| Zhiyi Zhang | 3aaf06d | 2020-10-17 13:05:36 -0700 | [diff] [blame] | 1 | # Deploy NDNCERT v0.3 over testbed |
| 2 | |
| 3 | Three steps: |
| 4 | |
| 5 | * Deploy root CA `/ndn` by setting up the NDNCERT CA configuration and run NDNCERT service |
| 6 | * At each site server, run NDNCERT client command line tools to get certificate issued by `/ndn` using the PIN code challenge, set up the CA configuration and run NDNCERT CA service. |
| 7 | * Update the `/ndn`'s configuration file and restart the service. |
| 8 | |
| Zhiyi Zhang | 3aaf06d | 2020-10-17 13:05:36 -0700 | [diff] [blame] | 9 | ## Step 1 |
| 10 | |
| 11 | ```bash |
| Zhiyi Zhang | 633c5bf | 2020-10-17 16:28:05 -0700 | [diff] [blame^] | 12 | sudo ./step1-root-ca.sh |
| Zhiyi Zhang | 3aaf06d | 2020-10-17 13:05:36 -0700 | [diff] [blame] | 13 | ``` |
| 14 | |
| 15 | ## Step 2 |
| 16 | |
| Zhiyi Zhang | 633c5bf | 2020-10-17 16:28:05 -0700 | [diff] [blame^] | 17 | On each site: |
| 18 | |
| 19 | ```bash |
| 20 | ndncert-client |
| 21 | ``` |
| 22 | |
| 23 | ```bash |
| 24 | sudo ./step-2-site-ca.sh |
| 25 | ``` |
| 26 | |
| 27 | ```bash |
| 28 | ndnsec-dump-certificate XXX |
| 29 | ``` |
| 30 | |
| 31 | ## Step 3 |
| 32 | |
| 33 | stop service |
| 34 | |
| 35 | update config file |
| 36 | |
| 37 | restart service |