Hyestamps de confiance - Comprendre le format (RFC3161)

Question

[ EDIT : J'ai écrit un blogpossique qui explique tout en détail: regarder ici ]

Salut!

J'essaie désespérément de créer un service pour des horodatages de confiance basés sur la RFC3161.J'ai décidé d'utiliser le service d'horodatage de confiance gratuit à ZeTemPel.dfn.de .

Ma question est de savoir comment je vais contacter ce service afin de recevoir une réponse valide.En ce qui concerne le format de demande, le RFC raconte:

TimeStampReq ::= SEQUENCE  {
   version                      INTEGER  { v1(1) },
   messageImprint               MessageImprint,
     --a hash algorithm OID and the hash value of the data to be

     --time-stamped
   reqPolicy             TSAPolicyId              OPTIONAL,
   nonce                 INTEGER                  OPTIONAL,
   certReq               BOOLEAN                  DEFAULT FALSE,
   extensions            [0] IMPLICIT Extensions  OPTIONAL  }

où

   MessageImprint ::= SEQUENCE  {
        hashAlgorithm                AlgorithmIdentifier,
        hashedMessage                OCTET STRING  }

J'ai trouvé un client qui m'a un peu aidé.

Néanmoins, je ne sais toujours pas comment je devrais construire la demande du service d'horodatage.

Cordialement!

Answer 1

I'm glad that you find our software helpful. But you refer to our old service. Please visit www.ntp.org.pl - you'll find there the latest version of timestamping client and a lot of other useful free software related to time topic.

I'm not sure what you want to do. Maybe if you give a few more details, I'd be able to help you better. Anyway, I'll give you some hints, where to find some precious information.

Firs of all, you should look at OpenSSL project: http://www.openssl.org/docs/apps/ts.html# There is an example, how to create TSRequest. The request is stored in file, so you can read it's content. Later, you can send request to the server using this: http://www.openssl.org/docs/apps/tsget.html#

Antoher trick you can do is to install some sniffer (for example Wireshark - www.wireshark.org/ ), start our client from www.ntp.org.pl , send request, then find proper packet in wireshark to see what it contains.

Feel free to ask, if you have some additional questions. Please, give some more information about your service.