e-İmza Teknolojileri Test Suit _{e-Signature Technologies Test Suite}

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

====== Timestamp ======

The timestamp (TS) refers to the record verified by the TSP with the electronic signature to determine when an electronic data is generated, modified, sent, received and/or recorded. Its purpose is proof of time.


The signature timestamp used in the signature specifies the signature creation date and it is mandatory for long-term digital signatures. For this reason, the applications that create a signature with a timestamp (at least ES-T) must check the timestamp validity during the signing process. These checks should include not only the validity controls of the timestamp token but also the validity controls of the timestamp certificate that signed the token. This process is called the **timestamp validation process**.


The timestamp validation process basically involves the following steps: 

  * The signature of the timestamp token is validated.
  * The timestamp certificate is validated.
  * The hash value that is sent to the timestamp server and the hash value in the timestamp token received from the timestamp server is compared.


This section describes the access information and positive and negative test scenarios of the timestamp servers created for Test Suite. The purpose is that the signature creation application developers and users can test the compliance of timestamp validation mechanisms with the international standards using this test package.


===== Timestamping Tests =====

The certificates of timestamp servers used in the tests and the specifications of the timestamp tokens produced by the servers are given in the table below. In order to perform the timestamp preliminary controls, the timestamp server settings in the table are set in the application then it is attempted to create a signature. If there is an error on the timestamp server, it is expected that the signature creation fails and the error is reported to the user.


Revocation controls of the timestamp server certificates shall be made through Certificate Revocation Lists issued by the TSP root certificate which is the issuer of the timestamp server certificate.


//**Note:** For all test timestamp servers, the username is “1” and the password is “12345678”.//


^**TS Certificate**^**Access Information of TS **^**TS Specification** ^
|**TSA1.crt** |http://zdsA1.test3.kamusm.gov.tr|Valid| 
|**TSA2.crt** |http://zdsA2.test3.kamusm.gov.tr|Timestamp Token’s Signature Forged| 
|**TSA3.crt** |http://zdsA3.test3.kamusm.gov.tr|Expired TS Certificate| 
|**TSA4.crt** |http://zdsA4.test3.kamusm.gov.tr|TS Certificate’s Signature Forged| 
|**TSA5.crt** |http://zdsA5.test3.kamusm.gov.tr|Revoked TS Certificate| 
|**TSB.crt** |http://zdsB.test3.kamusm.gov.tr| TS Root Certificate’s Signature Forged | 
|**TSC1.crt** |http://zdsC1.test3.kamusm.gov.tr|Valid | 
|**TSC2.crt** |http://zdsC2.test3.kamusm.gov.tr|Expired CRL used for TS Certificate Revocation Check| 
|**TSC3.crt** |http://zdsC3.test3.kamusm.gov.tr|Signature of CRL, used for TS Certificate Revocation Check, Forged|
|**TSD.crt** |http://zdsD.test3.kamusm.gov.tr|Valid (EC384 signing key) |

e-İmza Teknolojileri Test Suit e-Signature Technologies Test Suite

User Tools

Site Tools

Page Tools

e-İmza Teknolojileri Test Suit _{e-Signature Technologies Test Suite}