To make it more clear, i run the request again, but this time I attach the original ocsp output. Please find the part which i thing is the actual signature:
eCrypt: OCSP Response Summary: eCrypt: ---------------------- eCrypt: Response Version: 1 eCrypt: Response Status: Successful (0) eCrypt: Response Type: BasicResponse (1.3.6.1.5.5.7.48.1.1) eCrypt: Responder Id: eCrypt: Response Produced At: Donnerstag, 26. April 2007 22:05:17 eCrypt: # Of Responses: 1 eCrypt: Response #: 1 eCrypt: Hash Algorithm: 1.3.14.3.2.26 eCrypt: Issuer Name Hash 03B4FCFFD21C3177B7291FBB5277900E90C9D72B eCrypt: Issuer Key Hash CEFE469D632F89FDF2381625D8F16CDE47F8CEC1 eCrypt: Serialnumber: 04E8 eCrypt: Cert Status : good (0) eCrypt: This Update: Donnerstag, 26. April 2007 22:00:33 eCrypt: Next Update: Montag, 30. April 2007 02:30:33 eCrypt: eCrypt: Signature Algorithm: 1.2.840.113549.1.1.5 eCrypt: Signature Value: 005350DC422F28A2F702E99FA78FFFA0EA0767EEFAF0A6BB28436ABC331EEAAC79CE1B7F1D69C9A4DE369F1204A220BB7A1714CD84C360A67C57B09511E3FE846F3CEA5D15288F7A4902CE19A8C7A111D76E97D2F011C2E7415DA206555536E89C6B64EEAAC0F57C99B3183C103923E05A6246328385C1F77CAEDF2F5ADB62C18B eCrypt: Signature Validated: failed eCrypt: # Of Certificates: 1 Here the ocsp response eCrypt: 0000: 30 82 05 54 0a 01 00 a0 - 82 05 4d 30 82 05 49 06 0‚.T... ‚.M0‚.I. eCrypt: 0010: 09 2b 06 01 05 05 07 30 - 01 01 04 82 05 3a 30 82 .+.....0...‚.:0‚ eCrypt: 0020: 05 36 30 81 b5 a2 16 04 - 14 d9 6a 48 16 31 0e 81 .60µ¢...ÙjH.1. eCrypt: 0030: 2d f0 ae 1c 3e 47 44 61 - e7 22 1a e5 c3 18 0f 32 -ð®.>GDaç".åÃ..2 eCrypt: 0040: 30 30 37 30 34 32 36 31 - 38 30 35 31 37 5a 30 65 0070426180517Z0e eCrypt: 0050: 30 63 30 3b 30 09 06 05 - 2b 0e 03 02 1a 05 00 04 0c0;0...+....... eCrypt: 0060: 14 03 b4 fc ff d2 1c 31 - 77 b7 29 1f bb 52 77 90 ..´üÿÒ.1w·).»Rw eCrypt: 0070: 0e 90 c9 d7 2b 04 14 ce - fe 46 9d 63 2f 89 fd f2 .É×+..ÎþFc/‰ýò eCrypt: 0080: 38 16 25 d8 f1 6c de 47 - f8 ce c1 02 02 04 e8 80 8.%ØñlÞGøÎÁ...è€ eCrypt: 0090: 00 18 0f 32 30 30 37 30 - 34 32 36 31 38 30 30 33 ...2007042618003 eCrypt: 00a0: 33 5a a0 11 18 0f 32 30 - 30 37 30 34 32 39 32 32 3Z ...2007042922 eCrypt: 00b0: 33 30 33 33 5a a1 23 30 - 21 30 1f 06 09 2b 06 01 3033Z¡#0!0...