[Nfd-dev] problem receiving certificate from mmlab-1 testbed node

[Junxiao Shi]

Hi Nikos

The CA is not running.
https://mmlab-aueb-1.mmlab.edu.gr/n/ *Routes* tab, look for
/ndn/gr/edu/mmlab1/CA. If it's not there, it means the CA has crashed.
Go to NDN Slack and post in #testbed channel, ask NDNOPS to reset the CA on
that node.

Regarding the certificate ValidityPeriod: I hear it's set to 15 days
because NDNCERT CA is still experimental.
NDNCERT-legacy https://ndncert.named-data.net can give you 1-year
certificates for production use.

Yours, Junxiao

On Fri, Jun 24, 2022 at 4:20 PM Nikos Fotiou via Nfd-dev <
nfd-dev at lists.cs.ucla.edu> wrote:

> Hi,
>
> I am trying to receive a certificate for second14 at aueb.gr using the
> guidelines here
> https://gist.github.com/tianyuan129/dc97822f263612dd2a4df288fcbb3bc7
>
>
>
> A few days ago I did the same and everything worked as expected, but the
> certificate expired; I tried to repeat the process without success.
>
>
>
> Here is the output of ndncertclient:
>
>
>
> ndncert-client
>
> ***************************************
>
> Step 1: CA SELECTION
>
> > Index: 0
>
> >> CA prefix:/ndn
>
> >> Introduction:
>
> Please type in the CA's index that you want to apply or type in NONE if
> your expected CA is not in the list:
>
> 0
>
>
>
> ***************************************
>
> Step 2: Please provide information for name assignment
>
> Please input: email
>
> second14 at aueb.gr
>
> Got it. This is what you've provided:
>
> email : second14 at aueb.gr
>
>
>
> ***************************************
>
> Step 3 Choose another trusted CA suggested by the CA:
>
> > Index: 0
>
> >> Suggested CA: /ndn/gr/edu/mmlab1
>
> > Index: 1
>
> >> Suggested CA: /ndn/gr/edu/mmlab2
>
> Please type in the index of your choice:
>
> 0
>
> You will be redirected to CA: /ndn/gr/edu/mmlab1
>
> Interest timeout
>
>
>
> Here is the nfd output:
>
>
>
> 1656101557.977565 DEBUG: [nfd.Forwarder] onOutgoingData out=262
> data=/ndn/CA/PROBE/params-sha256=33bc21920e3b1863558c8ea520a19ec29669720bd872c7ecf971ed79e3b0a36a
>
> 1656101557.977767 DEBUG: [nfd.Forwarder] onInterestFinalize
> interest=/ndn/CA/PROBE/params-sha256=33bc21920e3b1863558c8ea520a19ec29669720bd872c7ecf971ed79e3b0a36a
> satisfied
>
> 1656101560.017947 DEBUG: [nfd.Forwarder] onIncomingInterest in=(262,0)
> interest=/ndn/gr/edu/mmlab1/CA/INFO/32=metadata
>
> 1656101560.018080 DEBUG: [nfd.ContentStore] find
> /ndn/gr/edu/mmlab1/CA/INFO/32=metadata no-match
>
> 1656101560.018217 DEBUG: [nfd.Forwarder] onContentStoreMiss
> interest=/ndn/gr/edu/mmlab1/CA/INFO/32=metadata
>
> 1656101560.018268 DEBUG: [nfd.BestRouteStrategy]
> /ndn/gr/edu/mmlab1/CA/INFO/32=metadata?CanBePrefix&MustBeFresh&Nonce=efc15ae5
> from=(262,0) newPitEntry-to=261
>
> 1656101560.018413 DEBUG: [nfd.Forwarder] onOutgoingInterest out=261
> interest=/ndn/gr/edu/mmlab1/CA/INFO/32=metadata
>
> 1656101564.040141 DEBUG: [nfd.Forwarder] onInterestFinalize
> interest=/ndn/gr/edu/mmlab1/CA/INFO/32=metadata unsatisfied
>
>
>
> Does anybody know what is happening?
>
>
>
> BTW when I try issue a certificate for my gmail account, I receive it with
> success.
>
>
>
> Finally, is it possible to increase the lifetime of certificates? 15 days
> is too sort.
>
>
>
> Best,
>
> Nikos
>
>
>
>
>
> Nikos Fotiou - http://pages.cs.aueb.gr/~fotiou
>
> Researcher - Mobile Multimedia Laboratory
>
> Athens University of Economics and Business
>
> https://mm.aueb.gr
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.lists.cs.ucla.edu/pipermail/nfd-dev/attachments/20220624/f97d7b48/attachment-0001.html>