: yes<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">       +->  /ndn/gr/edu/mmlab1/aueb/second22/KEY/%A3%F3%F7%8F%20%077%84/NDNCERT/v=1654290901284<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">            Certificate Name:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              /ndn/gr/edu/mmlab1/aueb/second22/KEY/%A3%F3%F7%8F%20%077%84/NDNCERT/v=1654290901284<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">            Public Key:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              Key Type: 256-bit EC<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEn/rAURbPdsUqj/7u6xN05O81A6Jt<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              yWrcljlhxzLrVP+WC5cniRGg22rzREDRL1GTXWd5LM1PVoI640Ix2cUEXA==<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">            Validity:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              Not Before: 2022-06-03T21:14:35<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              Not After: 2022-06-18T21:14:34<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">            Signature Information:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              Signature Type: SignatureSha256WithEcdsa<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              Key Locator: Name=/ndn/gr/edu/mmlab1/KEY/%F7%9C%E4%D3gL%A2%21<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-US">* /localhost/operator<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">  +->* /localhost/operator/KEY/%0EC%3B%C8%B0%98%1D%06<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">       +->* /localhost/operator/KEY/%0EC%3B%C8%B0%98%1D%06/self/v=1654289508625<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">            Certificate Name:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              /localhost/operator/KEY/%0EC%3B%C8%B0%98%1D%06/self/v=1654289508625<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">            Public Key:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              Key Type: 256-bit EC<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAES6VWBfgXdEeWxs0j1JYsbfTmouzv<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              47cndijW+SGal49O6YfVWEO9+1XToummsWZPTAPUib7mgK2mtzBiaCpiRA==<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">            Validity:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              Not Before: 2022-06-03T20:51:48<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              Not After: 2042-05-29T20:51:48<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">            Signature Information:<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              Signature Type: SignatureSha256WithEcdsa<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              Key Locator: Name=/localhost/operator/KEY/%0EC%3B%C8%B0%98%1D%06<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US">              Self-Signed: yes<u></u><u></u></span></p></div></div><div lang="EL" link="blue" vlink="purple" style="word-wrap:break-word"><div class="m_-232196604987000014WordSection1"><p class="MsoNormal"><br></p></div></div></blockquote></div></div>