CRL verification problem

Luiz Henrique <[email protected]> Tue, 3 Dec 2019 15:27:55 -0300
Newsgroups gmane.comp.encryption.bouncy-castle.devel
Message-ID <CAB4idjbzAwbhRpA=XSP_V69b2g=-CxeNdxwXE_b9Pqh7Z5h2LQ@mail.gmail.com>
--00000000000081d0790598d0dbe9
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi, i am getting this error "java.security.SignatureException: CRL does not
verify with supplied public key."
when i try to verify if CRL is issued by the CA. But, if i use SUN provider
or even BouncyCastle provider version 1.46 the verification return sucess.

Can someone tell me if the error is related with BC? I am using latest
version 1.64


-------------------------------------------------
CRL:
MIISODCCECACAQEwDQYJKoZIhvcNAQENBQAwVDELMAkGA1UEBhMCQlIxEzARBgNVBAoTCklDUC1=
CcmFzaWwxFzAVBgNVBAsTDkFDIFByb2RlbWdlIEJSMRcwFQYDVQQDEw5BQyBQcm9kZW1nZSBNRx=
cNMTkxMjAzMTAyODA5WhcNMTkxMjAzMTYyODA5WjCCDuAwEgIBARcNMTgxMDA0MTM1MzM4WjASA=
gENFw0xODEwMTgxODI0MzJaMBICARUXDTE4MTAyNDE4NDcyNFowEgIBSRcNMTgxMTA3MTMyNTMx=
WjATAgIAshcNMTgxMTIxMTEwNTE1WjATAgIAxRcNMTgxMTIxMTIyNDA1WjATAgIA1hcNMTgxMTI=
yMTcyNzEwWjATAgIAphcNMTgxMTI3MTg1NTUxWjATAgIBJRcNMTgxMjAzMTIyNjU3WjATAgIBMh=
cNMTgxMjA0MjIwOTMyWjATAgIBmBcNMTgxMjE3MTU1OTE1WjATAgIBlxcNMTgxMjE3MTg0NjQ2W=
jATAgIBnhcNMTgxMjE4MTIwNzIzWjATAgIBkxcNMTgxMjE4MTUzODE0WjATAgIBnxcNMTgxMjE4=
MTU0OTMyWjATAgIBohcNMTgxMjE4MTY0MzM1WjATAgIBuhcNMTgxMjIwMTg0ODM1WjATAgIBuRc=
NMTgxMjIwMTg1NDA3WjATAgIByhcNMTgxMjI3MTEyNzAxWjATAgIBqRcNMTkwMTAyMTczNjA1Wj=
ATAgIB4xcNMTkwMTAzMTIzOTUxWjATAgIB6BcNMTkwMTAzMTcyMzE5WjATAgICLRcNMTkwMTE4M=
TcwNzEwWjATAgICMRcNMTkwMTIxMTA1OTA1WjATAgICORcNMTkwMTIxMTMyMjQxWjATAgICUBcN=
MTkwMTIyMTYzMjQyWjATAgICkBcNMTkwMTMwMTMwODE2WjATAgIClBcNMTkwMTMwMTMxMDQ4WjA=
TAgICohcNMTkwMTMwMjE1MzAwWjATAgICoxcNMTkwMTMwMjIzNTIwWjATAgICpRcNMTkwMTMxMT=
EyMDA4WjATAgICvRcNMTkwMjAxMTEzMTMyWjATAgIC1xcNMTkwMjAxMjExMDA2WjATAgIC2BcNM=
TkwMjAxMjIyODMwWjATAgIC2RcNMTkwMjA0MTA0MTI3WjATAgIC7hcNMTkwMjA0MTQ1OTU5WjAT=
