[hipl-users] Re: HIPL - early testing

  • From: Miika Komu <miika@xxxxxx>
  • To: hipl-users@xxxxxxxxxxxxx
  • Date: Fri, 31 Mar 2006 19:46:58 +0300 (EEST)

On Fri, 31 Mar 2006, Fernando Moreira wrote:

> Hello Miika, thank you for your help.
>
> I looked up the manual and didn't find how to generate de HIT.

http://hipl.hiit.fi/hipl/manual/ch06.html

If you want to know the HITs of the localhost, run "ifconfig dummy0" or
"ip addr show dummy0".

> Browsing the mailing list i found one mail from January 2005 where Irene 
> Garcia Vargas spoke about generating a valid HIT.
> Are that instructions up to date?
> Doing hipconf add hi default i obtained 4 different HITs:
>
> debug(crypto.c:1053@dsa_to_hit): HIT is 4075:f2ca:93ec:86b6:1317:f25f:3b21:d5d
> debug(debug.c:430@hip_print_hit): DSA HIT: 
> 4075:f2ca:93ec:86b6:1317:f25f:3b21:0d5d
> debug(crypto.c:1053@dsa_to_hit): HIT is 
> 4059:815f:5d24:d5bf:e831:9236:b493:ca3d
> debug(debug.c:430@hip_print_hit): DSA HIT: 
> 4059:815f:5d24:d5bf:e831:9236:b493:ca3d
> debug(crypto.c:1184@rsa_to_hit): HIT is 
> 40ac:e6b2:8a0e:28d4:cd9a:b844:b1d6:6df9
> debug(debug.c:430@hip_print_hit): RSA HIT: 
> 40ac:e6b2:8a0e:28d4:cd9a:b844:b1d6:6df9
> debug(crypto.c:1184@rsa_to_hit): HIT is 40ba:f913:a523:9770:dbd5:e4ca:ee4:f46b
> debug(debug.c:430@hip_print_hit): RSA HIT: 
> 40ba:f913:a523:9770:dbd5:e4ca:0ee4:f46b

This is one way to find out the HITs. Btw, it seems like you are using an
older snapshot of the code.

> Because i didn't know which one to use i tried the 4 of them using both 
> methods you explained in your previous mail:
>
> 1) hipconf add map HIT IP
>    ping6 HIT
> 2) <configure /etc/hip/hosts and /etc/hosts to have HOSTNAME>
>    ping6 HOSTNAME
>
> Everytime i did ping6 any of the HITS i got Host Unreachable.

Questions:

* Did you have hipd running?
* Can you ping the peer using plain IP addresses?

> What is the proper way to generate a HIT?
> If i understood correctly the /etc/hosts should have:
>
> <IP> PeerHostName
>
> and in /etc/hip/hosts
>
> <HIT> PeerHostName
>
> The daemon will then obtain  <IP> <HIT> mapping.
> Is this correct?

This is correct. Just to be sure, I have to ask you one question. Did you
swap the HITs of the hosts? I mean that if you look at the HIT of host A
at host A (from ifconfig or hipd output), you need to insert the HIT to
/etc/hip/hosts at host B, and not A.


You can also try to use the "hipsetup" software with "-b" option:

http://hipl.hiit.fi/hipl/manual/ch06.html

There is also a script called "hipsetup" in "hipl/test" directory for
quick testing of the base exchange. Run it without arguments to see how it
is used. The script requires some external applications that will be
prompted if they are not found.

-- 
Miika Komu              miika@xxxxxx          http://www.iki.fi/miika/

Other related posts: