CRL verification problem
Luiz Henrique <[email protected]> Tue, 3 Dec 2019 15:27:55 -0300
| Newsgroups | gmane.comp.encryption.bouncy-castle.devel |
|---|---|
| Message-ID | <CAB4idjbzAwbhRpA=XSP_V69b2g=-CxeNdxwXE_b9Pqh7Z5h2LQ@mail.gmail.com> |
--00000000000081d0790598d0dbe9 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi, i am getting this error "java.security.SignatureException: CRL does not verify with supplied public key." when i try to verify if CRL is issued by the CA. But, if i use SUN provider or even BouncyCastle provider version 1.46 the verification return sucess. Can someone tell me if the error is related with BC? I am using latest version 1.64 ------------------------------------------------- CRL: MIISODCCECACAQEwDQYJKoZIhvcNAQENBQAwVDELMAkGA1UEBhMCQlIxEzARBgNVBAoTCklDUC1= CcmFzaWwxFzAVBgNVBAsTDkFDIFByb2RlbWdlIEJSMRcwFQYDVQQDEw5BQyBQcm9kZW1nZSBNRx= cNMTkxMjAzMTAyODA5WhcNMTkxMjAzMTYyODA5WjCCDuAwEgIBARcNMTgxMDA0MTM1MzM4WjASA= gENFw0xODEwMTgxODI0MzJaMBICARUXDTE4MTAyNDE4NDcyNFowEgIBSRcNMTgxMTA3MTMyNTMx= WjATAgIAshcNMTgxMTIxMTEwNTE1WjATAgIAxRcNMTgxMTIxMTIyNDA1WjATAgIA1hcNMTgxMTI= yMTcyNzEwWjATAgIAphcNMTgxMTI3MTg1NTUxWjATAgIBJRcNMTgxMjAzMTIyNjU3WjATAgIBMh= cNMTgxMjA0MjIwOTMyWjATAgIBmBcNMTgxMjE3MTU1OTE1WjATAgIBlxcNMTgxMjE3MTg0NjQ2W= jATAgIBnhcNMTgxMjE4MTIwNzIzWjATAgIBkxcNMTgxMjE4MTUzODE0WjATAgIBnxcNMTgxMjE4= MTU0OTMyWjATAgIBohcNMTgxMjE4MTY0MzM1WjATAgIBuhcNMTgxMjIwMTg0ODM1WjATAgIBuRc= NMTgxMjIwMTg1NDA3WjATAgIByhcNMTgxMjI3MTEyNzAxWjATAgIBqRcNMTkwMTAyMTczNjA1Wj= ATAgIB4xcNMTkwMTAzMTIzOTUxWjATAgIB6BcNMTkwMTAzMTcyMzE5WjATAgICLRcNMTkwMTE4M= TcwNzEwWjATAgICMRcNMTkwMTIxMTA1OTA1WjATAgICORcNMTkwMTIxMTMyMjQxWjATAgICUBcN= MTkwMTIyMTYzMjQyWjATAgICkBcNMTkwMTMwMTMwODE2WjATAgIClBcNMTkwMTMwMTMxMDQ4WjA= TAgICohcNMTkwMTMwMjE1MzAwWjATAgICoxcNMTkwMTMwMjIzNTIwWjATAgICpRcNMTkwMTMxMT= EyMDA4WjATAgICvRcNMTkwMjAxMTEzMTMyWjATAgIC1xcNMTkwMjAxMjExMDA2WjATAgIC2BcNM= TkwMjAxMjIyODMwWjATAgIC2RcNMTkwMjA0MTA0MTI3WjATAgIC7hcNMTkwMjA0MTQ1OTU5WjAT= AgIDMBcNMTkwMjA3MDk1MjI5WjATAgIDFxcNMTkwMjA3MTIzMzU1WjATAgIDNxcNMTkwMjA3MTY= 