Privacy Aware Block Chain Logging
RFC3161 PKI TimeStamp Service
How to test it?
RFC3161 was originaly slated for use with MSFT Authenticode.
Anything that can handle the cryptographic primitives had HTTP Transport will work
Here we weill use OpenSSL to generate a TSP Request and parse the repponse
simply to test the servlet...
- Create the file you will want to timestamp
$ touch inputfile.txt
$ cat aasdfasdf >> inputfile.txt ^^ This is my test file.
- Generate a timestamp request
$ openssl ts -query -data inputfile.txt -cert -sha256 -no_nonce -out request.tsq
- Send the request to your timestamp server
$ curl -k -H "Content-Type: application/timestamp-query" -H Host:timestamp.globalsign.com -d @request.tsq "http://timestamp.globalsign.com"
- Verify the timestamp response
$ openssl ts -reply -in inputfile.txt.tsr -text
This is going to give you some output that looks something like this:
Using configuration from /usr/share/openssl/bin/openssl.cfg
Status info:
Status: Granted.
Status description: unspecified
Failure info: unspecified
TST info:
Version: 1
Policy OID: 1.3.6.1.4.1.4146.2.2
Hash Algorithm: sha256
Message data:
0000 – 58 df 63 8c 5b bf ff ca-ad 13 c9 6e 93 96 cd 25 X.c.[……n…%
0010 – 66 5e f1 eb ba 8e 7f 74-6d 65 04 3c 5d ea e4 35 f^…..tme.<]..5
Serial number: 0x2487F5EA8A5A085844ED68A8A7426E07E692E1BD
Time stamp: Sep 17 05:08:38 2013 GMT
Accuracy: unspecified
Ordering: no
Nonce: unspecified
TSA: DirName:/C=US/O=ACME Corporation/OU=ACME Time Stamp Authority/CN=ACME Corporation Time-Stamp Service
Extensions:
2018 Gordon Young gjyoung1974@gmail.com