bc-csharp icon indicating copy to clipboard operation
bc-csharp copied to clipboard

CmsException [For counter signatures] when validate a time stamp

Open acoder84 opened this issue 4 years ago • 0 comments

https://github.com/bcgit/bc-csharp/blob/42f933608f60af7e9c36ffa3f9150b06b842a6ca/crypto/src/cms/SignerInformation.cs#L431

I need to validate a counter sign which is obtained from a time stamp server. Message from it contains a content type field.

...
[1] (2 elem)
            SEQUENCE (2 elem)
              OBJECT IDENTIFIER 1.2.840.113549.1.9.6 countersignature (PKCS #9)
              SET (1 elem)
                SEQUENCE (6 elem)
                  INTEGER 1
                  SEQUENCE (2 elem)
                    SEQUENCE (5 elem)
                      SET (1 elem)
                        SEQUENCE (2 elem)
                          OBJECT IDENTIFIER 2.5.4.6 countryName (X.520 DN component)
                          PrintableString US
                      SET (1 elem)
                        SEQUENCE (2 elem)
                          OBJECT IDENTIFIER 2.5.4.8 stateOrProvinceName (X.520 DN component)
                          PrintableString Washington
                      SET (1 elem)
                        SEQUENCE (2 elem)
                          OBJECT IDENTIFIER 2.5.4.7 localityName (X.520 DN component)
                          PrintableString Redmond
                      SET (1 elem)
                        SEQUENCE (2 elem)
                          OBJECT IDENTIFIER 2.5.4.10 organizationName (X.520 DN component)
                          PrintableString Microsoft Corporation
                      SET (1 elem)
                        SEQUENCE (2 elem)
                          OBJECT IDENTIFIER 2.5.4.3 commonName (X.520 DN component)
                          PrintableString Microsoft Time-Stamp PCA
                    INTEGER (150 bit) 1137338006764889435685681942794248212631781691
                  SEQUENCE (2 elem)
                    OBJECT IDENTIFIER 1.3.14.3.2.26 sha1 (OIW)
                    NULL
                  [0] (3 elem)
                    SEQUENCE (2 elem)
                      OBJECT IDENTIFIER 1.2.840.113549.1.9.3 contentType (PKCS #9)
                      SET (1 elem)
                        OBJECT IDENTIFIER 1.2.840.113549.1.7.1 data (PKCS #7)

Is there any way to workaround this exception?

acoder84 avatar Aug 18 '21 14:08 acoder84