[Nfd-dev] Try NDNCERT (based on Interest-Data exchange) and get an NDN certificate today

[Junxiao Shi]

Hi Zhiyi


>> I'm trying to deploy a CA but the instructions do not work.
>> Software version is
>> https://github.com/Zhiyi-Zhang/ndncert/tree/3b9a2501d60e90ec33845e021a500a9820bf9050 with
>> ndn-cxx 0.6.6.
>> The config file is written exactly as given in the instructions
>> <https://github.com/named-data/ndncert/wiki/NDNCERT-CA-Instructions#setup-ndn-testbed-ca>
>> .
>
>
> sunny at sunny5:~/code/ndncert$ ndnsec-ls-identity
>> * /example
>> sunny at sunny5:~/code/ndncert$ cat ~/ndn.ca.conf
>> {
>>   "ca-list":
>>   [
>>     {
>>         "ca-prefix": "/example",
>>         "issuing-freshness": "720",
>>         "validity-period": "360",
>>         "ca-info": "My Personal CA",
>>         "supported-challenges":
>>         [
>>             { "type": "PIN" }
>>         ]
>>     }
>>   ]
>> }
>> sunny at sunny5:~/code/ndncert$ LD_LIBRARY_PATH=build
>> build/bin/ndncert-ca-server -c ~/ndn.ca.conf
>> terminate called after throwing an instance of
>> 'boost::exception_detail::clone_impl<boost::exception_detail::error_info_injector<boost::property_tree::ptree_bad_path>
>> >'
>>   what():  No such node (ca-prefix)
>> Aborted (core dumped)
>
>
> Sorry, I should have updated the documentation earlier.
> The config should be like:
> {
>         "ca-prefix": "/example",
>         "issuing-freshness": "720",
>         "validity-period": "360",
>         "ca-info": "My Personal CA",
>         "supported-challenges":
>         [
>             { "type": "PIN" }
>         ]
> }
> We simplified the function of ndncert-ca-server.
> Now if a node want to become the CA for multiple prefixes, multiple
> ndncert-ca-server should be started using different config files.
> I will update the documentation now.
>

OK, I'll try.


>
> Hi Zhiyi
>>
>> Can you merge the commit in ndn-cxx-0.6.6 compatible repository?
>> https://github.com/Zhiyi-Zhang/ndncert
>>
>> Several of my nodes are using ndn-cxx installed from PPA, and they have
>> to rely on this repository.
>>
>
> Oh, you mean we should merge the code using the old APIs? I don't know
> whether other reviewers would agree.
>
>>
>>>>> No, that's your personal repository and does not require reviews.

Yours, Junxiao
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.lists.cs.ucla.edu/pipermail/nfd-dev/attachments/20191105/15d13fbe/attachment-0001.html>