The timestamp (TS) refers to the record verified by the TSP with the electronic signature to determine when an electronic data is generated, modified, sent, received and/or recorded. Its purpose is proof of time.
The signature timestamp used in the signature specifies the signature creation date and it is mandatory for long-term digital signatures. For this reason, the applications that create a signature with a timestamp (at least ES-T) must check the timestamp validity during the signing process. These checks should include not only the validity controls of the timestamp token but also the validity controls of the timestamp certificate that signed the token. This process is called the timestamp validation process.
The timestamp validation process basically involves the following steps:
This section describes the access information and positive and negative test scenarios of the timestamp servers created for Test Suite. The purpose is that the signature creation application developers and users can test the compliance of timestamp validation mechanisms with the international standards using this test package.
The certificates of timestamp servers used in the tests and the specifications of the timestamp tokens produced by the servers are given in the table below. In order to perform the timestamp preliminary controls, the timestamp server settings in the table are set in the application then it is attempted to create a signature. If there is an error on the timestamp server, it is expected that the signature creation fails and the error is reported to the user.
Revocation controls of the timestamp server certificates shall be made through Certificate Revocation Lists issued by the TSP root certificate which is the issuer of the timestamp server certificate.
Note: For all test timestamp servers, the username is “1” and the password is “12345678”.
TS Certificate | Access Information of TS | TS Specification |
---|---|---|
TSA1.crt | http://zdsA1.test3.kamusm.gov.tr | Valid |
TSA2.crt | http://zdsA2.test3.kamusm.gov.tr | Timestamp Token’s Signature Forged |
TSA3.crt | http://zdsA3.test3.kamusm.gov.tr | Expired TS Certificate |
TSA4.crt | http://zdsA4.test3.kamusm.gov.tr | TS Certificate’s Signature Forged |
TSA5.crt | http://zdsA5.test3.kamusm.gov.tr | Revoked TS Certificate |
TSB.crt | http://zdsB.test3.kamusm.gov.tr | TS Root Certificate’s Signature Forged |
TSC1.crt | http://zdsC1.test3.kamusm.gov.tr | Valid |
TSC2.crt | http://zdsC2.test3.kamusm.gov.tr | Expired CRL used for TS Certificate Revocation Check |
TSC3.crt | http://zdsC3.test3.kamusm.gov.tr | Signature of CRL, used for TS Certificate Revocation Check, Forged |
TSD.crt | http://zdsD.test3.kamusm.gov.tr | Valid (EC384 signing key) |