1NzU4WjATAgIDPxcNMTkwMjA4MTAyNDAzWjATAgIDVhcNMTkwMjA4MTcwOTAyWjATAgIDZBcNMT= kwMjExMTExMjU4WjATAgIDaBcNMTkwMjExMTIxNjM4WjATAgIDchcNMTkwMjExMTcwMjE2WjATA= gIBsRcNMTkwMjExMTczNjM5WjATAgIDdxcNMTkwMjEyMTAyODM3WjATAgICuhcNMTkwMjEyMTc0= MTA5WjATAgIDkxcNMTkwMjEzMTAyMjEzWjATAgICrRcNMTkwMjEzMTIxMTE3WjATAgIDvRcNMTk= wMjEzMjA0MTQ5WjATAgIDuxcNMTkwMjEzMjA0MjU5WjATAgIDvxcNMTkwMjE0MTA0MzI5WjATAg= IDwBcNMTkwMjE0MTA0OTI4WjATAgIBOhcNMTkwMjE0MTMwNzQxWjASAgEvFw0xOTAyMTQxMzA5M= DNaMBMCAgPFFw0xOTAyMTUxMzQ3MjhaMBMCAgO CA certificate: MIIGkjCCBHqgAwIBAgIBATANBgkqhkiG9w0BAQ0FADBxMQswCQYDVQQGEwJCUjETMBEGA1UECgw= KSUNQLUJyYXNpbDE0MDIGA1UECwwrQXV0b3JpZGFkZSBDZXJ0aWZpY2Fkb3JhIFJhaXogQnJhc2= lsZWlyYSB2NTEXMBUGA1UEAwwOQUMgUHJvZGVtZ2UgQlIwHhcNMTgwODMxMTUyMDMzWhcNMjkwM= zAxMTUyMDMzWjBUMQswCQYDVQQGEwJCUjETMBEGA1UEChMKSUNQLUJyYXNpbDEXMBUGA1UECxMO= QUMgUHJvZGVtZ2UgQlIxFzAVBgNVBAMTDkFDIFByb2RlbWdlIE1HMIICIjANBgkqhkiG9w0BAQE= FAAOCAg8AMIICCgKCAgEApWGLOCwpZr3PpyxVMR6x+os6/i3v2FOgEh8/8/bfUkv7qrIAfuy0Bq= re/F+ZVVAnySqXObEMpQAtovqgLBEzzv1dcPyd6FLjHCqyuPNzRQLACAtEZJ/UA7pyKDiDspGwS= 0FyEYfMbxC7U0nuQnliJmANPJuc6SrAnnWBT7aimDI1ztxoJfCclLVPZI/gft5uKK06p3wnsJvT= ZDYivvr45Vmf9715e0lvaad70qdE9YJZjQS0QWESI5iMwlTc+nx/Tpn7JmEwkNxS1K2n8EA6Nxa= hnYQAjmNMrlnKkCd8nWi9WxE66ZSsspVyf+lNJlSnLX9hgRpiA5VsRafHSP3/vWNQaDpyaax88P= IBfHilBMfSErFIEywREcZnrv5egdGD8AO+EDLjW0m8pBrK2Qxak6NAM6ezMdpAwY2Uwp4z9fpuS= 3iIlFJSOCgS2MMBD8J2kplc71kM8EH8Mz4N2ji1SCLoG3NcqPD+GMIxE4F70pnHeOmW24qcsFVJ= CwDPaSZsoAA4fFH3m8PBpzLigvz9U0xURyr8n3jvI38KxS5Q+cH+SjGa5fQ66xn7BAhClheWeug= bv/ljjciHzH5Qu4MbFdcGygBdiqRiMJOIWId8c/h5YZ0lmnANvBmkcI3/+NlvsXiubE8z6yiDo3= PwR95SfqNQzkgrcykicL9OfVNqUgsCAwEAAaOCAVAwggFMMB0GA1UdDgQWBBTt3CdtYXrn45x/f= qKxU59wk3wCtjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjB8BgNVHSAEdTBzMHEG= BWBMAQF+MGgwZgYIKwYBBQUHAgEWWmh0dHA6Ly9pY3AtYnJhc2lsLmFjLnByb2RlbWdlLmdvdi5= ici