Comments (2)
It is not a bug. I don't have purpose to provide service for GOST qualified digital signature. But for any cases.
Look to FSB order #795 (http://www.garant.ru/products/ipo/prime/doc/70033464/) and you can find plague mistake. In according to X.509 spec and in that doc the type of certificate attributes defined as
DirectoryString ::= CHOICE {
teletexString TeletexString (SIZE (1 ..MAX)),
printableString PrintableString (SIZE (1 ..MAX)),
universalString UniversalString (SIZE (1. .MAX)),
utf8String UTF8String (SIZE (1 ..MAX)),
bmpString BMPString (SIZE (1..MAX))}.
But below you can find description of 3 NumberString attributes: INN, OGRN and SNILS.
For support of GOST qualified certificates in latest version I add NumericString to DirectoryString choice. Also I add syntax for issuerSignTool and subjectSignTool extension attributes.
Rudolf.
from crypto.
Прошу прощения за долгий ответ, не было доступа к почте. Этот сертификат в
библиотеке не проходит проверку на синтаксис X.509. Взял на проверку.
Возможно ошибка в библиотеке. Результат напишу чуть позже.
Спасибо, Рудольф.
On Tue, Jul 26, 2016 at 8:10 AM, Roman Sopov [email protected]
wrote:
Do not load the public certificate CryptoPro. I want to make signature CMS.
http://gostcrypto.com/pki-sign.htmlWhy is it not working?
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
#4, or mute the thread
https://github.com/notifications/unsubscribe-auth/AJNbgr32IyQ9cFwAtC2DjqhKNZi80NESks5qZcEPgaJpZM4JU4-V
.
from crypto.
Related Issues (17)
- About correctness of CTR mode implementation HOT 5
- КриптоПРО "Key buffer has wrong size 248 bit"
- Битая ссылка
- КриптоПро импорт PFX файл ошибка "Algorithm not supported" HOT 2
- JSON representation of private key wrongly contains ASN1 header
- Не работает экспорт из КриптоПро Контейнера ГОСТ 2012 HOT 8
- Export SignalCom GOST 2012 key not working HOT 3
- Домен gostcrypto.com не работает? HOT 3
- Hhh
- Github
- JSON of private key written wrongly contains ASN1 header in code
- Ошибка в функции нормализации алгоритмов
- How to get correct signature HOT 2
- Поддержка ГОСТ Р.34.12-2015 в GostSecurity HOT 4
- Будет ли модуль для Node.js HOT 13
- Ошибка хэш-кода HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from crypto.