+.. eCrypt: 00c0: 05 05 07 30 01 02 04 12 - 04 10 78 40 18 1f c8 32 [EMAIL PROTECTED] eCrypt: 00d0: 8d 45 89 ce 15 73 07 bc - c4 fd 30 0d 06 09 2a 86 E‰Î.s.¼Äý0...*† eCrypt: 00e0: 48 86 f7 0d 01 01 05 05 - 00 03 81 81 00 53 50 dc H†÷........SPÜ eCrypt: 00f0: 42 2f 28 a2 f7 02 e9 9f - a7 8f ff a0 ea 07 67 ee B/(¢÷.韧ÿ ê.gî eCrypt: 0100: fa f0 a6 bb 28 43 6a bc - 33 1e ea ac 79 ce 1b 7f úð¦»(Cj¼3.ê¬yÎ. eCrypt: 0110: 1d 69 c9 a4 de 36 9f 12 - 04 a2 20 bb 7a 17 14 cd .iɤÞ6Ÿ..¢ »z..Í eCrypt: 0120: 84 c3 60 a6 7c 57 b0 95 - 11 e3 fe 84 6f 3c ea 5d „Ã`¦|W°•.ãþ„o<ê] eCrypt: 0130: 15 28 8f 7a 49 02 ce 19 - a8 c7 a1 11 d7 6e 97 d2 .(zI.Î.¨Ç¡.×n—Ò eCrypt: 0140: f0 11 c2 e7 41 5d a2 06 - 55 55 36 e8 9c 6b 64 ee ð.ÂçA]¢.UU6èœkdî eCrypt: 0150: aa c0 f5 7c 99 b3 18 3c - 10 39 23 e0 5a 62 46 32 ªÀõ|™³.<.9#àZbF2 eCrypt: 0160: 83 85 c1 f7 7c ae df 2f - 5a db 62 c1 8b a0 82 03 ƒ…Á÷|®ß/ZÛbÁ‹ ‚. eCrypt: 0170: e7 30 82 03 e3 30 82 03 - df 30 82 02 c7 a0 03 02 ç0‚.ã0‚.ß0‚.Ç .. eCrypt: 0180: 01 02 02 02 04 b3 30 0d - 06 09 2a 86 48 86 f7 0d .....³0...*†H†÷. eCrypt: 0190: 01 01 05 05 00 30 45 31 - 0b 30 09 06 03 55 04 06 .....0E1.0...U.. eCrypt: 01a0: 13 02 4c 55 31 15 30 13 - 06 03 55 04 0a 13 0c 4c ..LU1.0...U....L eCrypt: 01b0: 75 78 54 72 75 73 74 20 - 73 2e 61 31 1f 30 1d 06 uxTrust s.a1.0.. eCrypt: 01c0: 03 55 04 03 13 16 4c 75 - 78 54 72 75 73 74 20 4e .U....LuxTrust N eCrypt: 01d0: 6f 72 6d 61 6c 69 73 65 - 64 20 43 41 30 1e 17 0d ormalised CA0... eCrypt: 01e0: 30 37 30 32 30 37 31 33 - 32 31 30 37 5a 17 0d 30 070207132107Z..0 eCrypt: 01f0: 38 30 32 30 37 31 33 32 - 31 30 37 5a 30 5e 31 0b 80207132107Z0^1. eCrypt: 0200: 30 09 06 03 55 04 06 13 - 02 4c 55 31 16 30 14 06 0...U....LU1.0.. eCrypt: 0210: 03 55 04 0a 13 0d 4c 75 - 78 54 72 75 73 74 20 73 .U....LuxTrust s eCrypt: 0220: 2e 61 2e 31 13 30 11 06 - 03 55 04 0b 13 0a 70 6b .a.1.0...U....pk eCrypt: 0230: 69 20 65 6e 74 69 74 79 - 31 22 30 20 06 03 55 04 i entity1"0 ..U. eCrypt: 0240: 03 13 19 4c 75 78 54 72 - 75 73 74 20 73 2e 61 2e ...LuxTrust s.a. eCrypt: 0250: 20 4f 43 53 50 20 53 65 - 72 76 65 72 30 81 9d 30 OCSP Server00 eCrypt: 0260: 0d 06 09 2a 86 48 86 f7 - 0d 01 01 01 05 00 03 81 ...*†H†÷....... eCrypt: 0270: 8b 00 30 81 87 02 81 81 - 00 95 fa 47 77 d7 9e b0 ‹.0‡..