30 Jan
2017
30 Jan
'17
10:41 p.m.
Hi Tom,
Maybe you'd like to email me those certificates and the DKDM. They don't
give away any secrets without the private key that is stored on your
machine.
All the best,
Carl
On Mon, 30 Jan 2017, Tom Haines wrote:
Yes to both
SpectiCast
Tom Haines :: Executive Director of
Digital Cinema Services
210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA
Office: 215-618-3874 | Mobile: 484-269-8227 | Skype: tom.haines41
Facebook | Twitter | Google+ | Instagram | Tumblr
On Mon, Jan 30, 2017 at 5:03 PM, Carl Hetherington <cth(a)carlh.net> wrote:
Hi Tom,
Are you importing the DCP on the same machine that you exported the
certificates from?
And you are doing "Add KDM" from the right-click menu when you get this
error?
Kind regards,
Carl
On Mon, 30 Jan 2017, Tom Haines via DCPomatic wrote:
> So, the Qube Master Pro operator was able to issue a DKDM, using an individual
export of the Root, Intermediate, and Leaf.
>
> Unfortunately now, I am receiving the following error in DCP-o-Matic when I
attempt to unlock the content.
>
> An exception occurred: Could not decrypt KDM (error:0407A079:rsa
routines:RSA_padding_check_PKCS1_OAEP:oaep decoding error).
>
> Any thoughts on this?
>
> SpectiCast
> Tom Haines :: Executive
Director of Digital Cinema Services
>
> 210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA
>
> Office: 215-618-3874 | Mobile: 484-269-8227 | Skype: tom.haines41
>
> Facebook | Twitter | Google+ | Instagram | Tumblr
>
>
> On Thu, Jan 26, 2017 at 2:23 AM, GEORGE MAZARAKIS via DCPomatic
<dcpomatic(a)carlh.net> wrote:
> If you send the cerificate chain they should be able to unchain it (
> using an utulity which comes with qube , or manually)
>
> and install the root and intermidiate certificates on windows using
mmc.exe.
>
> Then they can create DKDM for DoM using the pem cerificate
>
> George
>
>
> On 26/1/2017 1:28 πμ, dcpomatic-request(a)carlh.net wrote:
> > Send DCPomatic mailing list submissions to
> > dcpomatic(a)carlh.net
> >
> > To subscribe or unsubscribe via the World Wide Web, visit
> > http://main.carlh.net/cgi-bin/mailman/listinfo/dcpomatic
> > or, via email, send a message with subject or body 'help'
to
> > dcpomatic-request(a)carlh.net
> >
> > You can reach the person managing the list at
> > dcpomatic-owner(a)carlh.net
> >
> > When replying, please edit your Subject line so it is more specific
> > than "Re: Contents of DCPomatic digest..."
> >
> >
> > Today's Topics:
> >
> > 1. Re: Exporting a decryption certificate. (Carsten Kurz)
> > 2. Re: Exporting a decryption certificate. (Tom Haines)
> > 3. Re: Exporting a decryption certificate. (Carsten Kurz)
> > 4. Re: Exporting a decryption certificate. (Carsten Kurz)
> > 5. Re: Exporting a decryption certificate. (Tom Haines)
> >
> >
> >
----------------------------------------------------------------------
> >
> > Message: 1
> > Date: Wed, 25 Jan 2017 23:50:05 +0100
> > From: Carsten Kurz <audiovisual(a)t-online.de>
> > To: dcpomatic carlh net <DCPomatic(a)carlh.net>
> > Subject: Re: [DCP-o-matic] Exporting a decryption certificate.
> > Message-ID:
<1BA06127-14B0-43EE-A89D-A5331B0A0513(a)t-online.de>
> > Content-Type: text/plain; charset=us-ascii
> >
> >
> > Am 25.01.2017 um 23:43 schrieb Tom Haines:
> >
> >> Other way around. They are mastering the DCP, and I need to
decrypt it with DOM
> > Okay, in this case you would need to use 'Export DCP encryption
chain'. And hope that Qube Master Pro accepts DOMs root certificate/chain.
> >
> > - Carsten
> >
> >
> >
> >
> >
> > ------------------------------
> >
> > Message: 2
> > Date: Wed, 25 Jan 2017 17:59:31 -0500
> > From: Tom Haines <thaines(a)specticast.com>
> > To: Carsten Kurz <audiovisual(a)t-online.de>
> > Cc: dcpomatic carlh net <DCPomatic(a)carlh.net>
> > Subject: Re: [DCP-o-matic] Exporting a decryption certificate.
> > Message-ID:
> >
<CAAgw8C5kMZKk-JYj8gu7kDuOieBv2Nt1z4w11DcjwsvyRTpoqw(a)mail.gmail.com>
> > Content-Type: text/plain; charset="utf-8"
> >
> > I can't find 'Export DCP encryption chain', but I did
send him the result
> > from 'Export DCP decryption certificate' and that's
what caused him this
> > error. Are they the same thing, or am I missing something?
> >
> > [image: SpectiCast] <http://www.specticast.com/> Tom Haines
:: Executive
> > Director of Digital Cinema Services
> >
> > 210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA
> >
> > Office: 215-618-3874 | Mobile: 484-269-8227 | Skype: tom.haines41
> >
> > Facebook <https://www.facebook.com/SpectiCastEntertainment> |
Twitter
> > <https://twitter.com/Specticast> | Google+
> >
<https://plus.google.com/u/0/b/104757180246475600072/104757180246475600072/posts>
> > | Instagram <http://instagram.com/specticast> | Tumblr
> > <http://specticast.tumblr.com/>
> >
> > On Wed, Jan 25, 2017 at 5:50 PM, Carsten Kurz via DCPomatic <
> > dcpomatic(a)carlh.net> wrote:
> >
> >> Am 25.01.2017 um 23:43 schrieb Tom Haines:
> >>
> >>> Other way around. They are mastering the DCP, and I need to
decrypt it
> >> with DOM
> >>
> >> Okay, in this case you would need to use 'Export DCP
encryption chain'.
> >> And hope that Qube Master Pro accepts DOMs root
certificate/chain.
> >>
> >> - Carsten
> >>
> >>
> >>
> >> _______________________________________________
> >> DCPomatic mailing list
> >> DCPomatic(a)carlh.net
> >> http://main.carlh.net/cgi-bin/mailman/listinfo/dcpomatic
> >>
> >