AgIDMBcNMTkwMjA3MDk1MjI5WjATAgIDFxcNMTkwMjA3MTIzMzU1WjATAgIDNxcNMTkwMjA3MTY=
1NzU4WjATAgIDPxcNMTkwMjA4MTAyNDAzWjATAgIDVhcNMTkwMjA4MTcwOTAyWjATAgIDZBcNMT=
kwMjExMTExMjU4WjATAgIDaBcNMTkwMjExMTIxNjM4WjATAgIDchcNMTkwMjExMTcwMjE2WjATA=
gIBsRcNMTkwMjExMTczNjM5WjATAgIDdxcNMTkwMjEyMTAyODM3WjATAgICuhcNMTkwMjEyMTc0=
MTA5WjATAgIDkxcNMTkwMjEzMTAyMjEzWjATAgICrRcNMTkwMjEzMTIxMTE3WjATAgIDvRcNMTk=
wMjEzMjA0MTQ5WjATAgIDuxcNMTkwMjEzMjA0MjU5WjATAgIDvxcNMTkwMjE0MTA0MzI5WjATAg=
IDwBcNMTkwMjE0MTA0OTI4WjATAgIBOhcNMTkwMjE0MTMwNzQxWjASAgEvFw0xOTAyMTQxMzA5M=
DNaMBMCAgPFFw0xOTAyMTUxMzQ3MjhaMBMCAgO


CA certificate:
MIIGkjCCBHqgAwIBAgIBATANBgkqhkiG9w0BAQ0FADBxMQswCQYDVQQGEwJCUjETMBEGA1UECgw=
KSUNQLUJyYXNpbDE0MDIGA1UECwwrQXV0b3JpZGFkZSBDZXJ0aWZpY2Fkb3JhIFJhaXogQnJhc2=
lsZWlyYSB2NTEXMBUGA1UEAwwOQUMgUHJvZGVtZ2UgQlIwHhcNMTgwODMxMTUyMDMzWhcNMjkwM=
zAxMTUyMDMzWjBUMQswCQYDVQQGEwJCUjETMBEGA1UEChMKSUNQLUJyYXNpbDEXMBUGA1UECxMO=
QUMgUHJvZGVtZ2UgQlIxFzAVBgNVBAMTDkFDIFByb2RlbWdlIE1HMIICIjANBgkqhkiG9w0BAQE=
FAAOCAg8AMIICCgKCAgEApWGLOCwpZr3PpyxVMR6x+os6/i3v2FOgEh8/8/bfUkv7qrIAfuy0Bq=
re/F+ZVVAnySqXObEMpQAtovqgLBEzzv1dcPyd6FLjHCqyuPNzRQLACAtEZJ/UA7pyKDiDspGwS=
0FyEYfMbxC7U0nuQnliJmANPJuc6SrAnnWBT7aimDI1ztxoJfCclLVPZI/gft5uKK06p3wnsJvT=
ZDYivvr45Vmf9715e0lvaad70qdE9YJZjQS0QWESI5iMwlTc+nx/Tpn7JmEwkNxS1K2n8EA6Nxa=
hnYQAjmNMrlnKkCd8nWi9WxE66ZSsspVyf+lNJlSnLX9hgRpiA5VsRafHSP3/vWNQaDpyaax88P=
IBfHilBMfSErFIEywREcZnrv5egdGD8AO+EDLjW0m8pBrK2Qxak6NAM6ezMdpAwY2Uwp4z9fpuS=
3iIlFJSOCgS2MMBD8J2kplc71kM8EH8Mz4N2ji1SCLoG3NcqPD+GMIxE4F70pnHeOmW24qcsFVJ=
CwDPaSZsoAA4fFH3m8PBpzLigvz9U0xURyr8n3jvI38KxS5Q+cH+SjGa5fQ66xn7BAhClheWeug=
bv/ljjciHzH5Qu4MbFdcGygBdiqRiMJOIWId8c/h5YZ0lmnANvBmkcI3/+NlvsXiubE8z6yiDo3=
PwR95SfqNQzkgrcykicL9OfVNqUgsCAwEAAaOCAVAwggFMMB0GA1UdDgQWBBTt3CdtYXrn45x/f=
qKxU59wk3wCtjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjB8BgNVHSAEdTBzMHEG=
BWBMAQF+MGgwZgYIKwYBBQUHAgEWWmh0dHA6Ly9pY3AtYnJhc2lsLmFjLnByb2RlbWdlLmdvdi5=
