OCSP thisUpdate

View: New views
5 Messages — Rating Filter:   Alert me  

OCSP thisUpdate

by mtrekker :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

If not using timestamp service (RFC 3161) then can OCSP response time
(thisUpdate) be used as certified timestamp ? I mean even if OCSP
response is embedded in signature, PDF Reader  is complaining that
"Signature date/time are from the clock on the signer's computer".

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
itextsharp-questions mailing list
itextsharp-questions@...
https://lists.sourceforge.net/lists/listinfo/itextsharp-questions

Re: OCSP thisUpdate

by georgeg_02 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

no.
signature timestamp is the undeniable time of the signature; OCSP gives
information about certificate status only. there is no signature involved.

Mikro Trekker wrote:

> If not using timestamp service (RFC 3161) then can OCSP response time
> (thisUpdate) be used as certified timestamp ? I mean even if OCSP
> response is embedded in signature, PDF Reader  is complaining that
> "Signature date/time are from the clock on the signer's computer".
>
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
> trial. Simplify your report design, integration and deployment - and focus on
> what you do best, core application coding. Discover what's new with
> Crystal Reports now.  http://p.sf.net/sfu/bobj-july
> _______________________________________________
> itextsharp-questions mailing list
> itextsharp-questions@...
> https://lists.sourceforge.net/lists/listinfo/itextsharp-questions
>
>  

[george_gugulea.vcf]

begin:vcard
fn:George Gugulea
n:Gugulea;George
org:CertSIGN;Information Security Department
adr:;;133, Serban Voda;Bucharest;;;Romania
email;internet:george.gugulea@...
tel;work:0311-509.116
tel;fax:021-311.99.05
x-mozilla-html:FALSE
url:http://www.certsign.ro
version:2.1
end:vcard



------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
itextsharp-questions mailing list
itextsharp-questions@...
https://lists.sourceforge.net/lists/listinfo/itextsharp-questions

Re: OCSP thisUpdate

by Paulo Soares-3 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Well, if OCSP is not a timestamp why should it behave like a timestamp?

Paulo

> -----Original Message-----
> From: Mikro Trekker [mailto:mtrekker@...]
> Sent: Monday, September 07, 2009 2:33 PM
> To: itextsharp-questions@...
> Subject: [itextsharp-questions] OCSP thisUpdate
>
> If not using timestamp service (RFC 3161) then can OCSP response time
> (thisUpdate) be used as certified timestamp ? I mean even if OCSP
> response is embedded in signature, PDF Reader  is complaining that
> "Signature date/time are from the clock on the signer's computer".

Aviso Legal:
Esta mensagem é destinada exclusivamente ao destinatário. Pode conter informação confidencial ou legalmente protegida. A incorrecta transmissão desta mensagem não significa a perca de confidencialidade. Se esta mensagem for recebida por engano, por favor envie-a de volta para o remetente e apague-a do seu sistema de imediato. É proibido a qualquer pessoa que não o destinatário de usar, revelar ou distribuir qualquer parte desta mensagem.

Disclaimer:
This message is destined exclusively to the intended receiver. It may contain confidential or legally protected information. The incorrect transmission of this message does not mean the loss of its confidentiality. If this message is received by mistake, please send it back to the sender and delete it from your system immediately. It is forbidden to any person who is not the intended receiver to use, distribute or copy any part of this message.



------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
itextsharp-questions mailing list
itextsharp-questions@...
https://lists.sourceforge.net/lists/listinfo/itextsharp-questions

Parent Message unknown Re: OCSP thisUpdate

by mtrekker :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

What I meant was that OCSP response includes thisUpdate timestamp which
is already "certified" by the OCSP responder. If I trust OCSP response
and certificate revocation status then why not trust the time the
certificate was checked ?

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
itextsharp-questions mailing list
itextsharp-questions@...
https://lists.sourceforge.net/lists/listinfo/itextsharp-questions

Re: OCSP thisUpdate

by Paulo Soares-3 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

You can keep repeating that until you turn blue but it won't the change the
fact that the PDFs don't work that way.You should ask those questions to
Adobe.

Paulo

----- Original Message -----
From: "Mikro Trekker" <mtrekker@...>
To: <itextsharp-questions@...>
Sent: Monday, September 07, 2009 7:01 PM
Subject: Re: [itextsharp-questions] OCSP thisUpdate


What I meant was that OCSP response includes thisUpdate timestamp which
is already "certified" by the OCSP responder. If I trust OCSP response
and certificate revocation status then why not trust the time the
certificate was checked ?


------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
itextsharp-questions mailing list
itextsharp-questions@...
https://lists.sourceforge.net/lists/listinfo/itextsharp-questions