9yZXBvc2l0b3Jpby9kcGMvYWNfcHJvZGVtZ2VfbWcvZHBjX2FjX3Byb2RlbWdlX21nLnBkZj= BrBgNVHR8EZDBiMGCgXqBchlpodHRwOi8vaWNwLWJyYXNpbC5hYy5wcm9kZW1nZS5nb3YuYnIvc= mVwb3NpdG9yaW8vbGNyL2FjX3Byb2RlbWdlX2JyL2xjcl9hY19wcm9kZW1nZV9ici5jcmwwHwYD= VR0jBBgwFoAUyMgWTsRchBF6HLmDfFMdz27AI8kwDQYJKoZIhvcNAQENBQADggIBAI7GDU0ySaT= 9DG+ovEd7xp4Qxw9RgypvP9qW0dLn2KPXtrSYJLFIOB+dIVp6wcAdotMXFqmdcVc0i4zkQu3S0M= zkFCMdXmGTGjf4TbeUdUB9HGRZfyOP3FgfcX3foP3MFkI+acNAEqE7ntlngT6lowWA9B9CbGim1= FtgKwo8AmcI7089mFUOaYAxhqyfuWHZtLHqYW+R0vuhkObSMHjQU2EIBCC69QlmGHgLQa3PmNuQ= JWDvm8h+5XD3qqjnyg8h7PlBxPtOrpVip8a2zdz3fsBMV/cq8ssbwRvwcEcfu6vpyp8kpSHhUgV= LCk7f5xfD35qlFeN9YAP8/n0vS85sqYKxUPKmm/HQQ8ALJRc32A5emksUw2snpJLeGvY/A8fC61= YLq6KonLhVBt+nqHPPykD4BRa0qJw6Dq9tHLefim22LQzRzbOFnRpFDYYJfkwNQen5f3xwUzzx4= UJsruQLR53BE8ocpeiB9+iYgmn4e+DcQKYM/HI0ha0zseX6xnDJeANg1JYbO4Jprb4cw26XkM+N= DGkIC3FM4yJ/EtufNwOykEiG9ELCpou+ay8nnNXM0MKzMLiKmPjllY8rN84k309jHACy0RAbrCM= fRXW3FZlBCKEfqpwOloJzBtDA10S6tplStVYjApy785Dr1B463CC1f+aow15/FirHhUh4GtCy --00000000000081d0790598d0dbe9 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr">Hi, i am getting this error "java.security.SignatureE= xception: CRL does not verify with supplied public key."<br>when i try= to verify if CRL is issued by the CA. But, if i use SUN provider or even B= ouncyCastle provider version 1.46 the verification return sucess.<br><br>Ca= n someone tell me if the error is related with BC? I am using latest versio= n 1.64<br><div><br></div><div><br></div><div>------------------------------= -------------------</div><div>CRL:</div><div>MIISODCCECACAQEwDQYJKoZIhvcNAQ= ENBQAwVDELMAkGA1UEBhMCQlIxEzARBgNVBAoTCklDUC1CcmFzaWwxFzAVBgNVBAsTDkFDIFByb= 