Dne 17.3.2013 18:21, Walter H. napsal(a):
On 17.03.2013 16:37, kap...@mizera.cz wrote:


Dne 16.3.2013 20:58, Walter H. napsal(a):

I tried this with my Adobe Acrobat,
and you wouldn't believe it; it doesn't work with Adobe Acrobat, too.

the error message - I use German version:
"Fehler beim Erstellen der Unterschriftseigenschaften des Zeitstempels:
Verifizierungsfehler"
in English this is
"Error on creating the signature properties of the timestamp:
verification error"

so that means, this is not conforming to RFC 3161 ..., because Adobe
Acrobat does ...

But it could be consequence of using this testing TSA - maybe could
help to add the root certificate of this testing TSA chain ?


(Obwohl die Fehlermeldung  scheint etwas anderes zu bedeuten als
"untrusted TSA").

correct, the error message means, that the received timestamp could not
be verified - the same as you had ...
OpenSSL and Adobe conform to RFC 3161;
but not this TSA ...


But the discussed TSA postsignum would not exist at all if there would be a problem with signed PDF's (it is most used usage). The problem there is that only OpenSSL fails to verify their TS's (what does not care them much, unfortunately).

?=> it could be probably problem on yours side.
What Adobe product and version are you using ? Maybe too old ?
It is possible that Adobe has add attr.cert. support (CMS, ...).

And does it work with another official TSA ?
E.g. with TSA service: http://timestamp.comodoca.com/rfc3161

--kapetr
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to