本文介绍了数字签名中的RFC3161时间戳信息(authenticode)的处理方法,对大家解决问题具有一定的参考价值,需要的朋友们下面随着小编来一起学习吧!

问题描述

有一篇知识库文章解释了如何从Authenticode签名的可执行文件中获取信息

there is a KB article that explains How To Get Information from Authenticode Signed Executableshttps://support.microsoft.com/en-us/kb/323809

这非常有效,但是如果时间戳服务器会签符号是根据RFC3161(必须由SHA2双重签名,如下所述:
),CMSG_SIGNER_INFO中没有szOID_RSA_counterSign信息;相反,有一个记录不好的szOID_RFC3161_counterSign。

This works very well, but if the timestamp server countersignature is according to RFC3161 (necessitated by SHA2 dual signing as explained herehttp://zabkat.com/blog/code-signing-sha1-armageddon.htm ), then there is no szOID_RSA_counterSign information in CMSG_SIGNER_INFO; instead there is this poorly documented szOID_RFC3161_counterSign.

我尝试了很多东西,但我无法得到(计数器)签名者的名字或时间。 KB-323809中推荐的CryptDecodeObject(PKCS7_SIGNER_INFO)失败,错误0x8009310b(符合ASN1错误标记值)

I have tried many things but I cannot get the (counter)signer name or time off it. CryptDecodeObject(PKCS7_SIGNER_INFO) which is recommended in KB-323809 fails with error 0x8009310b (ASN1 bad tag value met)

在这种情况下如何获得配对者?

How do I get the countersigner in this situation?

谢谢

nikos

PS。请不要将这篇文章移到另一个论坛,我有一个MSDN订阅,并希望得到微软支持人员的答复,谢谢!

PS. Please do not move this post to a different forum, I have an MSDN subscription and expect an answer from somebody from microsoft support, thanks!

推荐答案


这篇关于数字签名中的RFC3161时间戳信息(authenticode)的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持!

09-03 12:36