Skip to content

NDNCERT Instructions

Zhiyi Zhang edited this page Sep 7, 2019 · 3 revisions

NDNCERT Instructions

Two simple steps to get yourself an NDN Identity (represented by an NDN certificate) and become a namespace owner (by running a CA that can issue certificates to your trusted entities, e.g., your cell phone).

Prerequisite

  • Installed the NDNCERT library and Command line tools
  • Installed the NDN Forwarding Daemon (NFD)

Step 1: Get an NDN certificate

In your terminal, run

ndncert-client

Then the command will show all the available namespaces that you can obtain a certificate. If this is the first time you run the tool, there supposed to be one item listed there:

Index      CA Namespace 	 CA Intro            Allow sub-namespace redirection
  0	       /ndn/CA	       NDN Testbed CA      Yes

Simply input the CA from which that you want to apply a certificate or otherwise type in NONE if you want to apply a certificate from a CA that has not been trusted by your device. After that, follow the prompts, finish the identity verification challenge, and finish the application process. If the application succeeds, the certificate will be automatically installed into your local NDN key chain.

Step 2: Become a CA on your own namespace

Want to become a CA for the namespace you just obtained? You just need to edit the NDNCERT configuration file and run NDNCERT CA daemon following the instructions in NDNCERT-CA-Instructions