Data Naming

Certificate

NDNCERT Wiki

• Name: /<prefix>/KEY/<key-id>/<issuer-info>/<version>
• e.g. /ndn/siteA/depart/cs/KEY /223/alice/001
  • Certificate owner: /ndn /siteA/depart/cs
  • Key ID: 223

Revocation Record

Revocation record is a Data packet

• Name: /<prefix>/REVOKE/<keyid>/<issuer>/<version>/<publisher>
  • <publisher> = <issuer>, if this record is produced by certificate issuer
  • <publisher> = self, if this record is produced by certificate owner itself
• Content Type: BLOB
• Content Payload:
  • Revocation Timestamp: The timestamp of this revocation event
  • Key Hash: The public key hash of the corresponding certificate
  • Revocation Reason
• Signature:
  • Signed by the corresponding certificate issuer, or certificate owner

Query of Certificate State

Applications express Interest to query the certificate status

• Name: /<prefix>/REVOKE/<keyid>/<issuer>/<version>
  • CanBePrefix, forwarding hint: /<ledger prefix>
  • Query for specific revocation record: /<prefix>/REVOKE/<keyid>/<issuer>/<version>/<publisher>

Application Layer NACK

If no corresponding record as queried, an application layer NACK is returned

• Name: /<prefix>/REVOKE/<keyid>/<issuer>/<version>/nack/<timestamp>
  • or /<prefix>/REVOKE/<keyid>/<issuer>/<version>/<publisher>/nack/<timestamp>, depending on the received interest
• Content Type: NACK
• NO Content Payload
• Signature:
  • Signature: signed by ledger instances