Qualified digital signature not recognized. Missing Root CA certificate

After upgrading to new computer with Ubuntu 20.04 I managed to see such error “1 signature is unknown!”. SignatureXAdES_LTA.cpp:198 Signature validationSignatureXAdES_B.cpp:738 Unable to verify signing certificateX509CertStore.cpp:351 unable to get local issuer certificate:0OCSP.cpp:308 Certificate status: unknown Issue happens because openssl version 1.1.1f that is included in Ubuntu 20.04 LTS https://github.com/open-eid/libdigidocpp/issues/341 Building Read more…

Portugese Cartão de Cidadão electronic identification online

Portugal national ID card certification chain is quite interesting and complex. There are 2 root certificates. ECRaizEstado.crt is signed by Baltimore CyberTrust Root, that can be downloaded from https://www.digicert.com/CACerts/BaltimoreCyberTrustRoot.crt. Serial Number: 120050507 (0x727d34b)Issuer: C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust RootValidityNot Before: Sep 9 17:40:12 2015 GMTNot After : Sep 30 17:39:11 Read more…

e-ID user identification

Traditionally e-ID identification means using national ID card cryptography to verify the user is who he claims to be. Browsers have “Client certificate authentication” where webserver is configured to accept certificate provided by the client to verify its identity. For this browser sends server its public certificate and also token Read more…