2RlbWdlIEJSMRcwFQYDVQQDEw5BQyBQcm9kZW1nZSBNRxcNMTkxMjAzMTAyODA5WhcNMTkxMjAz= MTYyODA5WjCCDuAwEgIBARcNMTgxMDA0MTM1MzM4WjASAgENFw0xODEwMTgxODI0MzJaMBICARU= XDTE4MTAyNDE4NDcyNFowEgIBSRcNMTgxMTA3MTMyNTMxWjATAgIAshcNMTgxMTIxMTEwNTE1Wj= ATAgIAxRcNMTgxMTIxMTIyNDA1WjATAgIA1hcNMTgxMTIyMTcyNzEwWjATAgIAphcNMTgxMTI3M= Tg1NTUxWjATAgIBJRcNMTgxMjAzMTIyNjU3WjATAgIBMhcNMTgxMjA0MjIwOTMyWjATAgIBmBcN= MTgxMjE3MTU1OTE1WjATAgIBlxcNMTgxMjE3MTg0NjQ2WjATAgIBnhcNMTgxMjE4MTIwNzIzWjA= TAgIBkxcNMTgxMjE4MTUzODE0WjATAgIBnxcNMTgxMjE4MTU0OTMyWjATAgIBohcNMTgxMjE4MT= Y0MzM1WjATAgIBuhcNMTgxMjIwMTg0ODM1WjATAgIBuRcNMTgxMjIwMTg1NDA3WjATAgIByhcNM= TgxMjI3MTEyNzAxWjATAgIBqRcNMTkwMTAyMTczNjA1WjATAgIB4xcNMTkwMTAzMTIzOTUxWjAT= AgIB6BcNMTkwMTAzMTcyMzE5WjATAgICLRcNMTkwMTE4MTcwNzEwWjATAgICMRcNMTkwMTIxMTA= 1OTA1WjATAgICORcNMTkwMTIxMTMyMjQxWjATAgICUBcNMTkwMTIyMTYzMjQyWjATAgICkBcNMT= kwMTMwMTMwODE2WjATAgIClBcNMTkwMTMwMTMxMDQ4WjATAgICohcNMTkwMTMwMjE1MzAwWjATA= gICoxcNMTkwMTMwMjIzNTIwWjATAgICpRcNMTkwMTMxMTEyMDA4WjATAgICvRcNMTkwMjAxMTEz= MTMyWjATAgIC1xcNMTkwMjAxMjExMDA2WjATAgIC2BcNMTkwMjAxMjIyODMwWjATAgIC2RcNMTk= wMjA0MTA0MTI3WjATAgIC7hcNMTkwMjA0MTQ1OTU5WjATAgIDMBcNMTkwMjA3MDk1MjI5WjATAg= IDFxcNMTkwMjA3MTIzMzU1WjATAgIDNxcNMTkwMjA3MTY1NzU4WjATAgIDPxcNMTkwMjA4MTAyN= DAzWjATAgIDVhcNMTkwMjA4MTcwOTAyWjATAgIDZBcNMTkwMjExMTExMjU4WjATAgIDaBcNMTkw= MjExMTIxNjM4WjATAgIDchcNMTkwMjExMTcwMjE2WjATAgIBsRcNMTkwMjExMTczNjM5WjATAgI= DdxcNMTkwMjEyMTAyODM3WjATAgICuhcNMTkwMjEyMTc0MTA5WjATAgIDkxcNMTkwMjEzMTAyMj= EzWjATAgICrRcNMTkwMjEzMTIxMTE3WjATAgIDvRcNMTkwMjEzMjA0MTQ5WjATAgIDuxcNMTkwM= jEzMjA0MjU5WjATAgIDvxcNMTkwMjE0MTA0MzI5WjATAgIDwBcNMTkwMjE0MTA0OTI4WjATAgIB= OhcNMTkwMjE0MTMwNzQxWjASAgEvFw0xOTAyMTQxMzA5MDNaMBMCAgPFFw0xOTAyMTUxMzQ3Mjh= aMBMCAgO<br></div><div><br></div><div><br></div><div>CA certificate:</div><= div>MIIGkjCCBHqgAwIBAgIBATANBgkqhkiG9w0BAQ0FADBxMQswCQYDVQQGEwJCUjETMBEGA1U= ECgwKSUNQLUJyYXNpbDE0MDIGA1UECwwrQXV0b3JpZGFkZSBDZXJ0aWZpY2Fkb3JhIFJhaXogQn= Jhc2lsZWlyYSB2NTEXMBUGA1UEAwwOQUMgUHJvZGVtZ2UgQlIwHhcNMTgwODMxMTUyMDMzWhcNM= jkwMzAxMTUyMDMzWjBUMQswCQYDVQQGEwJCUjETMBEGA1UEChMKSUNQLUJyYXNpbDEXMBUGA1UE= CxMOQUMgUHJvZGVtZ2UgQlIxFzAVBgNVBAMTDkFDIFByb2RlbWdlIE1HMIICIjANBgkqhkiG9w0= BAQEFAAOCAg8AMIICCgKCAgEApWGLOCwpZr3PpyxVMR6x+os6/i3v2FOgEh8/8/bfUkv7qrIAfu= y0Bqre/F+ZVVAnySqXObEMpQAtovqgLBEzzv1dcPyd6FLjHCqyuPNzRQLACAtEZJ/UA7pyKDiDs= pGwS0FyEYfMbxC7U0nuQnliJmANPJuc6SrAnnWBT7aimDI1ztxoJfCclLVPZI/gft5uKK06p3wn= sJvTZDYivvr45Vmf9715e0lvaad70qdE9YJZjQS0QWESI5iMwlTc+nx/Tpn7JmEwkNxS1K2n8EA= 