26 Jan
2017
26 Jan
'17
7:23 a.m.
If you send the cerificate chain they should be able to unchain it (
using an utulity which comes with qube , or manually)
and install the root and intermidiate certificates on windows using mmc.exe.
Then they can create DKDM for DoM using the pem cerificate
George
On 26/1/2017 1:28 πμ, dcpomatic-request(a)carlh.net wrote:
Send DCPomatic mailing list submissions to
dcpomatic(a)carlh.net
To subscribe or unsubscribe via the World Wide Web, visit
http://main.carlh.net/cgi-bin/mailman/listinfo/dcpomatic
or, via email, send a message with subject or body 'help' to
dcpomatic-request(a)carlh.net
You can reach the person managing the list at
dcpomatic-owner(a)carlh.net
When replying, please edit your Subject line so it is more specific
than "Re: Contents of DCPomatic digest..."
Today's Topics:
1. Re: Exporting a decryption certificate. (Carsten Kurz)
2. Re: Exporting a decryption certificate. (Tom Haines)
3. Re: Exporting a decryption certificate. (Carsten Kurz)
4. Re: Exporting a decryption certificate. (Carsten Kurz)
5. Re: Exporting a decryption certificate. (Tom Haines)
----------------------------------------------------------------------
Message: 1
Date: Wed, 25 Jan 2017 23:50:05 +0100
From: Carsten Kurz <audiovisual(a)t-online.de>
To: dcpomatic carlh net <DCPomatic(a)carlh.net>
Subject: Re: [DCP-o-matic] Exporting a decryption certificate.
Message-ID: <1BA06127-14B0-43EE-A89D-A5331B0A0513(a)t-online.de>
Content-Type: text/plain; charset=us-ascii
Am 25.01.2017 um 23:43 schrieb Tom Haines:
Other way around. They are mastering the DCP, and
I need to decrypt it with DOM
Okay, in this case you would need to use 'Export DCP encryption chain'.
And hope that Qube Master Pro accepts DOMs root certificate/chain.
- Carsten
------------------------------
Message: 2
Date: Wed, 25 Jan 2017 17:59:31 -0500
From: Tom Haines <thaines(a)specticast.com>
To: Carsten Kurz <audiovisual(a)t-online.de>
Cc: dcpomatic carlh net <DCPomatic(a)carlh.net>
Subject: Re: [DCP-o-matic] Exporting a decryption certificate.
Message-ID:
<CAAgw8C5kMZKk-JYj8gu7kDuOieBv2Nt1z4w11DcjwsvyRTpoqw(a)mail.gmail.com>
Content-Type: text/plain; charset="utf-8"
I can't find 'Export DCP encryption chain', but I did send him the result
from 'Export DCP decryption certificate' and that's what caused him this
error. Are they the same thing, or am I missing something?
[image: SpectiCast] <http://www.specticast.com/> Tom Haines :: Executive
Director of Digital Cinema Services
210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA
Office: 215-618-3874 | Mobile: 484-269-8227 | Skype: tom.haines41
Facebook <https://www.facebook.com/SpectiCastEntertainment> | Twitter
<https://twitter.com/Specticast> | Google+
<https://plus.google.com/u/0/b/104757180246475600072/104757180246475600072/posts>
| Instagram <http://instagram.com/specticast> | Tumblr
<http://specticast.tumblr.com/>
On Wed, Jan 25, 2017 at 5:50 PM, Carsten Kurz via DCPomatic <
dcpomatic(a)carlh.net> wrote:
Am 25.01.2017 um 23:43 schrieb Tom Haines:
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://main.carlh.net/pipermail/dcpomatic/attachments/20170125/e9ec58e0/attachment-0001.html>
------------------------------
Message: 3
Date: Thu, 26 Jan 2017 00:15:14 +0100
From: Carsten Kurz <audiovisual(a)t-online.de>
To: dcpomatic net carlh <DCPomatic(a)carlh.net>
Subject: Re: [DCP-o-matic] Exporting a decryption certificate.
Message-ID: <EF1E26B1-177A-47B8-9AF7-867A33A6A469(a)t-online.de>
Content-Type: text/plain; charset=us-ascii
Am 25.01.2017 um 23:59 schrieb Tom Haines:
Other way around. They are mastering the DCP, and
I need to decrypt it
with DOM
Okay, in this case you would need to use 'Export DCP encryption chain'.
