Gitiles
Code Review Sign In
gerrit.named-data.net / ndncert / a2ce59949ed9a7d2df85ee1d8a5b5dbb87baddfc
commita2ce59949ed9a7d2df85ee1d8a5b5dbb87baddfc[log] [tgz]
authorZhiyi Zhang <zhiyi@cs.ucla.edu>Wed Aug 14 17:35:00 2019 -0700
committerZhiyi Zhang <zhiyi@cs.ucla.edu>Wed Aug 28 14:57:29 2019 -0700
tree5059de791da02fffb5ba6422e6abaf92b7dcae89
parent368341ba3c0c35c793a2ea0c2c363b14aecbee93 [diff]
CryptoHelper: Fix a logic error in HKDF and use OpenSSL HMAC

The reason of using OpenSSL HMAC is because the use of arbitrary-size HMAC key in HKDF

Change-Id: I221c0802c67ed153d6b415d6ec66726c8a205d32
2 files changed
tree: 5059de791da02fffb5ba6422e6abaf92b7dcae89
  1. .jenkins.d/
  2. .waf-tools/
  3. src/
  4. systemd/
  5. tests/
  6. tools/
  7. .gitignore
  8. .jenkins
  9. .mailmap
  10. .travis.yml
  11. AUTHORS.md
  12. ca.conf.sample
  13. client.conf.sample
  14. COPYING.md
  15. libndn-cert.pc.in
  16. ndncert-mail.conf.sample
  17. ndncert-send-email-challenge.py
  18. README.md
  19. waf
  20. wscript
README.md

NDN Certificate Management Protocol (NDNCERT)

Build Status

NDN certificate management protocol (NDNCERT) enables automatic certificate management in NDN. In Named Data Networking (NDN), every entity should have corresponding identity (namespace) and the corresponding certificate for this namespace. Moreover, entities need simple mechanisms to manage sub-identities and their certificates. NDNCERT provides flexible mechanisms to request certificate from a certificate authority(CA) and, as soon as certificate is obtained, mechanisms to issue and manage certificates in the designated namespace. Note that NDNCERT does not impose any specific trust model or trust anchors. While the primary use case of the developed protocol is to manage NDN testbed certificates, it can be used with any other set of global and local trust anchors.

This specification provides details and packet formats to request certificates, create certificates after one of the validation mechanism, and how the issued certificate is retrieved by the original requester.

See our GitHub wiki for more details.