TRUSTED TSA

Start integrating Trusted TSA

Quick start, SDKs, RFC 3161 profiles and conformance testing.

1. Create hashSHA-256/SHA-3 per profile

LOCAL

2. TimeStampReqCMS request, nonce and Policy OID

RFC 3161

3. Send requestStandard content type

HTTP

4. TimeStampRespTSA-signed token

CMS

5. VerifyHash, signature, chain, OCSP/CRL

VERIFY

OpenSSL + cURL

# 1. Create the message imprint request
openssl ts -query -data document.pdf -sha256 -cert -out request.tsq

# 2. Send RFC 3161 request
curl --fail --silent --show-error --max-time 15 \
  -H "Content-Type: application/timestamp-query" \
  --data-binary @request.tsq \
  https://sandbox.example.invalid/rfc3161 -o response.tsr

# 3. Inspect the response
openssl ts -reply -in response.tsr -text

# 4. Verify against the original file and TSA chain
openssl ts -verify -data document.pdf -in response.tsr -CAfile tsa-chain.pem

OpenSSL + cURL

Create .tsq, send request, receive .tsr and verify.

Java / .NET

Integration template with timeout, retry and certificate verification.

Node.js / Python / Go / PHP

SDK roadmap and example request/response.