[Nfd-dev] Try NDNCERT (based on Interest-Data exchange) and get an NDN certificate today

[Zhiyi Zhang]

On Tue, Nov 5, 2019 at 1:47 PM Junxiao Shi <shijunxiao at email.arizona.edu>
wrote:

> Hi Zhiyi
>
>
>>> I'm trying to deploy a CA but the instructions do not work.
>>> Software version is
>>> https://github.com/Zhiyi-Zhang/ndncert/tree/3b9a2501d60e90ec33845e021a500a9820bf9050 with
>>> ndn-cxx 0.6.6.
>>> The config file is written exactly as given in the instructions
>>> <https://github.com/named-data/ndncert/wiki/NDNCERT-CA-Instructions#setup-ndn-testbed-ca>
>>> .
>>
>>
>> sunny at sunny5:~/code/ndncert$ ndnsec-ls-identity
>>> * /example
>>> sunny at sunny5:~/code/ndncert$ cat ~/ndn.ca.conf
>>> {
>>>   "ca-list":
>>>   [
>>>     {
>>>         "ca-prefix": "/example",
>>>         "issuing-freshness": "720",
>>>         "validity-period": "360",
>>>         "ca-info": "My Personal CA",
>>>         "supported-challenges":
>>>         [
>>>             { "type": "PIN" }
>>>         ]
>>>     }
>>>   ]
>>> }
>>> sunny at sunny5:~/code/ndncert$ LD_LIBRARY_PATH=build
>>> build/bin/ndncert-ca-server -c ~/ndn.ca.conf
>>> terminate called after throwing an instance of
>>> 'boost::exception_detail::clone_impl<boost::exception_detail::error_info_injector<boost::property_tree::ptree_bad_path>
>>> >'
>>>   what():  No such node (ca-prefix)
>>> Aborted (core dumped)
>>
>>
>> Sorry, I should have updated the documentation earlier.
>> The config should be like:
>> {
>>         "ca-prefix": "/example",
>>         "issuing-freshness": "720",
>>         "validity-period": "360",
>>         "ca-info": "My Personal CA",
>>         "supported-challenges":
>>         [
>>             { "type": "PIN" }
>>         ]
>> }
>> We simplified the function of ndncert-ca-server.
>> Now if a node want to become the CA for multiple prefixes, multiple
>> ndncert-ca-server should be started using different config files.
>> I will update the documentation now.
>>
>
> OK, I'll try.
>
>
>>
>> Hi Zhiyi
>>>
>>> Can you merge the commit in ndn-cxx-0.6.6 compatible repository?
>>> https://github.com/Zhiyi-Zhang/ndncert
>>>
>>> Several of my nodes are using ndn-cxx installed from PPA, and they have
>>> to rely on this repository.
>>>
>>
>> Oh, you mean we should merge the code using the old APIs? I don't know
>> whether other reviewers would agree.
>>
>>>
>>>>>> No, that's your personal repository and does not require reviews.
>

Oh. You mean the patch on the client command-line tool.
Got it. I just merged it to my personal repo.

Best,
Zhiyi



>
> Yours, Junxiao
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.lists.cs.ucla.edu/pipermail/nfd-dev/attachments/20191105/a1f74e30/attachment.html>