In the OCSP (Online Certificate Status Protocol), the nonce is an optional field used to prevent replay attacks by ensuring that the OCSP response corresponds to the specific OCSP request. The nonce is a randomly generated value included in the OCSP request and echoed back in the response by the OCSP server. Nonce Length in OCSP There is no strict […]
Chilkat is working on making it easy to produce B-LTA level signatures. However, it has come to our attention that some CRL’s can be large, and a server handling requests at the CRL distribution point can be very slow. For example, the CRL at http://ca.mup.gov.rs/MUPGradjaniCA4.crl is almost 25MB in size, and the server (ca.mup.gov.rs) is very slow. It takes more […]
This blog post describes the case where your application asks Chilkat to produce an LTV-enabled PDF signature by specifying “ltvOcsp” in the signing attributes, yet the signed PDF as viewed in Adobe Acrobat does not show the signature as being LTV enabled. For example, in Adobe Acrobat, an LTV enabled signature looks like this: You can see the message “Signature […]