Re: CRL verification problem

I can't actually decoded the CRL data, it appears to be truncated.

Usually this would mean the signature on the CRL is invalid - given that
it passes with 1.46 it's probably because the signature has not been
created on properly encoded DER data.

Regards,

David

On 4/12/19 5:27 am, Luiz Henrique wrote:
> Hi, i am getting this error "java.security.SignatureException: CRL
> does not verify with supplied public key."
> when i try to verify if CRL is issued by the CA. But, if i use SUN
> provider or even BouncyCastle provider version 1.46 the verification
> return sucess.
>
> Can someone tell me if the error is related with BC? I am using latest
> version 1.64
>
>
> -------------------------------------------------
> CRL:
> MIISODCCECACAQEwDQYJKoZIhvcNAQENBQAwVDELMAkGA1UEBhMCQlIxEzARBgNVBAoTCkl=
DUC1CcmFzaWwxFzAVBgNVBAsTDkFDIFByb2RlbWdlIEJSMRcwFQYDVQQDEw5BQyBQcm9kZW1n=
ZSBNRxcNMTkxMjAzMTAyODA5WhcNMTkxMjAzMTYyODA5WjCCDuAwEgIBARcNMTgxMDA0MTM1M=
zM4WjASAgENFw0xODEwMTgxODI0MzJaMBICARUXDTE4MTAyNDE4NDcyNFowEgIBSRcNMTgxMT=
A3MTMyNTMxWjATAgIAshcNMTgxMTIxMTEwNTE1WjATAgIAxRcNMTgxMTIxMTIyNDA1WjATAgI=
A1hcNMTgxMTIyMTcyNzEwWjATAgIAphcNMTgxMTI3MTg1NTUxWjATAgIBJRcNMTgxMjAzMTIy=
NjU3WjATAgIBMhcNMTgxMjA0MjIwOTMyWjATAgIBmBcNMTgxMjE3MTU1OTE1WjATAgIBlxcNM=
TgxMjE3MTg0NjQ2WjATAgIBnhcNMTgxMjE4MTIwNzIzWjATAgIBkxcNMTgxMjE4MTUzODE0Wj=
ATAgIBnxcNMTgxMjE4MTU0OTMyWjATAgIBohcNMTgxMjE4MTY0MzM1WjATAgIBuhcNMTgxMjI=
wMTg0ODM1WjATAgIBuRcNMTgxMjIwMTg1NDA3WjATAgIByhcNMTgxMjI3MTEyNzAxWjATAgIB=
qRcNMTkwMTAyMTczNjA1WjATAgIB4xcNMTkwMTAzMTIzOTUxWjATAgIB6BcNMTkwMTAzMTcyM=
zE5WjATAgICLRcNMTkwMTE4MTcwNzEwWjATAgICMRcNMTkwMTIxMTA1OTA1WjATAgICORcNMT=
kwMTIxMTMyMjQxWjATAgICUBcNMTkwMTIyMTYzMjQyWjATAgICkBcNMTkwMTMwMTMwODE2WjA=
TAgIClBcNMTkwMTMwMTMxMDQ4WjATAgICohcNMTkwMTMwMjE1MzAwWjATAgICoxcNMTkwMTMw=
MjIzNTIwWjATAgICpRcNMTkwMTMxMTEyMDA4WjATAgICvRcNMTkwMjAxMTEzMTMyWjATAgIC1=
xcNMTkwMjAxMjExMDA2WjATAgIC2BcNMTkwMjAxMjIyODMwWjATAgIC2RcNMTkwMjA0MTA0MT=
I3WjATAgIC7hcNMTkwMjA0MTQ1OTU5WjATAgIDMBcNMTkwMjA3MDk1MjI5WjATAgIDFxcNMTk=
wMjA3MTIzMzU1WjATAgIDNxcNMTkwMjA3MTY1NzU4WjATAgIDPxcNMTkwMjA4MTAyNDAzWjAT=
AgIDVhcNMTkwMjA4MTcwOTAyWjATAgIDZBcNMTkwMjExMTExMjU4WjATAgIDaBcNMTkwMjExM=
TIxNjM4WjATAgIDchcNMTkwMjExMTcwMjE2WjATAgIBsRcNMTkwMjExMTczNjM5WjATAgIDdx=
cNMTkwMjEyMTAyODM3WjATAgICuhcNMTkwMjEyMTc0MTA5WjATAgIDkxcNMTkwMjEzMTAyMjE=
zWjATAgICrRcNMTkwMjEzMTIxMTE3WjATAgIDvRcNMTkwMjEzMjA0MTQ5WjATAgIDuxcNMTkw=
MjEzMjA0MjU5WjATAgIDvxcNMTkwMjE0MTA0MzI5WjATAgIDwBcNMTkwMjE0MTA0OTI4WjATA=
