Timeline for Check signature when next CRL will be published after end of validity of certificate
Current License: CC BY-SA 3.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 14, 2015 at 15:07 | comment | added | Mumbar | First signature was created and then certificate expired. That is clear from my question. But that is not enough to be sure that signature is valid. You have to be sure that certificate was not revocated in time of signature creation (and for that you can use CRL list or OCSP - in my case only CRL is possible). Suppose that certificate was revocated just before signature creation. In this case signature is not valid! But how can I find out that certificate was revocated when it expires before next CRL is released? | |
| Jan 14, 2015 at 14:33 | comment | added | crypto-learner | Compare the expiration date of certificate, if it was valid at signature time, you got your answer ! You don't have to "wait" until next CRL. | |
| Jan 14, 2015 at 13:56 | comment | added | Mumbar | How it will help me to determine whether certificate was valid at time of signature? | |
| Jan 14, 2015 at 12:38 | comment | added | crypto-learner | Have a look at the signature date ! | |
| Jan 14, 2015 at 10:49 | comment | added | Mumbar | "The real issue is: is the certificate of the signer valid at the time of signature?" - Yes, exactly. But I don´t see how can I answer this question. | |
| Jan 12, 2015 at 22:07 | history | answered | crypto-learner | CC BY-SA 3.0 |