SignServer / Discussion / Open Discussion: Attribute "signingCertificateV2" in SignServer timestamp

Attribute "signingCertificateV2" in SignServer timestamp

Forum: Open Discussion

Creator: Enrico Lacaria

Created: 2014-02-25

Updated: 2014-02-25

Enrico Lacaria - 2014-02-25

Hi

We're using release 3.4.0 of SignServer.

We need to get in timestamp the attribute "signingCertificateV2" (OID=1.2.840.113549.1.9.16.2.47),
as defined in RFC 5035 and 5816.

Until now, we obtain timestamp with attribute "signingCertificate" (not V2).

What should we do to achieve that result ?

Is that depending on the TSA's certificate or it's just
a matter of release of the software ?

Thank you very much.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Markus Kilås - 2014-02-25

Hi Enrico,

Currently SignServer only uses the signingCertificate attribute (not V2).

To support the uses of signingCertificateV2 requires changes to org.signserver.module.tsa.bc.TimeStampTokenGenerator.java as well as some new worker properties for selecting which hash algorithm to use. This should be a quite straight forward change taking about a day including QA for us to implement.

We are willing to accept patches if you want to make this change yourself. Otherwise you can contact sales@primekey.se if you would like us to develop this for you.

Best regards,
Markus

PrimeKey Solutions offers a commercial EJBCA & SignServer support subscription and training. Please see www.primekey.se or contact info@primekey.se for more information.
[url]http://www.primekey.se/Services/Support/[/url]
[url]http://www.primekey.se/Services/Training/[/url]

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Log in to post a comment.