[Cryptopro] How to check the signature on the server?

Question

linux

Hey Habr!
I'm trying to check the ecp on the server.

/opt/cprocsp/bin/amd64/cryptcp -nochain -vsignf -mroot test.txt

Test.txt contains "Hello world" and test.txt.sgn contains the decoded base64 signature from the example page . Finally he writes:

CryptCP 4.0 (c) "Crypto-Pro", 2002-2017.
Command prompt Utility for file signature and encryption.

Certificates found: 3
Folder './':
test.txt... Signature verifying...     
    
Signer: RU, tests, etst, test, test, Максим, m***@****.com
Skipping the signature due to signer certificate is not in certificate criterion.
Error: Signature.
/dailybuildsbranches/CSP_4_0/CSPbuild/CSP/samples/CPCrypt/DSign.cpp:851: 0x200001F9
[ErrorCode: 0x200001f9]

What does he need then? The brain is blown, there is silence on the cryptopro forum. Work is not moving...

Answer 1

Downloaded the javascript.
I excluded the processing of binary data and base64 on the client side (I don’t know who messes up, but I suspect that it’s either for base64, since the hashes on the server and client of the same data are strikingly different, it’s a pity native encoding only works with donkey 10 ...), I give it back with server immediately ready base64 hash.
And, lo and behold, the hurdy-gurdy started up.

Answer 2

You don't have a certificate search criteria.
Try:
cryptcp -dn test -nochain -vsignf -mroot test.txt