•úGwמ° eCrypt: 0280: 1c da 79 a6 c3 78 bb bc - d0 9d 36 fc 4d 30 f4 8f .Úy¦Ãx»¼Ð6üM0ô eCrypt: 0290: 86 ee c8 3e a4 36 83 40 - 1e 63 6b 88 97 7f f5 6f †îÈ>[EMAIL PROTECTED] eCrypt: 02a0: bd 1e 25 b3 5f 8a 09 c8 - 51 24 9b 92 ee b2 cc 01 ½.%³_Š.ÈQ$›’î²Ì. eCrypt: 02b0: ee f7 d1 11 b0 f7 b4 f0 - 66 16 3d ff e4 d0 ec e6 î÷Ñ.°÷´ðf.=ÿäÐìæ eCrypt: 02c0: b8 05 47 a3 8b fd 75 db - eb 86 82 df 7d 12 e2 a6 ¸.G£‹ýuÛ놂ß}.⦠eCrypt: 02d0: 9d 5f 92 63 a0 40 c0 82 - 35 d2 a4 53 c4 21 f4 f0 _’c @À‚5Ò¤SÄ!ôð eCrypt: 02e0: 45 6a 6c f6 5a 87 c8 9a - 09 27 ba 09 18 64 7a fe EjlöZ‡Èš.'º..dzþ eCrypt: 02f0: 49 dc c9 99 3a 14 db f7 - 1d 02 01 03 a3 82 01 44 IÜÉ™:.Û÷....£‚.D eCrypt: 0300: 30 82 01 40 30 09 06 03 - 55 1d 13 04 02 30 00 30 [EMAIL PROTECTED] eCrypt: 0310: 81 cd 06 03 55 1d 20 04 - 81 c5 30 81 c2 30 81 bf Í..U. .Å0Â0¿ eCrypt: 0320: 06 0a 2b 81 2b 01 01 01 - 01 00 01 00 30 81 b0 30 ..++.......0°0 eCrypt: 0330: 81 82 06 08 2b 06 01 05 - 05 07 02 02 30 76 1a 74 ‚..+.......0v.t eCrypt: 0340: 4c 75 78 54 72 75 73 74 - 20 73 2e 61 2e 20 4f 6e LuxTrust s.a. On eCrypt: 0350: 6c 69 6e 65 20 43 65 72 - 74 69 66 69 63 61 74 65 line Certificate eCrypt: 0360: 20 53 74 61 74 75 73 20 - 53 65 72 76 65 72 2e 20 Status Server. eCrypt: 0370: 49 45 54 46 20 50 4b 49 - 58 20 52 46 43 20 32 35 IETF PKIX RFC 25 eCrypt: 0380: 36 30 20 4f 43 53 50 20 - 76 31 20 61 6e 64 20 76 60 OCSP v1 and v eCrypt: 0390: 32 2e 20 4e 6f 20 4f 43 - 53 50 20 65 78 74 65 6e 2. No OCSP exten eCrypt: 03a0: 73 69 6f 6e 73 20 61 72 - 65 20 73 75 70 70 6f 72 sions are suppor eCrypt: 03b0: 74 65 64 2e 30 29 06 08 - 2b 06 01 05 05 07 02 01 ted.0)..+....... eCrypt: 03c0: 16 1d 68 74 74 70 3a 2f - 2f 72 65 70 6f 73 69 74 ..http://reposit eCrypt: 03d0: 6f 72 79 2e 6c 75 78 74 - 72 75 73 74 2e 6c 75 30 ory.luxtrust.lu0 eCrypt: 03e0: 0e 06 03 55 1d 0f 01 01 - ff 04 04 03 02 07 80 30 ...U....ÿ.....€0 eCrypt: 03f0: 13 06 03 55 1d 25 04 0c - 30 0a 06 08 2b 06 01 05 ...U.%..0...+... eCrypt: 0400: 05 07 03 09 30 1f 06 03 - 55 1d 23 04 18 30 16 80 ....0...U.#..0.€ eCrypt: 0410: 14 ce fe 46 9d 63 2f 89 - fd f2 38 16 25 d8 f1 6c .ÎþFc/‰ýò8.%Øñl eCrypt: 0420: de 47 f8 ce c1 30 1d 06 - 03 55 1d 0e 04 16 04 14 ÞGøÎÁ0...U...... eCrypt: 0430: d9 6a 48 16 31 0e 81 2d - f0 ae 1c 3e 47 44 61 e7 ÙjH.1.