x509 v1 certificate
ARIGA Seiji
ariga at os.rim.or.jp
Tue Sep 19 01:32:56 CEST 2006
hi. thank you for your response.
On Mon, 18 Sep 2006 14:50:36 +0200,
Werner Koch <wk at gnupg.org> wrote,
> > does gpgsm (or libksba) support x509 v1 certificate ?
> Yes.
hmm. let me ask one more. output below is from "gpgsm -kv". you can see
"[error: No value]" at "key usage:" and "chain length:" field (which,
i think, is in x509 extension field that x509 version 1 cert doesn't
have). isn't this the same error i got when i run "gpgsm --verify" ?
----
Serial number: 7DD9FE07CFA81EB7107967FBA78934C6
Issuer: /OU=VeriSign Trust Network/OU=(c) 1998 VeriSign, Inc. - For authorized use only/OU=Class 3 Public Primary Certification Authority - G2/O=VeriSign, Inc./C=US
Subject: /OU=VeriSign Trust Network/OU=(c) 1998 VeriSign, Inc. - For authorized use only/OU=Class 3 Public Primary Certification Authority - G2/O=VeriSign, Inc./C=US
validity: 1998-05-18 00:00:00 through 2028-08-01 23:59:59
key type: 1024 bit RSA
key usage: [error: No value]
chain length: [error: No value]
fingerprint: 85:37:1C:A6:E5:50:14:3D:CE:28:03:47:1B:DE:3A:09:E8:F8:77:0F
----
also, i think following is my guess on how i got an error, "gpgsm:
invalid certification chain: No value"
(gnupg)
verify.c
rc = gpgsm_validate_chain (ctrl, cert, keyexptime, 0, NULL, 0);
certchain.c:gpgsm_validate_chain()
rc = allowed_ca (subject_cert, NULL, listmode, fp);
certchain.c:allowed_ca()
err = ksba_cert_is_ca (cert, &flag, chainlen);
(libksba)
cert.c:ksba_cert_is_ca()
err=ksba_cert_get_extension (cert, idx, &oid, &crit,&off, &derlen)
cert.c:ksba_cert_get_extension()
err = read_extensions (cert);
cert.c:read_extensions()
return gpg_error (GPG_ERR_NO_VALUE);
> > if not, i want it to be supported very much because there are many
> > certs having VeriSign's v1 cert as their root cert.
> We don't support the MD2 hash algorithm as used by some Verisign
> certificates.
it seems that is not the cause in this case. could you see attachment
which is full a output from "openssl pkcs7 -text -print_certs" ? hash
algorithm looks like SHA1.
// ARIGA Seiji
-------------- next part --------------
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:29:bd:a9:38:a6:b9:c9:5d:d5:59:e5:ae:54:87:30
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Organizational CA
Validity
Not Before: Apr 12 00:00:00 2006 GMT
Not After : Apr 11 23:59:59 2007 GMT
Subject: C=JP, ST=Tokyo, L=Chiyoda-ku, O=SUMITOMO MITSUI BANKING CORPORATION, OU=Mass Retail Dept.,Consumer Banking Unit, OU=Terms of use at https://www.verisign.com/rpa (c)05, OU=Class 3 Organizational E-Mail Certificate, CN=SUMITOMO MITSUI BANKING CORPORATION/emailAddress=SMBC_service at dn.smbc.co.jp
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (1024 bit)
Modulus (1024 bit):
