Skip to content
← Acrobat for Windows and Mac

Feature request / Bug report

Acrobat for Windows and Mac: Security & Digital signatures

Categories

JUMP TO ANOTHER FORUM

(thinking…)

[BUG] dgn.de eIDAS certificate not verifying correctly

Certificates issued by dgn.de fail to verifiy even though they're eIDAS compliant. It seems that the certificate which is used to sign the OCSP response is not in the known list (which it should be as it is also an eIDAS certificate). For OCSP the certificate is used: dgnservice qOCSP 23:PN.
The company has also discovered the issue.

5 votes

We're glad you're here

Please sign in to leave feedback
Signed in as (Sign out)
Close
Close

We’ll send you updates on this idea

Nico shared this idea  ·   ·  Report…  ·  Admin →
How important is this to you?

We're glad you're here

Please sign in to leave feedback
Signed in as (Sign out)
Close
Close

We're glad you're here

Please sign in to leave feedback
Signed in as (Sign out)
Close
Close
Submitting...
An error occurred while saving the comment
  • Stefan commented  ·   ·  Report

    I cannot use the certificate I bought, because Adobe Reader's failure to verify correctly confuses the recipients.

  • Max commented  ·   ·  Report

    Is there any update on when you plan to resolve this bug? It is quite annoying because most customers of course use Acrobat Reader, particularly as it seems to me like an easy-resolvable configuration issue at Adobe's side. A digital signature (of DGN) that cannot be validated is quite useless. At this time, March 2022, the bug still exists.

  • Stefan commented  ·   ·  Report


    Same problem here. "dgnservice Root 11:PN" is in the trust store, which is the root of both, "dgnservice qCA 12:PN" and "dgnservice qOCSP 23:PN". It *should* validate, although is doesn't and raises an error: "Unterschrift der OCSP-Antwort ist ungültig" (Signature of OCSP-Response is invalid).

    It looks like a problem with the OCSP implementation as other tools (eg. openssl) can validate that successfully.