search

adobe / adobe.github.com

Adobe central hub for open source
https://opensource.adobe.com
MIT License
1.42k stars 340 forks source link

Problem while verifying OCSP response for a certificate #144

Closed IonutCorbu closed 4 months ago

IonutCorbu commented 4 months ago

Hello! I have an issue while trying to verify a certificate in a LTA-signed PDF file. image

I create certificates with the same root CA and them I need OCSP responses for them to be included in the file signed. I used an OCSP server created with OpenSSL in order to do OCSP requests for my certificates, but it seems that Adobe is not recognizing them. The AIA field in the case of my certificates has OCSPs set like this:

Authority Information Access:
                OCSP - URI:http://127.0.0.1:8888

Is it the problem caused by the usage of loopback address?

I attach here the file signed even you can't reproduce the OCSP server on your machine, but maybe someone can tell me what clause do I have to use in order to accept the certificates: pades_signed.pdf

IonutCorbu commented 4 months ago

It was my fault! When I created the certificate of the ocsp server, I forgot to apply the extended usage: OCSPSigning. image