I encountered a problem when using MRTDSODSigner module, if DS
certificate is issued after 12pm, that is between 12:00 and 24:00.
DS certificate validity period attributes (notBefore, notAfter) are during
encoding of SOD formatted in hh "Hour in am/pm (1-12)" format, and signature
validation of DS certificate on inspection system failes (as it should since
it was changed).
Date format is defined in net.sourceforge.scuba.tlv.BERTLVObject.java
as "SimpleDateFormat SDF = new SimpleDateFormat("yyMMddhhmmss'Z'")".
I have changed hour format to HH "Hour in day (0-23)", that is ("yyMMddHHmmss'Z'"), which
solved the problem.
Has anyone else had this problem?
BR/Rudi
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
This issue has been resolved some time ago and there should not be a problem in 3.2.1. The fix was not made in BERTLVObject.java, that is we you see no change there. Instead the change was made so that the certificate is no longer re-encoded and therefor the SimpleDateFormat not used at all.
BR,
Markus
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Hi,
I encountered a problem when using MRTDSODSigner module, if DS
certificate is issued after 12pm, that is between 12:00 and 24:00.
DS certificate validity period attributes (notBefore, notAfter) are during
encoding of SOD formatted in hh "Hour in am/pm (1-12)" format, and signature
validation of DS certificate on inspection system failes (as it should since
it was changed).
Date format is defined in net.sourceforge.scuba.tlv.BERTLVObject.java
as "SimpleDateFormat SDF = new SimpleDateFormat("yyMMddhhmmss'Z'")".
I have changed hour format to HH "Hour in day (0-23)", that is ("yyMMddHHmmss'Z'"), which
solved the problem.
Has anyone else had this problem?
BR/Rudi
What version of signserver are you on?
Hi,
I had problem on 3.1.5.
I have checked date format in BERTLVObject.java on version 3.2.1 before I upgrade, and it is the same.
BR
Hi Rudi,
This issue has been resolved some time ago and there should not be a problem in 3.2.1. The fix was not made in BERTLVObject.java, that is we you see no change there. Instead the change was made so that the certificate is no longer re-encoded and therefor the SimpleDateFormat not used at all.
BR,
Markus
Hi,
this is a good news. Tnx for quick response.
BR/Rudi