[Nfd-dev] certificate for interacting with NDN testbed

Thu Jun 2 17:04:27 PDT 2022

I found it. 

I can see the challenge in the log file. I enter the correct challenge and then ndncert-client outputs:

>> Certificate has already been issued, downloading certificate...

>> Interest timeout

In the nfd output I see the following:

1654214277.802105 DEBUG: [nfd.Forwarder] onOutgoingData out=266 data=/ndn/gr/edu/mmlab1/CA/CHALLENGE/%81Qf%7B%0Cz%00%F4/params-sha256=522d0d7207cb11ac2a5fbd120473a39154326781b0bc74f487c8a4b1becbc7c9/%16M%1B%01%03%1CH%07F%08%03ndn%08%02gr%08%03edu%08%06mmlab1%08%04aueb%08%09second-14%08%03KEY%08%087%9EV%27%08%C2C2%08%04self6%08%00%00%01%81%26%CF%E4%A3/%17F0D%02%20gW%11%95Y%603%17%17%9EB%8BN%7D%B1v%D6%C9%9D%3E~%89%EF%14%5D%82%EF%A5%207R%E4%02%20p%B3%0A%5B%E9%E3%00Q%E14%8B%21%0C%D2kzz%D3%90%85j%EA%A7%E5SRGS%18%C9%3B%DA

1654214277.805087  WARN: [nfd.GenericLinkService] [id=266,local=unix:///run/nfd.sock,remote=fd://33] packet parse error (Unexpected TLV-TYPE 7 while decoding Delegation): DROP

1654214277.805351 DEBUG: [nfd.Forwarder] onInterestFinalize interest=/ndn/gr/edu/mmlab1/CA/CHALLENGE/%81Qf%7B%0Cz%00%F4/params-sha256=522d0d7207cb11ac2a5fbd120473a39154326781b0bc74f487c8a4b1becbc7c9/%16M%1B%01%03%1CH%07F%08%03ndn%08%02gr%08%03edu%08%06mmlab1%08%04aueb%08%09second-14%08%03KEY%08%087%9EV%27%08%C2C2%08%04self6%08%00%00%01%81%26%CF%E4%A3/%17F0D%02%20gW%11%95Y%603%17%17%9EB%8BN%7D%B1v%D6%C9%9D%3E~%89%EF%14%5D%82%EF%A5%207R%E4%02%20p%B3%0A%5B%E9%E3%00Q%E14%8B%21%0C%D2kzz%D3%90%85j%EA%A7%E5SRGS%18%C9%3B%DA satisfied

Any clue?

Thanks,

Nikos

From: Tianyuan Yu <tianyuan at cs.ucla.edu> 
Sent: Friday, June 3, 2022 2:49 AM
To: Nikos Fotiou <fotiou at aueb.gr>
Cc: Davide Pesavento <davidepesa at gmail.com>; John DeHart <jdd at wustl.edu>; nfd-dev at lists.cs.ucla.edu
Subject: Re: [Nfd-dev] certificate for interacting with NDN testbed

Hi Nikos,

I don't know the ndncert deployment details of your testbed machines, so I don't know how to check that. Ideally John should know that.

Best,

Tianyuan

On Thu, Jun 2, 2022 at 4:37 PM Nikos Fotiou <fotiou at aueb.gr <mailto:fotiou at aueb.gr> > wrote:

Dear Tianyuan,

Is it possible for us to see the log file of ndncert-ca-server in our testbed machines? This way we can overcome the mail delivery issues.

Best,

Nikos

From: Tianyuan Yu <tianyuan at cs.ucla.edu <mailto:tianyuan at cs.ucla.edu> > 
Sent: Friday, June 3, 2022 1:23 AM
To: Davide Pesavento <davidepesa at gmail.com <mailto:davidepesa at gmail.com> >
Cc: John DeHart <jdd at wustl.edu <mailto:jdd at wustl.edu> >; nfd-dev at lists.cs.ucla.edu <mailto:nfd-dev at lists.cs.ucla.edu> ; Nikos Fotiou <fotiou at aueb.gr <mailto:fotiou at aueb.gr> >
Subject: Re: [Nfd-dev] certificate for interacting with NDN testbed

Hi All,

I checked the log, it says:

Jun 02 21:27:41 suns.cs.ucla.edu <http://suns.cs.ucla.edu>  ndncert-ca-server[2916672]: smtplib.SMTPDataError: (550, b'5.4.5 Daily user sending quota exceeded. q8-20020a05620a038800b006a65ab477a9sm3760973qkm.61 - gsmtp')
Jun 02 21:27:41 suns.cs.ucla.edu <http://suns.cs.ucla.edu>  ndncert-ca-server[2345427]: 1654205261.126304 TRACE: [ndncert.challenge.email] EmailSending Script ndncert-send-email-challenge fails.
Jun 02 21:27:41 suns.cs.ucla.edu <http://suns.cs.ucla.edu>  ndncert-ca-server[2345427]: 1654205261.126338 TRACE: [ndncert.challenge.email] Secret for request 5B6125CB2571ED64 : 469463
Jun 02 21:27:41 suns.cs.ucla.edu <http://suns.cs.ucla.edu>  ndncert-ca-server[2345427]: 1654205261.394190 TRACE: [ndncert.ca <http://ndncert.ca> ] No failure no success. Challenge moves on

It seems that the CA did process the request and generated a challenge code 469463, but the email was failing because of the SMTP server (I suppose it's gmail?).

Best,

Tianyuan

On Thu, Jun 2, 2022 at 3:03 PM Davide Pesavento <davidepesa at gmail.com <mailto:davidepesa at gmail.com> > wrote:

John and/or Tianyuan,

could you please take a look at the ndncert issue below?

Thanks,
Davide

On Thu, Jun 2, 2022 at 5:57 PM Nikos Fotiou via Nfd-dev
<nfd-dev at lists.cs.ucla.edu <mailto:nfd-dev at lists.cs.ucla.edu> > wrote:
>
> By the way, I didn’t have success with ndncert client: I never receive the verification code. I tried both nikosft at gmail.com <mailto:nikosft at gmail.com>  (which corresponds to  /ndn/com/gmail/nikosft) as well as fotiou at aueb.gr <mailto:fotiou at aueb.gr>  (which corresponds to  /ndn/gr/edu/mmlab1/aueb/fotiou)
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.lists.cs.ucla.edu/pipermail/nfd-dev/attachments/20220603/dd909823/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6501 bytes
Desc: not available
URL: <http://www.lists.cs.ucla.edu/pipermail/nfd-dev/attachments/20220603/dd909823/attachment.p7s>