Pages

This tutorial covers the basics of the science of cryptography. It explains how programmers and network professionals can use cryptography to maintain the privacy of computer data. Starting with the origins of cryptography, it moves on to explain cryptosystems, various traditional and modern ciphers, public key encryption, data integration, message authentication, and digital signatures.

Friday, 18 October 2019

[SOLVED] java.security.cert.CertPathValidatorException: Response is unreliable: its validity interval is out-of-date

PROBLEM
when validating digital certificates using ocsp get error
java.security.cert.CertPathValidatorException: Response is unreliable: its validity interval is out-of-date
CAUSE

the time on the client and server is not appropriate ... 
SOLVED
fix the time on the client or server with the correct time
EXAMPLE

at 19 Oct 2019 00:49, the client checks OCSP to the OCSP server and the response is 👇


CSP response:
Response Status: SUCCESS
Responder ID: byKey: 86AFCABDF4F169C1AAC9D78E98F2B029E3196645
Produced: Saturday 19 October 00:30:53 WIB 2019
1 response:
SingleResponse:
CertId
Algorithm: SHA-1
issuerNameHash
0000: 9C 46 39 8F C4 67 DC C5 77 58 E9 F1 F4 11 BC F9. F9..g..wX ......
0010: 11 14 E2 0E
issuerKeyHash:
0000: 86 AF CA BD F4 F1 69 C1 AA C9 D7 8E 98 F2 B0 29 ...... i ........)
0010: E3 19 66 45
SerialNumber: [2dbc67be 3bac5c48]
CertStatus: OK
This update is Saturday October 19 00:30:53 WIB 2019



there is a time difference between client and server



0 comments:

Post a Comment