endesive icon indicating copy to clipboard operation
endesive copied to clipboard

OCSP, crls response and timestamp

Open pkumar-uk opened this issue 6 years ago • 7 comments

Is there a plan to include OCSP, crls response to CMS envelope along with time stamp. Currently field in CMS for OCSP response is blank.

Please suggest workarounds if possible for timestamp using timestamp service.

pkumar-uk avatar Oct 04 '19 12:10 pkumar-uk

The workload seems to be high and the profits are weak. If you feel like it, add this functionality and we will share it with others.

m32 avatar Oct 06 '19 08:10 m32

I think I have done the work for OSCP response and CRL response, I can share the code once I can verify it works for all cases. I wanted help where I can plugin timestamp. I am looking for direction.

pkumar-uk avatar Oct 06 '19 10:10 pkumar-uk

Read in asn1crypto/cms.py - in the signature structure there is room for crl/ocsp/timestamp, I have only completed the required bare minimum

m32 avatar Oct 06 '19 19:10 m32

@pkumar-uk Do you have a working code for OCSP enabled certificates? I'm very interested in it.

muristan avatar Mar 07 '21 11:03 muristan

try version 2.0.7 with ocs psupport

m32 avatar Dec 30 '21 21:12 m32

how to used ocsp support in version 2.0.7

try version 2.0.7 with ocs psupport

how to used ocsp support in version 2.0.7

ariessetiyawan avatar Feb 12 '22 15:02 ariessetiyawan

example in pdf-sign-cms-hsm-certum.py There are new parameters (optional) for pdf.cms.sign, i.e .: ocspurl and ocspissuer. The former is the address of the certificate provider's ocsp service, and the latter is the certificate of the certificate issuer of this service.

m32 avatar Feb 14 '22 17:02 m32