[Nfd-dev] problem receiving certificate from mmlab-1 testbed node

[Nikos Fotiou]

I worked like a charm.

Thanks,
Nikos

--
Nikos Fotiou - http://pages.cs.aueb.gr/~fotiou
Researcher - Mobile Multimedia Laboratory
Athens University of Economics and Business
https://mm.aueb.gr

> On 25 Jun 2022, at 5:46 PM, Dehart, John <jdd at wustl.edu> wrote:
> 
> 
> This should be fixed now. There was a permission problem.
> John
> 
> 
> 
>> On Jun 24, 2022, at 4:09 PM, Junxiao Shi via Nfd-dev <nfd-dev at lists.cs.ucla.edu> wrote:
>> 
>> Hi Nikos
>> 
>> The CA is not running.
>> https://mmlab-aueb-1.mmlab.edu.gr/n/ Routes tab, look for /ndn/gr/edu/mmlab1/CA. If it's not there, it means the CA has crashed.
>> Go to NDN Slack and post in #testbed channel, ask NDNOPS to reset the CA on that node.
>> 
>> Regarding the certificate ValidityPeriod: I hear it's set to 15 days because NDNCERT CA is still experimental.
>> NDNCERT-legacy https://ndncert.named-data.net can give you 1-year certificates for production use.
>> 
>> Yours, Junxiao
>> 
>> On Fri, Jun 24, 2022 at 4:20 PM Nikos Fotiou via Nfd-dev <nfd-dev at lists.cs.ucla.edu> wrote:
>> Hi,
>> 
>> I am trying to receive a certificate for second14 at aueb.gr using the guidelines here https://gist.github.com/tianyuan129/dc97822f263612dd2a4df288fcbb3bc7
>> 
>>  
>> 
>> A few days ago I did the same and everything worked as expected, but the certificate expired; I tried to repeat the process without success.
>> 
>>  
>> 
>> Here is the output of ndncertclient:
>> 
>>  
>> 
>> ndncert-client
>> 
>> ***************************************
>> 
>> Step 1: CA SELECTION
>> 
>> > Index: 0
>> 
>> >> CA prefix:/ndn
>> 
>> >> Introduction:
>> 
>> Please type in the CA's index that you want to apply or type in NONE if your expected CA is not in the list:
>> 
>> 0
>> 
>>  
>> 
>> ***************************************
>> 
>> Step 2: Please provide information for name assignment
>> 
>> Please input: email
>> 
>> second14 at aueb.gr
>> 
>> Got it. This is what you've provided:
>> 
>> email : second14 at aueb.gr
>> 
>>  
>> 
>> ***************************************
>> 
>> Step 3 Choose another trusted CA suggested by the CA:
>> 
>> > Index: 0
>> 
>> >> Suggested CA: /ndn/gr/edu/mmlab1
>> 
>> > Index: 1
>> 
>> >> Suggested CA: /ndn/gr/edu/mmlab2
>> 
>> Please type in the index of your choice:
>> 
>> 0
>> 
>> You will be redirected to CA: /ndn/gr/edu/mmlab1
>> 
>> Interest timeout
>> 
>>  
>> 
>> Here is the nfd output:
>> 
>>  
>> 
>> 1656101557.977565 DEBUG: [nfd.Forwarder] onOutgoingData out=262 data=/ndn/CA/PROBE/params-sha256=33bc21920e3b1863558c8ea520a19ec29669720bd872c7ecf971ed79e3b0a36a
>> 
>> 1656101557.977767 DEBUG: [nfd.Forwarder] onInterestFinalize interest=/ndn/CA/PROBE/params-sha256=33bc21920e3b1863558c8ea520a19ec29669720bd872c7ecf971ed79e3b0a36a satisfied
>> 
>> 1656101560.017947 DEBUG: [nfd.Forwarder] onIncomingInterest in=(262,0) interest=/ndn/gr/edu/mmlab1/CA/INFO/32=metadata
>> 
>> 1656101560.018080 DEBUG: [nfd.ContentStore] find /ndn/gr/edu/mmlab1/CA/INFO/32=metadata no-match
>> 
>> 1656101560.018217 DEBUG: [nfd.Forwarder] onContentStoreMiss interest=/ndn/gr/edu/mmlab1/CA/INFO/32=metadata
>> 
>> 1656101560.018268 DEBUG: [nfd.BestRouteStrategy] /ndn/gr/edu/mmlab1/CA/INFO/32=metadata?CanBePrefix&MustBeFresh&Nonce=efc15ae5 from=(262,0) newPitEntry-to=261
>> 
>> 1656101560.018413 DEBUG: [nfd.Forwarder] onOutgoingInterest out=261 interest=/ndn/gr/edu/mmlab1/CA/INFO/32=metadata
>> 
>> 1656101564.040141 DEBUG: [nfd.Forwarder] onInterestFinalize interest=/ndn/gr/edu/mmlab1/CA/INFO/32=metadata unsatisfied
>> 
>>  
>> 
>> Does anybody know what is happening?
>> 
>>  
>> 
>> BTW when I try issue a certificate for my gmail account, I receive it with success.
>> 
>>  
>> 
>> Finally, is it possible to increase the lifetime of certificates? 15 days is too sort.
>> 
>>  
>> 
>> Best,
>> 
>> Nikos
>> 
>>  
>> 
>>  
>> 
>> Nikos Fotiou - http://pages.cs.aueb.gr/~fotiou
>> 
>> Researcher - Mobile Multimedia Laboratory
>> 
>> Athens University of Economics and Business
>> 
>> https://mm.aueb.gr
>> 
>> 
>> 
>> _______________________________________________
>> Nfd-dev mailing list
>> Nfd-dev at lists.cs.ucla.edu
>> https://www.lists.cs.ucla.edu/mailman/listinfo/nfd-dev
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4800 bytes
Desc: not available
URL: <http://www.lists.cs.ucla.edu/pipermail/nfd-dev/attachments/20220626/b3d5c6d5/attachment.p7s>