ici9yZXBvc2l0b3Jpby9kcGMvYWNfcHJvZGVtZ2VfbWcvZHBjX2FjX3Byb2RlbWdlX21nLnBkZj=
BrBgNVHR8EZDBiMGCgXqBchlpodHRwOi8vaWNwLWJyYXNpbC5hYy5wcm9kZW1nZS5nb3YuYnIvc=
mVwb3NpdG9yaW8vbGNyL2FjX3Byb2RlbWdlX2JyL2xjcl9hY19wcm9kZW1nZV9ici5jcmwwHwYD=
VR0jBBgwFoAUyMgWTsRchBF6HLmDfFMdz27AI8kwDQYJKoZIhvcNAQENBQADggIBAI7GDU0ySaT=
9DG+ovEd7xp4Qxw9RgypvP9qW0dLn2KPXtrSYJLFIOB+dIVp6wcAdotMXFqmdcVc0i4zkQu3S0M=
zkFCMdXmGTGjf4TbeUdUB9HGRZfyOP3FgfcX3foP3MFkI+acNAEqE7ntlngT6lowWA9B9CbGim1=
FtgKwo8AmcI7089mFUOaYAxhqyfuWHZtLHqYW+R0vuhkObSMHjQU2EIBCC69QlmGHgLQa3PmNuQ=
JWDvm8h+5XD3qqjnyg8h7PlBxPtOrpVip8a2zdz3fsBMV/cq8ssbwRvwcEcfu6vpyp8kpSHhUgV=
LCk7f5xfD35qlFeN9YAP8/n0vS85sqYKxUPKmm/HQQ8ALJRc32A5emksUw2snpJLeGvY/A8fC61=
YLq6KonLhVBt+nqHPPykD4BRa0qJw6Dq9tHLefim22LQzRzbOFnRpFDYYJfkwNQen5f3xwUzzx4=
UJsruQLR53BE8ocpeiB9+iYgmn4e+DcQKYM/HI0ha0zseX6xnDJeANg1JYbO4Jprb4cw26XkM+N=
DGkIC3FM4yJ/EtufNwOykEiG9ELCpou+ay8nnNXM0MKzMLiKmPjllY8rN84k309jHACy0RAbrCM=
fRXW3FZlBCKEfqpwOloJzBtDA10S6tplStVYjApy785Dr1B463CC1f+aow15/FirHhUh4GtCy

--00000000000081d0790598d0dbe9
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi, i am getting this error &quot;java.security.SignatureE=
xception: CRL does not verify with supplied public key.&quot;<br>when i try=
 to verify if CRL is issued by the CA. But, if i use SUN provider or even B=
ouncyCastle provider version 1.46 the verification return sucess.<br><br>Ca=
n someone tell me if the error is related with BC? I am using latest versio=
n 1.64<br><div><br></div><div><br></div><div>------------------------------=
-------------------</div><div>CRL:</div><div>MIISODCCECACAQEwDQYJKoZIhvcNAQ=
ENBQAwVDELMAkGA1UEBhMCQlIxEzARBgNVBAoTCklDUC1CcmFzaWwxFzAVBgNVBAsTDkFDIFByb=
2RlbWdlIEJSMRcwFQYDVQQDEw5BQyBQcm9kZW1nZSBNRxcNMTkxMjAzMTAyODA5WhcNMTkxMjAz=
MTYyODA5WjCCDuAwEgIBARcNMTgxMDA0MTM1MzM4WjASAgENFw0xODEwMTgxODI0MzJaMBICARU=
XDTE4MTAyNDE4NDcyNFowEgIBSRcNMTgxMTA3MTMyNTMxWjATAgIAshcNMTgxMTIxMTEwNTE1Wj=
