search

open-eid / libdigidocpp

Libdigidocpp library offers creating, signing and verification of digitally signed documents, according to XAdES and XML-DSIG standards. Documentation http://open-eid.github.io/libdigidocpp
Other
96 stars 47 forks source link

[Question] Signing container with test certificate #445

Closed konstantinsp closed 2 years ago

konstantinsp commented 3 years ago

Hello,

Im trying to sign container with test certificate using digidoc-tool command:

.\digidoc-tool.exe create test.asice --file="test.pdf" --mime="application/octet-stream" --pkcs12="test.p12" --pin="test" --tsurl="http://demo.sk.ee/tsa/" --loglevel=4

and im getting this error Could not find certificate issuer '**************************' in certificate store.

How can i add my test certificate to store? or is there any parameter in command to bypass this?

metsma commented 3 years ago

It depends of the certificate type. If it is issued by SK ID solutions there is option use test TSL lists. https://github.com/open-eid/libdigidocpp/wiki/Using-test-TSL-lists. If it is self issued you may need to create own TSL lists. There is option also create only signature without validate. The signing certificate should have AIA extension and then point to correct issuer certifiate and OCSP URL

konstantinsp commented 3 years ago

It is a Swedbank Gateway Test certificate. as i can see it is issued by them. Is there any guide on TSL list creation?

metsma commented 2 years ago

' The signing certificate should have AIA extension and then point to correct issuer certifiate and OCSP URL Seems like a2fea2de54835fa92be326ac6cd89dd47c66ac5d is not released Can you build libdigidocpp from master or use github actions artifacts

.\digidoc-tool.exe create test.asice --file="test.pdf" --mime="application/octet-stream" --pkcs12="test.p12" --pin="test" --tsurl="http://demo.sk.ee/tsa/" --loglevel=4 --dontValidate
kristelmerilain commented 2 years ago

Closing due inactivity, reopen if needed.