Timestamps fidati - Capire il formato (RFC3161)

Question

[ Modifica : Ho scritto un blogpost che spiega tutto in dettaglio: Guarda qui ]

Ciao!

Sto cercando disperatamente di costruire un servizio per i timestamp fidati basati su RFC3161.Ho deciso di utilizzare il servizio di timestamp di fidato gratuito a zeitstempel.dfn.de .

La mia domanda è come contattare questo servizio per ricevere una risposta valida.Per quanto riguarda il formato della richiesta, la RFC dice:

TimeStampReq ::= SEQUENCE  {
   version                      INTEGER  { v1(1) },
   messageImprint               MessageImprint,
     --a hash algorithm OID and the hash value of the data to be

     --time-stamped
   reqPolicy             TSAPolicyId              OPTIONAL,
   nonce                 INTEGER                  OPTIONAL,
   certReq               BOOLEAN                  DEFAULT FALSE,
   extensions            [0] IMPLICIT Extensions  OPTIONAL  }

.

dove

   MessageImprint ::= SEQUENCE  {
        hashAlgorithm                AlgorithmIdentifier,
        hashedMessage                OCTET STRING  }

.

Ho trovato un client che mi ha aiutato un po '.

Tuttavia, non so ancora come dovrei costruire la richiesta per il servizio Timestamp.

Saluti!

Answer 1

I'm glad that you find our software helpful. But you refer to our old service. Please visit www.ntp.org.pl - you'll find there the latest version of timestamping client and a lot of other useful free software related to time topic.

I'm not sure what you want to do. Maybe if you give a few more details, I'd be able to help you better. Anyway, I'll give you some hints, where to find some precious information.

Firs of all, you should look at OpenSSL project: http://www.openssl.org/docs/apps/ts.html# There is an example, how to create TSRequest. The request is stored in file, so you can read it's content. Later, you can send request to the server using this: http://www.openssl.org/docs/apps/tsget.html#

Antoher trick you can do is to install some sniffer (for example Wireshark - www.wireshark.org/ ), start our client from www.ntp.org.pl , send request, then find proper packet in wireshark to see what it contains.

Feel free to ask, if you have some additional questions. Please, give some more information about your service.