Holger Reif wrote:
>
> BTW Does anybody know how the MS Authenticode Timestamping Service
> provided by Verisign works?
>
Yes. You feed it a DER encoded simple structure which does little more
than wrap a signature and you get back a PKCS#7 signed data structure
for use in a countersignature.
There's some documentation on the format on MS site somewhere.
Its also possible to use the MS authenticode stuff to use an alternative
URL so you can log what it is doing.
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
