Re: possible Bug in OpenSSL - rfc 3161 - TSA service

[Walter H.]

On 16.03.2013 19:27, kap...@mizera.cz wrote:

Dne 16.3.2013 12:58, Walter H. napsal(a):

Unfortunately not, it is official paid service.
But You can make tests on testing TSA:
http://www.postsignum.cz/testovaci_casova_razitka.html

I don't understand this language; can you tell me the URL of this Test TSA?

Try to use translate.google.com (just enter the link and translate)

URL 1: https://www3.postsignum.cz/DEMOTSA/TSS_user/
URL 2: https://www.postsignum.cz/DEMOTSA/TSS_user/

Username: demoTSA
Password: demoTSA2010

lets have a try ...

But unfortunately our laws do not accept other TS then these from
qualified TSAs authorised by our government.

a little bit strange;
do they operate an atomic clock?

Yes. They specially use attribute certificate to evidence the time is synchronized. Funny is that it is the one certificate, which makes problems while verify the TSR in openssl.

Ok,
I tried this with my Adobe Acrobat,
and you wouldn't believe it; it doesn't work with Adobe Acrobat, too.

the error message - I use German version:

in English this is




Greetings,
Walter

"Fehler beim Erstellen der Unterschriftseigenschaften des Zeitstempels: Verifizierungsfehler" "Error on creating the signature properties of the timestamp: verification error" so that means, this is not conforming to RFC 3161 ..., because Adobe Acrobat does ...

smime.p7s
Description: S/MIME Cryptographic Signature