<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Dear openssl users,<br>
<br>
I'm struggling with the error below, I wrote to Openssl development
in February 2016 but they are busy with the next release, I see they
are aware of it in git/openssl and working on it.<br>
<a class="moz-txt-link-freetext" href="https://github.com/openssl/openssl/pull/771">https://github.com/openssl/openssl/pull/771</a><br>
<br>
<br>
The bug is in the command ts -verify<br>
<pre><code>**************
openssl ts -verify -digest e16db7d30581e44a5540f19553852b5a4e4e26f9adc365cc846f94038ee33025 \
-in /tmp/namirial.tsr -CAfile /tmp/NamirialCATSA.pem
Verification: FAILED
140236013643424:error:2F067065:time stamp routines:TS_CHECK_SIGNING_CERTS:ess signing
certificate error:ts_rsp_verify.c:291:</code></pre>
*****************<br>
<br>
I need to verify programmatically that every timestamped document
its' ok, it is very important for me to provide reliable
timestamping from a trusted qualified European Union Timestamping
Authority.<br>
<br>
<br>
<br>
From what I understood the bug relates to the fact that the new
TSA's certificates are not compatible with the old way openssl reads
them, or their attribute or hashing. My understanding of it is very
basic.<br>
<br>
<br>
<br>
<b>Is there a patch that I can apply?<br>
<br>
</b>The bug has been found in 2013<br>
<a class="moz-txt-link-freetext" href="http://openssl.6102.n7.nabble.com/possible-Bug-in-OpenSSL-rfc-3161-TSA-service-tt43128.html#none">http://openssl.6102.n7.nabble.com/possible-Bug-in-OpenSSL-rfc-3161-TSA-service-tt43128.html#none</a><br>
<br>
I also opened a thread here<br>
<a class="moz-txt-link-freetext" href="http://stackoverflow.com/questions/35914327/error-0x2f067065-in-ts-rsp-verify-c291/35916523?noredirect=1#comment62213243_35916523">http://stackoverflow.com/questions/35914327/error-0x2f067065-in-ts-rsp-verify-c291/35916523?noredirect=1#comment62213243_35916523</a><br>
<br>
It seems that it has been mentioned also here in git<br>
<a class="moz-txt-link-freetext" href="https://github.com/elabftw/elabftw/issues/242">https://github.com/elabftw/elabftw/issues/242</a><br>
<a class="moz-txt-link-freetext" href="https://github.com/openssl/openssl/pull/771">https://github.com/openssl/openssl/pull/771</a><br>
<br>
<br>
Here's my environment<br>
<br>
Ubuntu 14.04 LTS guest of a Virtualbox VM in an openstack IaaS.<br>
<code>OpenSSL 1.0.1f 6 Jan 2014 </code><br>
<code></code><code>Server Info: Apache/2.4.18 (Ubuntu)<br>
PHP Version: 5.5.34-1+deb.sury.org~trusty+1</code><br>
mysql Ver 14.14 Distrib 5.5.49, for debian-linux-gnu (x86_64) using
readline 6.3<br>
<br>
<br>
Could you please help?<br>
<br>
<br>
Thank you in advance <br>
<br>
Cheers<br>
<br>
Msca<br>
<br>
</body>
</html>