Re: [openssl-users] help with timestamping

It seems that we have the same problem. I just opened a thread here https://mta.openssl.org/pipermail/openssl-users/2016-May/003733.html It seems that a group of experts found a workaround here. https://github.com/elabftw/elabftw/issues/242 Maybe you're expert enough to understand how to use

Re: [openssl-users] help with timestamping

Got a bit further === #!/bin/bash rm -f /tmp/test.data* /tmp/sym.cer cat > /tmp/test.data < /tmp/symINT.cer << EOF # Signing cert public key #Issuer: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec SHA256 TimeStamping CA #Subject: C=US, O=Symantec Corporation,

Re: [openssl-users] help with timestamping

Okay I have the cert from sym -BEGIN CERTIFICATE- MIIFSzCCBDOgAwIBAgIQVPN9oXFnUbxqjQrSdLKLEzANBgkqhkiG9w0BAQsFADB3 MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxKDAmBgNVBAMTH1N5bWFudGVj

Re: [openssl-users] help with timestamping

OK, It looks like this signing service is (quite unusually) not providing the certificate in its message, which is quite unusual. All it provides is some information /about/ that certificate, specifically it provides the following info: The certificate was issued to C=US, O=Symantec

Re: [openssl-users] help with timestamping

Here is a dump. I can see the CN - but I could see that before. There is also a RSA - maybe a signature or maybe is the public key for the cert. I would expect to see some signed data (sha + symantec cert + time) and also the public cert ( and maybe the intermediaries..) <30 82 03 AB> 0

Re: [openssl-users] help with timestamping

Okay thats good. so I am on the right track thanks On 19 April 2016 at 14:29, Jakob Bohm wrote: > On 19/04/2016 05:55, Alex Samad wrote: >> >> Hi >> >> I have a SHA.sha file >> >> /usr/bin/openssl ts -query -data SHA.sha -sha256 | /usr/bin/curl -s -H >>

Re: [openssl-users] help with timestamping

On 19/04/2016 05:55, Alex Samad wrote: Hi I have a SHA.sha file /usr/bin/openssl ts -query -data SHA.sha -sha256 | /usr/bin/curl -s -H Content-Type:application/timestamp-query --data-binary @- http://sha256timestamp.ws.symantec.com/sha256/timestamp > SHA.sha.tsr /usr/bin/openssl ts -reply -in