Re: possible Bug in OpenSSL - rfc 3161 - TSA service

[Walter H.]

On 17.03.2013 16:37, kap...@mizera.cz wrote:

Dne 16.3.2013 20:58, Walter H. napsal(a):

I tried this with my Adobe Acrobat,
and you wouldn't believe it; it doesn't work with Adobe Acrobat, too.

the error message - I use German version:
"Fehler beim Erstellen der Unterschriftseigenschaften des Zeitstempels:
Verifizierungsfehler"
in English this is
"Error on creating the signature properties of the timestamp:
verification error"

so that means, this is not conforming to RFC 3161 ..., because Adobe
Acrobat does ...

But it could be consequence of using this testing TSA - maybe could help to add the root certificate of this testing TSA chain ? (Obwohl die Fehlermeldung scheint etwas anderes zu bedeuten als "untrusted TSA").

correct, the error message means, that the received timestamp could not be verified - the same as you had ...

OpenSSL and Adobe conform to RFC 3161;
but not this TSA ...

smime.p7s
Description: S/MIME Cryptographic Signature