受信任的时间戳-了解格式(RFC3161) [英] Trusted Timestamps - understanding the format (rfc3161)

问题描述

[编辑:我写了一篇博客文章，详细解释了所有内容:

[edit: I've written a blogpost that explains everything in detail: look here]

嗨！

我正拼命尝试为基于rfc3161的可信时间戳构建服务.我决定在 zeitstempel.dfn.de 中使用免费的受信任时间戳服务.

I'm desperately trying to build a service for trusted timestamps based on rfc3161. I've decided to use the free trusted timestamp service at zeitstempel.dfn.de.

我的问题是，我将如何联系该服务以获得有效的答复.关于请求格式，RFC告知:

My question is how i shall contact this service in order to receive a valid response. Regarding the request format, the RFC tells:

TimeStampReq ::= SEQUENCE  {
   version                      INTEGER  { v1(1) },
   messageImprint               MessageImprint,
     --a hash algorithm OID and the hash value of the data to be

     --time-stamped
   reqPolicy             TSAPolicyId              OPTIONAL,
   nonce                 INTEGER                  OPTIONAL,
   certReq               BOOLEAN                  DEFAULT FALSE,
   extensions            [0] IMPLICIT Extensions  OPTIONAL  }

其中

   MessageImprint ::= SEQUENCE  {
        hashAlgorithm                AlgorithmIdentifier,
        hashedMessage                OCTET STRING  }

我找到了客户端，这对我有所帮助.

I've found a client which helped me a bit.

尽管如此，我仍然不知道如何构造时间戳服务的请求.

Nevertheless, I still don't know how I should construct the request for the timestamp service.

致谢！

推荐答案

很高兴您发现我们的软件很有帮助.但您指的是我们的旧服务.请访问www.ntp.org.pl-您将在此处找到最新版本的时间戳客户端以及许多其他与时间主题相关的有用免费软件.

I'm glad that you find our software helpful. But you refer to our old service. Please visit www.ntp.org.pl - you'll find there the latest version of timestamping client and a lot of other useful free software related to time topic.

我不确定您想做什么.也许您再提供一些详细信息，我将能够为您提供更好的帮助.无论如何，我会给您一些提示，在哪里可以找到一些宝贵的信息.

I'm not sure what you want to do. Maybe if you give a few more details, I'd be able to help you better. Anyway, I'll give you some hints, where to find some precious information.

首先，您应该查看OpenSSL项目: http://www.openssl.org/docs/apps/ts.html# 有一个示例，说明如何创建TSRequest.该请求存储在文件中，因此您可以阅读其内容.以后，您可以使用以下命令将请求发送到服务器: http://www.openssl.org/docs/apps/tsget.html#

Firs of all, you should look at OpenSSL project: http://www.openssl.org/docs/apps/ts.html# There is an example, how to create TSRequest. The request is stored in file, so you can read it's content. Later, you can send request to the server using this: http://www.openssl.org/docs/apps/tsget.html#

您可以做的另一种技巧是安装一些嗅探器(例如Wireshark-www.wireshark.org/)，从www.ntp.org.pl启动我们的客户端，发送请求，然后在wirehark中找到适当的数据包以查看什么它包含.

Antoher trick you can do is to install some sniffer (for example Wireshark - www.wireshark.org/ ), start our client from www.ntp.org.pl , send request, then find proper packet in wireshark to see what it contains.

如果您还有其他疑问，请随时提问.请提供更多有关您的服务的信息.

Feel free to ask, if you have some additional questions. Please, give some more information about your service.

这篇关于受信任的时间戳-了解格式(RFC3161)的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！