After upgrading to new computer with Ubuntu 20.04 I managed to see such error “1 signature is unknown!”. SignatureXAdES_LTA.cpp:198 Signature validationSignatureXAdES_B.cpp:738 Unable to verify signing certificateX509CertStore.cpp:351 unable to get local issuer certificate:0OCSP.cpp:308 Certificate status: unknown Issue happens because openssl version Read more…
Root CA certificates need to be added to your local trust list when working with PKI. We will examine how to add root CA certificate and optionally some intermediate certificates to the trust store. Signature and certificate debugging Openssl is Read more…
Year was 2016 when www.smartid.ee was released under trademark “Smart ID”. Since then many websites fell in love to the service that allows them to identify customers very easily and get service running in minutes. Letting people sign the documents Read more…
Serbian ID card system has 5 CA certificates that need to be imported to your Apache2 configuration. All of these 5 CA certificates can be downloaded from http://ca.mup.gov.rs/sertifikati-lat.html. For some reason this site does not support https. This poses security Read more…
Portugal national ID card certification chain is quite interesting and complex. There are 2 root certificates. ECRaizEstado.crt is signed by Baltimore CyberTrust Root, that can be downloaded from https://www.digicert.com/CACerts/BaltimoreCyberTrustRoot.crt. Serial Number: 120050507 (0x727d34b)Issuer: C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust RootValidityNot Before: Read more…
Lithuania ID card identification setup with Apache2 is really simple, there is one root certificate and 2+2 card signing CA certificates. there are 2 sets of card signing certificates with different validity times. It is different from many other in Read more…
Why eID client certificate authentication? This the main scenario where national ID card users that have smart card chip can be identified in the website. Certificates stored on ID cards can be used to identify people online. In simplest terms Read more…
Traditionally e-ID identification means using national ID card cryptography to verify the user is who he claims to be. Browsers have “Client certificate authentication” where webserver is configured to accept certificate provided by the client to verify its identity. For Read more…
Signature itself is mark of the person that nobody can duplicate approving and confirming some action. Signature must be something that nobody can replicate. Otherwise other people can do very bad deals with you, for example buy your house for Read more…
Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua.