| commit | af7c290c7f0dae38204e07639bf07f2931300f88 | [log] [tgz] |
|---|---|---|
| author | Zhiyi Zhang <zhiyi@cs.ucla.edu> | Thu Mar 14 22:13:21 2019 -0700 |
| committer | Zhiyi Zhang <zhiyi@cs.ucla.edu> | Mon Jun 10 14:39:50 2019 -0700 |
| tree | b8c1b962a1723b6f86406f15271d5eace4cb73e4 | |
| parent | 8c9d1ea4d98d7843c0ec3277863dca4054953606 [diff] |
Update the NDNCERT library to version NDNCERT v2 spec:[https://github.com/named-data/ndncert/wiki/NDNCERT-Protocol-new] Change-Id: Ia480a8e70c4b38ca170dfe2fcf50d1265ab65f46
- .waf-tools/openssl.py[Added - diff]
- AUTHORS.md[diff]
- src/ca-config.cpp[diff]
- src/ca-config.hpp[diff]
- src/ca-detail/ca-memory.cpp[diff]
- src/ca-detail/ca-sqlite.cpp[diff]
- src/ca-module.cpp[diff]
- src/ca-module.hpp[diff]
- src/ca-storage.cpp[diff]
- src/ca-storage.hpp[diff]
- src/certificate-request.cpp[diff]
- src/certificate-request.hpp[diff]
- src/challenge-module.cpp[diff]
- src/challenge-module.hpp[diff]
- src/challenge-module/challenge-credential.cpp[diff]
- src/challenge-module/challenge-credential.hpp[diff]
- src/challenge-module/challenge-email.cpp[diff]
- src/challenge-module/challenge-email.hpp[diff]
- src/challenge-module/challenge-pin.cpp[diff]
- src/challenge-module/challenge-pin.hpp[diff]
- src/client-config.cpp[diff]
- src/client-config.hpp[diff]
- src/client-module.cpp[diff]
- src/client-module.hpp[diff]
- src/crypto-support/crypto-helper.cpp[Added - diff]
- src/crypto-support/crypto-helper.hpp[Added - diff]
- src/crypto-support/enc-tlv.cpp[Added - diff]
- src/crypto-support/enc-tlv.hpp[Added - diff]
- src/json-helper.cpp[Deleted - diff]
- src/json-helper.hpp[Deleted - diff]
- src/ndncert-common.hpp[diff]
- tests/boost-test.hpp[diff]
- tests/database-fixture.hpp[diff]
- tests/global-configuration.cpp[Deleted - diff]
- tests/identity-management-fixture.cpp[diff]
- tests/identity-management-fixture.hpp[diff]
- tests/main.cpp[diff]
- tests/test-common.cpp[Deleted - diff]
- tests/test-common.hpp[diff]
- tests/test-home-fixture.hpp[Added - diff]
- tests/unit-tests/ca-config.t.cpp[diff]
- tests/unit-tests/ca-memory.t.cpp[diff]
- tests/unit-tests/ca-module.t.cpp[diff]
- tests/unit-tests/ca-sqlite.t.cpp[diff]
- tests/unit-tests/ca.conf.test[diff]
- tests/unit-tests/certificate-request.t.cpp[Deleted - diff]
- tests/unit-tests/challenge-credential.t.cpp[diff]
- tests/unit-tests/challenge-email.t.cpp[diff]
- tests/unit-tests/challenge-module.t.cpp[Deleted - diff]
- tests/unit-tests/challenge-pin.t.cpp[diff]
- tests/unit-tests/client-config.t.cpp[diff]
- tests/unit-tests/client-module.t.cpp[diff]
- tests/unit-tests/client.conf.test[diff]
- tests/unit-tests/crypto-helper.t.cpp[Added - diff]
- tests/unit-tests/dummy-test.t.cpp[diff]
- tests/unit-tests/enc-tlv.t.cpp[Added - diff]
- tests/unit-tests/json-helper.t.cpp[Deleted - diff]
- tools/ndncert-ca-server.cpp[diff]
- tools/ndncert-ca-status.cpp[diff]
- tools/ndncert-client.cpp[diff]
- wscript[diff]
- .jenkins.d/
- .waf-tools/
- src/
- systemd/
- tests/
- tools/
- .gitignore
- .jenkins
- .mailmap
- .travis.yml
- AUTHORS.md
- ca.conf.sample
- client.conf.sample
- COPYING.md
- libndn-cert.pc.in
- ndncert-mail.conf.sample
- ndncert-send-email-challenge.py
- README.md
- waf
- wscript
NDN Certificate Management Protocol (NDNCERT)
NDN certificate management protocol (NDNCERT) enables automatic certificate management in NDN. In Named Data Networking (NDN), every entity should have corresponding identity (namespace) and the corresponding certificate for this namespace. Moreover, entities need simple mechanisms to manage sub-identities and their certificates. NDNCERT provides flexible mechanisms to request certificate from a certificate authority(CA) and, as soon as certificate is obtained, mechanisms to issue and manage certificates in the designated namespace. Note that NDNCERT does not impose any specific trust model or trust anchors. While the primary use case of the developed protocol is to manage NDN testbed certificates, it can be used with any other set of global and local trust anchors.
This specification provides details and packet formats to request certificates, create certificates after one of the validation mechanism, and how the issued certificate is retrieved by the original requester.
See our GitHub wiki for more details.