00:d9:01:b6:30:36:40:96:f9:6b:5d:74:3d:bc:b2:
55:8b:b0:28:e6:bc:ac:db:a8:8a:20:97:c7:57:97:
05:1e:d8:1a:b8:50:82:d4:25:37:45:da:36:2e:ac:
2e:d5:bc:9e:a1:66:6f:ac:ad:a1:e7:4d:86:fd:21:
e6:ca:d8:0d:14:3f:50:58:81:9b:76:37:77:7f:80:
03:02:ef:69:9e:93:7f:e4:fb:39:c7:b0:f1:74:0d:
53:c2:d6:4a:e8:58:df:20:4e:1e:1d:78:66:1c:91:
e9:19:60:73:70:66:df:c1:5f:ad:47:d5:6d:2c:01:
db:cc:49:e7:0e:67:77:fd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
X509v3 Certificate Policies:
Policy: 2.16.840.1.113733.1.7.23.3
CPS: https://www.verisign.com/rpa
X509v3 Key Usage:
Digital Signature, Key Encipherment
X509v3 CRL Distribution Points:
URI:http://orgc3-crl.verisign.com/orgc3.crl
X509v3 Subject Alternative Name:
email:SMBC_service at dn.smbc.co.jp
Signature Algorithm: sha1WithRSAEncryption
3e:b7:c3:95:a9:48:88:12:78:fb:33:29:1b:25:0f:3f:de:9c:
1b:c2:03:a4:a6:f4:02:cd:dc:26:9c:f1:42:80:6f:26:8e:e8:
c7:3b:69:b3:e1:df:ab:1d:68:87:ad:d8:9d:9c:75:31:45:fb:
39:c2:29:48:49:01:9e:c9:12:7c:f0:09:f7:39:e8:5a:a0:ad:
1c:9b:54:e9:ab:e2:f2:0e:65:44:b2:b9:0f:84:cb:99:68:54:
0e:f9:6b:f8:ec:c6:10:b7:26:cb:60:e2:eb:18:41:82:13:f7:
88:f1:c4:3a:f4:62:fe:95:5d:c1:5f:31:a3:f2:9f:d1:f6:89:
0f:05:79:0a:60:b6:a0:fa:58:0b:34:8a:c0:80:20:3c:b4:0e:
c8:04:67:34:86:74:11:94:8c:c5:51:ec:b3:08:51:03:5d:25:
2c:25:88:66:da:12:8f:94:09:e9:eb:04:55:d6:9d:af:ae:b9:
5a:ec:74:ad:a1:ce:75:22:89:39:27:51:85:d4:2f:7a:54:c6:
9d:4e:09:3c:bd:f1:20:f9:1e:8f:13:09:ad:ac:ef:90:dd:59:
56:ef:ce:0e:33:2c:7c:c1:b4:d5:e0:d6:99:b2:2b:b6:40:a4:
c1:89:bd:ba:de:98:56:e5:28:ed:86:18:1b:f4:a6:4e:2f:7b:
10:f6:f3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Certificate:
Data:
Version: 1 (0x0)
Serial Number:
7d:d9:fe:07:cf:a8:1e:b7:10:79:67:fb:a7:89:34:c6
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority - G2, OU=(c) 1998 VeriSign, Inc. - For authorized use only, OU=VeriSign Trust Network
Validity
Not Before: May 18 00:00:00 1998 GMT
Not After : Aug 1 23:59:59 2028 GMT
Subject: C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority - G2, OU=(c) 1998 VeriSign, Inc. - For authorized use only, OU=VeriSign Trust Network
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (1024 bit)
Modulus (1024 bit):
00:cc:5e:d1:11:5d:5c:69:d0:ab:d3:b9:6a:4c:99:
1f:59:98:30:8e:16:85:20:46:6d:47:3f:d4:85:20:
84:e1:6d:b3:f8:a4:ed:0c:f1:17:0f:3b:f9:a7:f9:
25:d7:c1:cf:84:63:f2:7c:63:cf:a2:47:f2:c6:5b:
33:8e:64:40:04:68:c1:80:b9:64:1c:45:77:c7:d8:
6e:f5:95:29:3c:50:e8:34:d7:78:1f:a8:ba:6d:43:
91:95:8f:45:57:5e:7e:c5:fb:ca:a4:04:eb:ea:97:
37:54:30:6f:bb:01:47:32:33:cd:dc:57:9b:64:69:
61:f8:9b:1d:1c:89:4f:5c:67
Exponent: 65537 (0x10001)
Signature Algorithm: sha1WithRSAEncryption
51:4d:cd:be:5c:cb:98:19:9c:15:b2:01:39:78:2e:4d:0f:67:
70:70:99:c6:10:5a:94:a4:53:4d:54:6d:2b:af:0d:5d:40:8b:
