[Nfd-dev] certificate for interacting with NDN testbed

[Junxiao Shi]

Hi Nikos

The verifier needs to be able to fetch the certificates either from its own
cache or from your end host.
If the necessary certificates are already cached on the router, you can get
away with not serving it locally.
As soon as the certificates are evicted from the cache, problems will
reappear.

https://talks.ndn.today PersonalCA_20200529.pptx has some explanation on
this issue.
See page 18-19, 32-35.

Yours, Junxiao


On Thu, Jun 2, 2022, 18:48 Nikos Fotiou <fotiou at aueb.gr> wrote:

> Dear Junxiao,
>
> You are a hero! Serving the intermediate certificate using
> ndn6-serve-certs worked. Out of curiosity, why this was not necessary with
> the certificate from umephis?
>
>
>
> Best,
>
> Nikos
>
> *From:* Junxiao Shi <shijunxiao at email.arizona.edu>
> *Sent:* Friday, June 3, 2022 1:21 AM
> *To:* Nikos Fotiou <fotiou at aueb.gr>
> *Cc:* nfd-dev at lists.cs.ucla.edu
> *Subject:* Re: [Nfd-dev] certificate for interacting with NDN testbed
>
>
>
> Hi Nikos
>
>
>
> To use prefix propagation feature, your end host must be able to respond
> to certificate retrieval Interests, including not only your own
> certificate, but also every intermediate certificate in the chain.
>
>
>
> Go to this page, download each certificate mentioned above, and save the
> files in a folder.
>
> https://ndncert.named-data.net/cert/list/html
>
> Then, run ndn6-serve-certs command to serve these certificates.
>
> https://github.com/yoursunny/ndn6-tools/blob/main/serve-certs.md
>
> You can install ndn6-serve-certs either from source code, or from
> ndn6-tools package available on https://nfd-nightly.ndn.today repository.
>
>
>
> Yours, Junxiao
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.lists.cs.ucla.edu/pipermail/nfd-dev/attachments/20220602/850428c3/attachment.html>