28 Oct
2016
28 Oct
'16
1:55 p.m.
Hi all.
Apologies that this is a bit of a "noob" question and not actually
related to DCP-o-matic, but Google is not my friend today it seems, and
I'm sure someone here know the answer.
I'm co-ordinating delivery of an encrypted DCP feature made by someone
else to a cinema. The filmmakers need the server cert to make a KDM. The
only information the cinema has been able to give me is "Doremi DCP-2K4
serial no. <six digit number>".
Is there any online database to look up the server cert from the serial
number? I really hope that this information is not proprietary. The clue
that it shouldn't be is the word "public" in "public key
cryptography"!
Many thanks,
Jim
28 Oct
28 Oct
2:12 p.m.
Am 28.10.2016 um 15:55 schrieb Jim Dummett via DCPomatic:
I'm co-ordinating delivery of an encrypted DCP
feature made by someone else to a cinema. The filmmakers need the server cert to make a
KDM. The only information the cinema has been able to give me is "Doremi DCP-2K4
serial no. <six digit number>".
Is there any online database to look up the server cert from the serial number? I really
hope that this information is not proprietary. The clue that it shouldn't be is the
word "public" in "public key cryptography"!
Hi Jim,
you have two options - have DOM download the certificate from within the Make KDM ->
add/edit cinema->add/edit screen ->Download database window, or download it manually
from http://www.dolbycustomer.com/cinema/Certificates . Both will simply need that six
digit number.
In general, I prefer the hard manual way to do things, but as a matter of fact, if you
download from that site, you will receive a ZIP file with many different certs for various
reasons and applications. While the automatic download in DCP-o-matic will choose just the
right one for creating a KDM for that server, so, just do that!
This of course only applies if those filmmakers are using DCP-o-matic. If not, they need
to download the certs from the mentioned site and choose either the
xxx.cert.sha256.pem or xxx.chain.sha256.pem (which one depends on their KDM management
system/software, in general, the xxx.cert256.pem is sufficient technically)
- Carsten
14 Nov
14 Nov
1:30 a.m.
Very belatedly, just want to say enormous thanks to you Carsten for this
info and the full explanation. Really appreciate your help in my hour of
need.
By the way, is there a list anywhere of the websites to download certs
from all the main manufacturers?
Jim
On 28/10/2016 15:12, Carsten Kurz via DCPomatic wrote:
Am 28.10.2016 um 15:55 schrieb Jim Dummett via
DCPomatic:
I'm co-ordinating delivery of an encrypted
DCP feature made by someone else to a cinema. The filmmakers need the server cert to make
a KDM. The only information the cinema has been able to give me is "Doremi DCP-2K4
serial no. <six digit number>".
Is there any online database to look up the server cert from the serial number? I really
hope that this information is not proprietary. The clue that it shouldn't be is the
word "public" in "public key cryptography"!
Hi Jim,
you have two options - have DOM download the certificate from within the Make KDM ->
add/edit cinema->add/edit screen ->Download database window, or download it manually
from http://www.dolbycustomer.com/cinema/Certificates . Both will simply need that six
digit number.
In general, I prefer the hard manual way to do things, but as a matter of fact, if you
download from that site, you will receive a ZIP file with many different certs for various
reasons and applications. While the automatic download in DCP-o-matic will choose just the
right one for creating a KDM for that server, so, just do that!
This of course only applies if those filmmakers are using DCP-o-matic. If not, they need
to download the certs from the mentioned site and choose either the
xxx.cert.sha256.pem or xxx.chain.sha256.pem (which one depends on their KDM management
system/software, in general, the xxx.cert256.pem is sufficient technically)
- Carsten
_______________________________________________
DCPomatic mailing list
DCPomatic(a)carlh.net
http://main.carlh.net/cgi-bin/mailman/listinfo/dcpomatic
2:49 a.m.
Am 14.11.2016 um 02:30 schrieb Jim Dummett:
Very belatedly, just want to say enormous thanks to
you Carsten for this info and the full explanation. Really appreciate your help in my hour
of need.
By the way, is there a list anywhere of the websites to download certs from all the main
manufacturers?
Hi Jim,
unfortunately, not all manufacturers are so open with this as Dolby is (now). The Dolby
site works for Doremi and Dolby DSS servers.
Other manufacturers will react to individual inquiries.
- Carsten
9:14 a.m.
Hi,
You'll find all the GDC certificates here:
ftp.gdc-tech.com
pubgdccert
20pub14lish
Lilian
Le 14/11/2016 03:49, Carsten Kurz via DCPomatic a écrit :
Am 14.11.2016 um 02:30 schrieb Jim Dummett:
Very belatedly, just want to say enormous thanks
to you Carsten for
this info and the full explanation. Really appreciate your help in my
hour of need.
By the way, is there a list anywhere of the websites to download
certs from all the main manufacturers?
Hi Jim,
unfortunately, not all manufacturers are so open with this as Dolby is
(now). The Dolby site works for Doremi and Dolby DSS servers.
Other manufacturers will react to individual inquiries.
- Carsten
_______________________________________________
DCPomatic mailing list
DCPomatic(a)carlh.net
http://main.carlh.net/cgi-bin/mailman/listinfo/dcpomatic
3087
days inactive
3104
days old
4 comments
3 participants
participants (3)
-
Carsten Kurz -
Jim Dummett -
lilian lefranc