https://github.com/makew0rld/rfcts

Bash scripts for RFC 3161 trusted timestamping
https://github.com/makew0rld/rfcts

Last synced: 9 days ago
JSON representation

Bash scripts for RFC 3161 trusted timestamping

• Host: GitHub
• URL: https://github.com/makew0rld/rfcts
• Owner: makew0rld
• License: unlicense
• Created: 2023-09-07T04:16:46.000Z (over 1 year ago)
• Default Branch: main
• Last Pushed: 2023-10-01T04:25:40.000Z (about 1 year ago)
• Last Synced: 2024-10-26T22:25:52.673Z (about 2 months ago)
• Language: Shell
• Size: 3.91 KB
• Stars: 2
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# rfcts

This repo contains of couple of Bash scripts for creating and verifying [RFC 3161](https://datatracker.ietf.org/doc/html/rfc3161) timestamps. You can learn more about trusted timestamping and the context for this repo in my [blog post](https://makeworld.space/2023/09/time_for_timestamping.html).

General usage:

```

$ ./rfcts

help: ./rfcts [-s/--server URL] [-o/--out FILE.TSR]

$ ./rfcts myfile.jpg

Using configuration from /etc/ssl/openssl.cnf

Created myfile.jpg.tsr

$ ./rfcts-verify

help: ./rfcts-verify DATA_FILE TSR_FILE

$ ./rfcts-verify myfile.jpg myfile.jpg.tsr

Verification: OK

Time stamp: Sep  7 04:00:48 2023 GMT

$ ./rfcts-verify myfile.jpg bad.tsr

Verification: FAILED

```

Using data from stdin:

```

$ echo -n 'some data' | rfcts -o /tmp/test.tsr /dev/stdin

Using configuration from /etc/ssl/openssl.cnf

Created /tmp/test.tsr

$ echo -n 'some data' | rfcts-verify /dev/stdin /tmp/test.tsr

Verification: OK

Time stamp: Oct  1 04:20:48 2023 GMT

```

The default timestamp authority is [DigiCert](https://knowledge.digicert.com/generalinformation/INFO4231.html), as they are a reputable and established organization.

By default the verify script uses the system trust store for root certs. This will not work for timestamp authorities that don't sign using CA-signed certs, such as freeTSA.org.

## License

Public domain, using the Unlicense. See [LICENSE](./LICENSE) for details.