64:d3:d7:ee:de:56:61:92:5f:a6:c4:1d:10:61:36:d3:2c:27:
3c:e8:29:09:b9:11:64:74:cc:b5:73:9f:1c:48:a9:bc:61:01:
ee:e2:17:a6:0c:e3:40:08:3b:0e:e7:eb:44:73:2a:9a:f1:69:
92:ef:71:14:c3:39:ac:71:a7:91:09:6f:e4:71:06:b3:ba:59:
57:26:79:00:f6:f8:0d:a2:33:30:28:d4:aa:58:a0:9d:9d:69:
91:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:83:35:8f:7f:e2:a9:0b:56:f6:a6:2d:82:5a:64:fe
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority - G2, OU=(c) 1998 VeriSign, Inc. - For authorized use only, OU=VeriSign Trust Network
Validity
Not Before: Dec 14 00:00:00 2004 GMT
Not After : Dec 13 23:59:59 2009 GMT
Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Organizational CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (2048 bit)
Modulus (2048 bit):
00:c3:e6:d4:7e:53:c9:82:8a:98:2c:f7:5b:48:8c:
83:ae:a0:e5:57:fe:41:34:9f:00:7e:80:92:40:61:
09:2e:11:3f:25:83:69:e1:a3:98:d7:08:24:84:8e:
c8:7a:ef:37:fd:7b:7f:37:66:1d:46:1e:c1:80:54:
5d:b2:0f:5e:b1:cc:19:e9:b8:4e:21:70:7d:f0:5a:
0f:37:16:af:1f:bc:90:fb:57:73:ac:39:37:79:6d:
36:bb:96:e3:87:d6:1f:43:d0:30:8e:79:47:bd:8c:
70:41:a9:62:08:bd:29:b0:81:7f:18:e7:12:50:91:
30:98:9b:02:f3:46:6d:35:b4:23:18:6e:5b:8a:a0:
da:43:61:8e:60:c6:8e:58:33:ac:15:88:c7:d4:87:
54:1e:b4:57:7c:9d:ec:26:10:3d:a0:22:7e:e4:ee:
17:34:bb:8d:90:92:40:f2:a2:6d:c2:82:16:8d:fc:
70:0c:da:4c:a1:26:c1:cb:08:77:d7:c7:3f:b8:b7:
0e:5e:8d:e9:5b:3e:37:af:3f:57:6e:27:97:91:49:
b5:41:98:34:f5:25:bb:fd:01:88:d3:d3:6f:9c:a7:
1f:24:df:c7:9a:6e:9b:4a:1f:34:c4:50:cb:ca:06:
64:7b:0d:4a:74:09:3c:4b:f5:40:8d:3b:1c:80:92:
3e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE, pathlen:0
X509v3 Certificate Policies:
Policy: 2.16.840.1.113733.1.7.23.3
CPS: https://www.verisign.com/rpa
X509v3 CRL Distribution Points:
URI:http://crl.verisign.com/pca3-g2.crl
X509v3 Key Usage:
Certificate Sign, CRL Sign
Netscape Cert Type:
SSL CA, S/MIME CA
X509v3 Subject Alternative Name:
DirName:/CN=Class3CA2048-1-44
X509v3 Subject Key Identifier:
D6:A0:4C:D8:69:05:D0:A4:49:0E:A2:42:59:E4:4C:B2:76:82:6F:48
X509v3 Authority Key Identifier:
DirName:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority - G2/OU=(c) 1998 VeriSign, Inc. - For authorized use only/OU=VeriSign Trust Network
serial:7D:D9:FE:07:CF:A8:1E:B7:10:79:67:FB:A7:89:34:C6
Signature Algorithm: sha1WithRSAEncryption
93:c9:76:b9:7e:d5:42:e3:f9:57:88:54:4c:e7:79:13:67:c5:
93:08:64:88:ce:76:c5:71:f7:f6:04:b6:04:5f:2b:49:58:cc:
74:4e:89:e2:2d:41:2f:c7:d6:be:44:52:88:9f:e0:9e:39:76:
08:fa:fe:0e:da:82:a9:e8:ce:26:6f:ca:84:12:fa:4b:58:9a:
27:7d:b4:9b:ad:41:d5:21:08:d3:b0:d6:ec:9c:e7:8d:b5:21:
a0:f7:50:11:a6:d7:11:92:99:2d:1f:fe:fc:98:f8:4e:6e:c9:
b8:3c:2c:89:39:3d:30:ff:81:11:3d:f2:8c:31:6e:36:63:2d:
7a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
More information about the Gnupg-devel
mailing list