ATAgIAxRcNMTgxMTIxMTIyNDA1WjATAgIA1hcNMTgxMTIyMTcyNzEwWjATAgIAphcNMTgxMTI3M=
Tg1NTUxWjATAgIBJRcNMTgxMjAzMTIyNjU3WjATAgIBMhcNMTgxMjA0MjIwOTMyWjATAgIBmBcN=
MTgxMjE3MTU1OTE1WjATAgIBlxcNMTgxMjE3MTg0NjQ2WjATAgIBnhcNMTgxMjE4MTIwNzIzWjA=
TAgIBkxcNMTgxMjE4MTUzODE0WjATAgIBnxcNMTgxMjE4MTU0OTMyWjATAgIBohcNMTgxMjE4MT=
Y0MzM1WjATAgIBuhcNMTgxMjIwMTg0ODM1WjATAgIBuRcNMTgxMjIwMTg1NDA3WjATAgIByhcNM=
TgxMjI3MTEyNzAxWjATAgIBqRcNMTkwMTAyMTczNjA1WjATAgIB4xcNMTkwMTAzMTIzOTUxWjAT=
AgIB6BcNMTkwMTAzMTcyMzE5WjATAgICLRcNMTkwMTE4MTcwNzEwWjATAgICMRcNMTkwMTIxMTA=
1OTA1WjATAgICORcNMTkwMTIxMTMyMjQxWjATAgICUBcNMTkwMTIyMTYzMjQyWjATAgICkBcNMT=
kwMTMwMTMwODE2WjATAgIClBcNMTkwMTMwMTMxMDQ4WjATAgICohcNMTkwMTMwMjE1MzAwWjATA=
gICoxcNMTkwMTMwMjIzNTIwWjATAgICpRcNMTkwMTMxMTEyMDA4WjATAgICvRcNMTkwMjAxMTEz=
MTMyWjATAgIC1xcNMTkwMjAxMjExMDA2WjATAgIC2BcNMTkwMjAxMjIyODMwWjATAgIC2RcNMTk=
wMjA0MTA0MTI3WjATAgIC7hcNMTkwMjA0MTQ1OTU5WjATAgIDMBcNMTkwMjA3MDk1MjI5WjATAg=
IDFxcNMTkwMjA3MTIzMzU1WjATAgIDNxcNMTkwMjA3MTY1NzU4WjATAgIDPxcNMTkwMjA4MTAyN=
DAzWjATAgIDVhcNMTkwMjA4MTcwOTAyWjATAgIDZBcNMTkwMjExMTExMjU4WjATAgIDaBcNMTkw=
MjExMTIxNjM4WjATAgIDchcNMTkwMjExMTcwMjE2WjATAgIBsRcNMTkwMjExMTczNjM5WjATAgI=
DdxcNMTkwMjEyMTAyODM3WjATAgICuhcNMTkwMjEyMTc0MTA5WjATAgIDkxcNMTkwMjEzMTAyMj=
EzWjATAgICrRcNMTkwMjEzMTIxMTE3WjATAgIDvRcNMTkwMjEzMjA0MTQ5WjATAgIDuxcNMTkwM=
jEzMjA0MjU5WjATAgIDvxcNMTkwMjE0MTA0MzI5WjATAgIDwBcNMTkwMjE0MTA0OTI4WjATAgIB=
OhcNMTkwMjE0MTMwNzQxWjASAgEvFw0xOTAyMTQxMzA5MDNaMBMCAgPFFw0xOTAyMTUxMzQ3Mjh=
aMBMCAgO<br></div><div><br></div><div><br></div><div>CA certificate:</div><=
div>MIIGkjCCBHqgAwIBAgIBATANBgkqhkiG9w0BAQ0FADBxMQswCQYDVQQGEwJCUjETMBEGA1U=
ECgwKSUNQLUJyYXNpbDE0MDIGA1UECwwrQXV0b3JpZGFkZSBDZXJ0aWZpY2Fkb3JhIFJhaXogQn=
Jhc2lsZWlyYSB2NTEXMBUGA1UEAwwOQUMgUHJvZGVtZ2UgQlIwHhcNMTgwODMxMTUyMDMzWhcNM=
jkwMzAxMTUyMDMzWjBUMQswCQYDVQQGEwJCUjETMBEGA1UEChMKSUNQLUJyYXNpbDEXMBUGA1UE=
CxMOQUMgUHJvZGVtZ2UgQlIxFzAVBgNVBAMTDkFDIFByb2RlbWdlIE1HMIICIjANBgkqhkiG9w0=
BAQEFAAOCAg8AMIICCgKCAgEApWGLOCwpZr3PpyxVMR6x+os6/i3v2FOgEh8/8/bfUkv7qrIAfu=