gIBOhcNMTkwMjE0MTMwNzQxWjASAgEvFw0xOTAyMTQxMzA5MDNaMBMCAgPFFw0xOTAyMTUxMz=
Q3MjhaMBMCAgO
>
>
> CA certificate:
> MIIGkjCCBHqgAwIBAgIBATANBgkqhkiG9w0BAQ0FADBxMQswCQYDVQQGEwJCUjETMBEGA1U=
ECgwKSUNQLUJyYXNpbDE0MDIGA1UECwwrQXV0b3JpZGFkZSBDZXJ0aWZpY2Fkb3JhIFJhaXog=
QnJhc2lsZWlyYSB2NTEXMBUGA1UEAwwOQUMgUHJvZGVtZ2UgQlIwHhcNMTgwODMxMTUyMDMzW=
hcNMjkwMzAxMTUyMDMzWjBUMQswCQYDVQQGEwJCUjETMBEGA1UEChMKSUNQLUJyYXNpbDEXMB=
UGA1UECxMOQUMgUHJvZGVtZ2UgQlIxFzAVBgNVBAMTDkFDIFByb2RlbWdlIE1HMIICIjANBgk=
qhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApWGLOCwpZr3PpyxVMR6x+os6/i3v2FOgEh8/8/bf=
Ukv7qrIAfuy0Bqre/F+ZVVAnySqXObEMpQAtovqgLBEzzv1dcPyd6FLjHCqyuPNzRQLACAtEZ=
J/UA7pyKDiDspGwS0FyEYfMbxC7U0nuQnliJmANPJuc6SrAnnWBT7aimDI1ztxoJfCclLVPZI=
/gft5uKK06p3wnsJvTZDYivvr45Vmf9715e0lvaad70qdE9YJZjQS0QWESI5iMwlTc+nx/Tpn=
7JmEwkNxS1K2n8EA6NxahnYQAjmNMrlnKkCd8nWi9WxE66ZSsspVyf+lNJlSnLX9hgRpiA5Vs=
RafHSP3/vWNQaDpyaax88PIBfHilBMfSErFIEywREcZnrv5egdGD8AO+EDLjW0m8pBrK2Qxak=
6NAM6ezMdpAwY2Uwp4z9fpuS3iIlFJSOCgS2MMBD8J2kplc71kM8EH8Mz4N2ji1SCLoG3NcqP=
D+GMIxE4F70pnHeOmW24qcsFVJCwDPaSZsoAA4fFH3m8PBpzLigvz9U0xURyr8n3jvI38KxS5=
Q+cH+SjGa5fQ66xn7BAhClheWeugbv/ljjciHzH5Qu4MbFdcGygBdiqRiMJOIWId8c/h5YZ0l=
mnANvBmkcI3/+NlvsXiubE8z6yiDo3PwR95SfqNQzkgrcykicL9OfVNqUgsCAwEAAaOCAVAwg=
gFMMB0GA1UdDgQWBBTt3CdtYXrn45x/fqKxU59wk3wCtjAPBgNVHRMBAf8EBTADAQH/MA4GA1=
UdDwEB/wQEAwIBBjB8BgNVHSAEdTBzMHEGBWBMAQF+MGgwZgYIKwYBBQUHAgEWWmh0dHA6Ly9=
pY3AtYnJhc2lsLmFjLnByb2RlbWdlLmdvdi5ici9yZXBvc2l0b3Jpby9kcGMvYWNfcHJvZGVt=
Z2VfbWcvZHBjX2FjX3Byb2RlbWdlX21nLnBkZjBrBgNVHR8EZDBiMGCgXqBchlpodHRwOi8va=
WNwLWJyYXNpbC5hYy5wcm9kZW1nZS5nb3YuYnIvcmVwb3NpdG9yaW8vbGNyL2FjX3Byb2RlbW=
dlX2JyL2xjcl9hY19wcm9kZW1nZV9ici5jcmwwHwYDVR0jBBgwFoAUyMgWTsRchBF6HLmDfFM=
dz27AI8kwDQYJKoZIhvcNAQENBQADggIBAI7GDU0ySaT9DG+ovEd7xp4Qxw9RgypvP9qW0dLn=
2KPXtrSYJLFIOB+dIVp6wcAdotMXFqmdcVc0i4zkQu3S0MzkFCMdXmGTGjf4TbeUdUB9HGRZf=
yOP3FgfcX3foP3MFkI+acNAEqE7ntlngT6lowWA9B9CbGim1FtgKwo8AmcI7089mFUOaYAxhq=
yfuWHZtLHqYW+R0vuhkObSMHjQU2EIBCC69QlmGHgLQa3PmNuQJWDvm8h+5XD3qqjnyg8h7Pl=
BxPtOrpVip8a2zdz3fsBMV/cq8ssbwRvwcEcfu6vpyp8kpSHhUgVLCk7f5xfD35qlFeN9YAP8=
/n0vS85sqYKxUPKmm/HQQ8ALJRc32A5emksUw2snpJLeGvY/A8fC61YLq6KonLhVBt+nqHPPy=
kD4BRa0qJw6Dq9tHLefim22LQzRzbOFnRpFDYYJfkwNQen5f3xwUzzx4UJsruQLR53BE8ocpe=
iB9+iYgmn4e+DcQKYM/HI0ha0zseX6xnDJeANg1JYbO4Jprb4cw26XkM+NDGkIC3FM4yJ/Etu=
fNwOykEiG9ELCpou+ay8nnNXM0MKzMLiKmPjllY8rN84k309jHACy0RAbrCMfRXW3FZlBCKEf=
qpwOloJzBtDA10S6tplStVYjApy785Dr1B463CC1f+aow15/FirHhUh4GtCy