open-eid/libdigidocpp

[Question] Signing container with test certificate

konstantinsp opened this issue · 4 comments

konstantinsp commented

Hello,

Im trying to sign container with test certificate using digidoc-tool command:

.\digidoc-tool.exe create test.asice --file="test.pdf" --mime="application/octet-stream" --pkcs12="test.p12" --pin="test" --tsurl="http://demo.sk.ee/tsa/" --loglevel=4

and im getting this error
Could not find certificate issuer '**************************' in certificate store.

How can i add my test certificate to store?
or is there any parameter in command to bypass this?

metsma commented

It depends of the certificate type. If it is issued by SK ID solutions there is option use test TSL lists.
https://github.com/open-eid/libdigidocpp/wiki/Using-test-TSL-lists.
If it is self issued you may need to create own TSL lists.
There is option also create only signature without validate. The signing certificate should have AIA extension and then point to correct issuer certifiate and OCSP URL

konstantinsp commented

It is a Swedbank Gateway Test certificate. as i can see it is issued by them.
Is there any guide on TSL list creation?

metsma commented

' The signing certificate should have AIA extension and then point to correct issuer certifiate and OCSP URL
Seems like a2fea2d is not released
Can you build libdigidocpp from master or use github actions artifacts

.\digidoc-tool.exe create test.asice --file="test.pdf" --mime="application/octet-stream" --pkcs12="test.p12" --pin="test" --tsurl="http://demo.sk.ee/tsa/" --loglevel=4 --dontValidate
kristelmerilain commented

Closing due inactivity, reopen if needed.