y0Bqre/F+ZVVAnySqXObEMpQAtovqgLBEzzv1dcPyd6FLjHCqyuPNzRQLACAtEZJ/UA7pyKDiDs=
pGwS0FyEYfMbxC7U0nuQnliJmANPJuc6SrAnnWBT7aimDI1ztxoJfCclLVPZI/gft5uKK06p3wn=
sJvTZDYivvr45Vmf9715e0lvaad70qdE9YJZjQS0QWESI5iMwlTc+nx/Tpn7JmEwkNxS1K2n8EA=
6NxahnYQAjmNMrlnKkCd8nWi9WxE66ZSsspVyf+lNJlSnLX9hgRpiA5VsRafHSP3/vWNQaDpyaa=
x88PIBfHilBMfSErFIEywREcZnrv5egdGD8AO+EDLjW0m8pBrK2Qxak6NAM6ezMdpAwY2Uwp4z9=
fpuS3iIlFJSOCgS2MMBD8J2kplc71kM8EH8Mz4N2ji1SCLoG3NcqPD+GMIxE4F70pnHeOmW24qc=
sFVJCwDPaSZsoAA4fFH3m8PBpzLigvz9U0xURyr8n3jvI38KxS5Q+cH+SjGa5fQ66xn7BAhClhe=
Weugbv/ljjciHzH5Qu4MbFdcGygBdiqRiMJOIWId8c/h5YZ0lmnANvBmkcI3/+NlvsXiubE8z6y=
iDo3PwR95SfqNQzkgrcykicL9OfVNqUgsCAwEAAaOCAVAwggFMMB0GA1UdDgQWBBTt3CdtYXrn4=
5x/fqKxU59wk3wCtjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjB8BgNVHSAEdTBz=
MHEGBWBMAQF+MGgwZgYIKwYBBQUHAgEWWmh0dHA6Ly9pY3AtYnJhc2lsLmFjLnByb2RlbWdlLmd=
vdi5ici9yZXBvc2l0b3Jpby9kcGMvYWNfcHJvZGVtZ2VfbWcvZHBjX2FjX3Byb2RlbWdlX21nLn=
BkZjBrBgNVHR8EZDBiMGCgXqBchlpodHRwOi8vaWNwLWJyYXNpbC5hYy5wcm9kZW1nZS5nb3YuY=
nIvcmVwb3NpdG9yaW8vbGNyL2FjX3Byb2RlbWdlX2JyL2xjcl9hY19wcm9kZW1nZV9ici5jcmww=
HwYDVR0jBBgwFoAUyMgWTsRchBF6HLmDfFMdz27AI8kwDQYJKoZIhvcNAQENBQADggIBAI7GDU0=
ySaT9DG+ovEd7xp4Qxw9RgypvP9qW0dLn2KPXtrSYJLFIOB+dIVp6wcAdotMXFqmdcVc0i4zkQu=
3S0MzkFCMdXmGTGjf4TbeUdUB9HGRZfyOP3FgfcX3foP3MFkI+acNAEqE7ntlngT6lowWA9B9Cb=
Gim1FtgKwo8AmcI7089mFUOaYAxhqyfuWHZtLHqYW+R0vuhkObSMHjQU2EIBCC69QlmGHgLQa3P=
mNuQJWDvm8h+5XD3qqjnyg8h7PlBxPtOrpVip8a2zdz3fsBMV/cq8ssbwRvwcEcfu6vpyp8kpSH=
hUgVLCk7f5xfD35qlFeN9YAP8/n0vS85sqYKxUPKmm/HQQ8ALJRc32A5emksUw2snpJLeGvY/A8=
fC61YLq6KonLhVBt+nqHPPykD4BRa0qJw6Dq9tHLefim22LQzRzbOFnRpFDYYJfkwNQen5f3xwU=
zzx4UJsruQLR53BE8ocpeiB9+iYgmn4e+DcQKYM/HI0ha0zseX6xnDJeANg1JYbO4Jprb4cw26X=
kM+NDGkIC3FM4yJ/EtufNwOykEiG9ELCpou+ay8nnNXM0MKzMLiKmPjllY8rN84k309jHACy0RA=
brCMfRXW3FZlBCKEfqpwOloJzBtDA10S6tplStVYjApy785Dr1B463CC1f+aow15/FirHhUh4Gt=
Cy</div></div>

--00000000000081d0790598d0dbe9--