-ð®.>GDaç eCrypt: 0440: 22 1a e5 c3 30 0d 06 09 - 2a 86 48 86 f7 0d 01 01 ".åÃ0...*†H†÷... eCrypt: 0450: 05 05 00 03 82 01 01 00 - 7b dd 3a 70 46 41 d8 59 ....‚...{Ý:pFAØY eCrypt: 0460: da 38 e3 a8 62 fd c7 98 - a7 3c 02 8b 65 da 10 4c Ú8ã¨býǘ§<.‹eÚ.L eCrypt: 0470: d9 38 3a 98 45 8d 53 34 - 09 7d ea 70 c2 df 60 f1 Ù8:˜ES4.}êpÂß`ñ eCrypt: 0480: 14 90 f7 9b 7c 7f 20 a4 - 80 d1 2b 67 c1 0c 76 17 .÷›| ¤€Ñ+gÁ.v. eCrypt: 0490: 10 22 1a 37 ad 26 ee e7 - f6 60 31 24 a8 c7 74 e2 .".7&îçö`1$¨Çtâ eCrypt: 04a0: 18 b2 f7 94 c8 e9 d3 dd - f8 1f 5c 3a 79 1c 40 5a .²÷”ÈéÓÝø.\:[EMAIL PROTECTED] eCrypt: 04b0: 72 cc 1c a2 93 92 a4 da - 32 c0 04 64 21 10 b8 d8 rÌ.¢“’¤Ú2À.d!.¸Ø eCrypt: 04c0: 72 58 7b 67 c0 6d ba cb - 7e fa 36 af 74 ec f5 4e rX{gÀmºË~ú6¯tìõN eCrypt: 04d0: 60 ed 56 b1 8c 86 9c b2 - b3 bb 78 c8 6f 8f f4 0b `íV±Œ†œ²³»xÈoô. eCrypt: 04e0: 35 60 dc 1b 3b 01 0b d7 - d8 18 86 71 83 84 ab f8 5`Ü.;..×Ø.†qƒ„«ø eCrypt: 04f0: b0 d0 e9 3b fc 66 3f 62 - e2 e1 9d f3 d0 eb d6 ec °Ðé;üf?bâáóÐëÖì eCrypt: 0500: 98 b2 1e 3f 71 40 07 85 - ab e2 f0 7c 6e 2a 04 39 [EMAIL PROTECTED]|n*.9 eCrypt: 0510: 8a ee f1 11 a3 58 c4 73 - 31 dd b5 c0 a2 da c2 cc Šîñ.£XÄs1ݵÀ¢ÚÂÌ eCrypt: 0520: f2 00 36 5c fd 1b 23 5c - cd f2 bc fe f9 b4 3a 3b ò.6\ý.#\Íò¼þù´:; eCrypt: 0530: db fd e3 8f 87 9a 74 4d - 1e 21 41 9a 8b 7e 44 95 Ûý㇚tM.!Aš‹~D• eCrypt: 0540: d4 34 de ad 54 09 c1 ad - 61 1b 15 27 e2 15 26 3f Ô4ÞT.Áa..'â.&? eCrypt: 0550: 1b fe 63 ed 5e c3 aa 9d - .þcí^ê > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Sascha Kiefer > Sent: Donnerstag, 26. April 2007 21:11 > To: openssl-dev@openssl.org > Subject: OCSP Response Signature > > Hello, > > This is not directly related to OpenSSL, but more to OCSP in general. > I wrote my own ASN.1 Parser and doing my own crypthography > using MS CryptAPI. > > I wrote my own OCSP client. Everything works fine. > The only part i can not figure out, is the ocsp response > signature part. > I guess, i do not have a problem with ASN.1 or the MSCAPI, > but of the way the Signature is encoded. > > Here, the sample output of my program: > > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > Development Mailing List openssl-dev@openssl.org > Automated List Manager [EMAIL PROTECTED] >
