NDNCERT CA Instructions

How to setup a NDNCERT CA: take NDN testbed CA as an example

We want to setup NDN CA and NDN ucla CA.

Prerequisites

• NDN testbed certificate /ndn/KEY/xxxxx/xxx/xxx
• ucla certificate /ndn/edu/ucla/KEY/xxxxx/xxx/xxx

Step 1

Open ndncert NDN CA config file and edit it as:

// ndn.ca.conf
{
  "ca-list":
  [
    {
        "ca-prefix": "/ndn",
        "issuing-freshness": "720",
        "validity-period": "360",
        "ca-info": "NDN Testbed CA",

        "probe": "Use the university/organization name as input",

        "targeted-list": "Use your email address (edu preferred) as input",
        "related-ca-list":
        [
          { "ca-prefix": "/ndn/edu/ucla" },
          { "ca-prefix": "/ndn/edu/arizona" },
          { "ca-prefix": "/ndn/edu/memphis" }
        ],

        "supported-challenges":
        [
            { "type": "PIN" }
        ]
    }
  ]
}

Open ndncert UCLA CA config file and edit it as:

// ucla.ca.conf
{
  "ca-list":
  [
    {
        "ca-prefix": "/ndn/edu/ucla",
        "issuing-freshness": "720",
        "validity-period": "360",
        "ca-info": "UCLA CA",
        "probe": "Use the university/organization name as input",
        "supported-challenges":
        [
            { "type": "Email" },
            { "type": "PIN"}
        ]
    }
  ]
}

Step 2

run NDNCERT CAs:

ndncert-ca-server -f ndn.ca.conf

ndncert-ca-server -f ucla.ca.conf