help please!

122 views
Skip to first unread message

csale...@gmail.com

unread,
Apr 13, 2018, 7:38:45 AM4/13/18
to certificate-transparency
Hi all,

I have a configured standalone ct-server running. When I try to upload a signed precert I got the following error:

#../ct/certificate-transparency/cpp/client/ct upload ${CT_CLIENT_OPTS} --ct_server_submission=sample-precert.pem --ct_server_response_out=sct-pre-cert.proof --precert=true --logtostderr=true

I0413 13:28:03.315965 14348 init.cc:71] Build version: f5f9c2cc4f6320882dfc9f351255399dc277af64-dirty
I0413 13:28:03.316176 14348 init.cc:73] Binary built with hardening enabled.
I0413 13:28:03.316352 14348 ct.cc:325] Uploading certificate submission from sample-precert.pem
I0413 13:28:03.316377 14348 ct.cc:326] sample-precert.pem is 5775 bytes.
I0413 13:28:03.317138 14348 thread_pool.cc:146] ThreadPool starting with 4 threads
W0413 13:28:03.318158 14348 connection_pool.cc:261] Setting client minimum TLS protocol to tlsv12
I0413 13:28:03.318279 14348 connection_pool.cc:293] Loading openssl default trusted root certificates...
E0413 13:28:03.325181 14348 ct.cc:265] Verifier returned 'Invalid signature.' (4)
F0413 13:28:03.325286 14348 ct.cc:343] Check failed: CheckSCT(sct.ValueOrDie(), chain, &ct_data)
*** Check failure stack trace: ***
    @     0x558d527361dd  google::LogMessage::Fail()
    @     0x558d52735594  google::LogMessage::SendToLog()
    @     0x558d52735ea2  google::LogMessage::Flush()
    @     0x558d527395f8  google::LogMessageFatal::~LogMessageFatal()
    @     0x558d523b5baf  Upload()
    @     0x558d523bbbed  main
    @     0x7f81e2cdc830  __libc_start_main
    @     0x558d5239ba59  _start
    @              (nil)  (unknown)
Aborted (core dumped)

Any help are wellcome.

Thank you

csale...@gmail.com

unread,
Apr 18, 2018, 8:04:38 AM4/18/18
to certificate-transparency
By the way if I send with curl

 curl -v -d "@ct_precert.json" http://localhost:6962/ct/v1/add-pre-chain > ct_precert.resp

I got a valid response:

{
   "timestamp" : 1524050734816,
   "extensions" : "",
   "sct_version" : 0,
   "id" : "c/Aeof+ZlSf0qH8BriHDBop85+YyHkNy9CKSfIPyzkw=",
   "signature" : "BAMARjBEAiBLbXf9MiRtC1CHsSRhrDTxAC2ft+GF3Q6LS1usR9dHlwIgd1sSsQR5jpYCG6kcZclaIAhD6AGJLkS4/dIAmtqWRAk="

Ronald Chapman

unread,
Jun 23, 2018, 2:49:11 AM6/23/18
to certificate-transparency
Double line error prpbley language barrier change it to c++ and then to java and back to xml and run it
Reply all
Reply to author
Forward
0 new messages