[Nfd-dev] Issue Your Own NDN Certificates

[Junxiao Shi]

Dear folks

I've been asked a few times on how to issue sub-certificates from a primary
testbed certificate from ndncert, so that you can have a different
certificate for each of your devices.
Here's an article that describes this procedure:
https://yoursunny.com/t/2016/ndncert/

This article introduces NDN's hierarchical trust model, and explains how to
issue certificates for your other machines and publish them so that they
can use Automatic Prefix Propagation with a distinct prefix for each
machine.
This article also explains the difference between PKI and NDN's
hierarchical trust model, and demonstrates that the authority of your
certificate is restricted by your identity name.


Procedure about signing certificates and publishing them using repo-ng were
collected from:
http://www.lists.cs.ucla.edu/pipermail/nfd-dev/2014-November/000616.html
http://www.lists.cs.ucla.edu/pipermail/nfd-dev/2015-March/000904.html

Yours, Junxiao


On Mon, Jun 27, 2016 at 4:17 AM, Junxiao Shi <shijunxiao at email.arizona.edu>
wrote:

> If you are still trying to figure out how to get automated prefix
> propagation working, this article shall be useful for you.
> https://yoursunny.com/t/2016/nfd-prefix/
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.lists.cs.ucla.edu/pipermail/nfd-dev/attachments/20160708/e09d468a/attachment.html>