6NxahnYQAjmNMrlnKkCd8nWi9WxE66ZSsspVyf+lNJlSnLX9hgRpiA5VsRafHSP3/vWNQaDpyaa= x88PIBfHilBMfSErFIEywREcZnrv5egdGD8AO+EDLjW0m8pBrK2Qxak6NAM6ezMdpAwY2Uwp4z9= fpuS3iIlFJSOCgS2MMBD8J2kplc71kM8EH8Mz4N2ji1SCLoG3NcqPD+GMIxE4F70pnHeOmW24qc= sFVJCwDPaSZsoAA4fFH3m8PBpzLigvz9U0xURyr8n3jvI38KxS5Q+cH+SjGa5fQ66xn7BAhClhe= Weugbv/ljjciHzH5Qu4MbFdcGygBdiqRiMJOIWId8c/h5YZ0lmnANvBmkcI3/+NlvsXiubE8z6y= iDo3PwR95SfqNQzkgrcykicL9OfVNqUgsCAwEAAaOCAVAwggFMMB0GA1UdDgQWBBTt3CdtYXrn4= 5x/fqKxU59wk3wCtjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjB8BgNVHSAEdTBz= MHEGBWBMAQF+MGgwZgYIKwYBBQUHAgEWWmh0dHA6Ly9pY3AtYnJhc2lsLmFjLnByb2RlbWdlLmd= vdi5ici9yZXBvc2l0b3Jpby9kcGMvYWNfcHJvZGVtZ2VfbWcvZHBjX2FjX3Byb2RlbWdlX21nLn= BkZjBrBgNVHR8EZDBiMGCgXqBchlpodHRwOi8vaWNwLWJyYXNpbC5hYy5wcm9kZW1nZS5nb3YuY= nIvcmVwb3NpdG9yaW8vbGNyL2FjX3Byb2RlbWdlX2JyL2xjcl9hY19wcm9kZW1nZV9ici5jcmww= HwYDVR0jBBgwFoAUyMgWTsRchBF6HLmDfFMdz27AI8kwDQYJKoZIhvcNAQENBQADggIBAI7GDU0= ySaT9DG+ovEd7xp4Qxw9RgypvP9qW0dLn2KPXtrSYJLFIOB+dIVp6wcAdotMXFqmdcVc0i4zkQu= 3S0MzkFCMdXmGTGjf4TbeUdUB9HGRZfyOP3FgfcX3foP3MFkI+acNAEqE7ntlngT6lowWA9B9Cb= Gim1FtgKwo8AmcI7089mFUOaYAxhqyfuWHZtLHqYW+R0vuhkObSMHjQU2EIBCC69QlmGHgLQa3P= mNuQJWDvm8h+5XD3qqjnyg8h7PlBxPtOrpVip8a2zdz3fsBMV/cq8ssbwRvwcEcfu6vpyp8kpSH= hUgVLCk7f5xfD35qlFeN9YAP8/n0vS85sqYKxUPKmm/HQQ8ALJRc32A5emksUw2snpJLeGvY/A8= fC61YLq6KonLhVBt+nqHPPykD4BRa0qJw6Dq9tHLefim22LQzRzbOFnRpFDYYJfkwNQen5f3xwU= zzx4UJsruQLR53BE8ocpeiB9+iYgmn4e+DcQKYM/HI0ha0zseX6xnDJeANg1JYbO4Jprb4cw26X= kM+NDGkIC3FM4yJ/EtufNwOykEiG9ELCpou+ay8nnNXM0MKzMLiKmPjllY8rN84k309jHACy0RA= brCMfRXW3FZlBCKEfqpwOloJzBtDA10S6tplStVYjApy785Dr1B463CC1f+aow15/FirHhUh4Gt= Cy</div></div> --00000000000081d0790598d0dbe9--