And hope that Qube Master Pro accepts DOMs root certificate/chain.
- Carsten
_______________________________________________
DCPomatic mailing list
DCPomatic(a)carlh.net
http://main.carlh.net/cgi-bin/mailman/listinfo/dcpomatic
I can't find 'Export DCP encryption
chain', but I did send him the result from 'Export DCP decryption certificate'
and that's what caused him this error. Are they the same thing, or am I missing
something?
Ooops.
In my Preferences - Keys I have three options at the bottom of the dialog:
Re_Make certificates and key
Export DCP decryption certificate...
Export DCP decryption chain...
Ooops, it seems that button is indeed not there in 2.9... maybe upgrade to 2.10.2 or
2.10.6?
'Export Decryption certificate' will only export the leaf certificate of your DOM
installation. Technically, the leaf is sufficient to create KDMs/DKDMs, but some software
may require a full certificate chain, which is what the error message you posted seems to
signal.
Qube Master Pro may have a setting to override that behaviour and be happy with the leaf
only, but I am not familiar with that software.
- Carsten
------------------------------
Message: 4
Date: Thu, 26 Jan 2017 00:24:12 +0100
From: Carsten Kurz <audiovisual(a)t-online.de>
To: dcpomatic carlh net <DCPomatic(a)carlh.net>
Subject: Re: [DCP-o-matic] Exporting a decryption certificate.
Message-ID: <99FC8548-330F-4A47-A0A3-F7C7896B4EE9(a)t-online.de>
Content-Type: text/plain; charset=us-ascii
Am 25.01.2017 um 23:59 schrieb Tom Haines:
I can't find 'Export DCP encryption
chain', but I did send him the result from 'Export DCP decryption certificate'
and that's what caused him this error. Are they the same thing, or am I missing
something?
Carl - I could probably try this myself, but, assuming Tom want's to stay with
2.9 - can the decryption certificate chain also be generated by exporting the three
individual Root/Intermediate/Leaf certificates in the upper part of the decryption
certificate dialog segment, and simply concatenate them into a single file?
- Carsten
------------------------------
Message: 5
Date: Wed, 25 Jan 2017 18:26:51 -0500
From: Tom Haines <thaines(a)specticast.com>
To: Carsten Kurz <audiovisual(a)t-online.de>
Cc: dcpomatic net carlh <DCPomatic(a)carlh.net>
Subject: Re: [DCP-o-matic] Exporting a decryption certificate.
Message-ID:
<CAAgw8C5yG0s=sPycBni1yS_nQai2diYG=Tt+sjFvpLjCge8Wvg(a)mail.gmail.com>
Content-Type: text/plain; charset="utf-8"
Wonderful. I upgraded to 2.10.2 and that option is now there. I exported
the full chain and sent it along. I'll report back if it works.
[image: SpectiCast] <http://www.specticast.com/> Tom Haines :: Executive
Director of Digital Cinema Services
210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA
Office: 215-618-3874 | Mobile: 484-269-8227 | Skype: tom.haines41
Facebook <https://www.facebook.com/SpectiCastEntertainment> | Twitter
<https://twitter.com/Specticast> | Google+
<https://plus.google.com/u/0/b/104757180246475600072/104757180246475600072/posts>
| Instagram <http://instagram.com/specticast> | Tumblr
<http://specticast.tumblr.com/>
On Wed, Jan 25, 2017 at 6:15 PM, Carsten Kurz via DCPomatic <
dcpomatic(a)carlh.net> wrote:
Am 25.01.2017 um 23:59 schrieb Tom Haines:
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://main.carlh.net/pipermail/dcpomatic/attachments/20170125/4ad2832a/attachment.html>
------------------------------
Subject: Digest Footer
_______________________________________________
DCPomatic mailing list
DCPomatic(a)carlh.net
http://main.carlh.net/cgi-bin/mailman/listinfo/dcpomatic
------------------------------
End of DCPomatic Digest, Vol 53, Issue 20
*****************************************
I can't find 'Export DCP encryption
chain', but I did send him the
result from 'Export DCP decryption certificate' and that's what caused
him
this error. Are they the same thing, or am I missing something?
Ooops.
In my Preferences - Keys I have three options at the bottom of the dialog:
Re_Make certificates and key
Export DCP decryption certificate...
Export DCP decryption chain...
Ooops, it seems that button is indeed not there in 2.9... maybe upgrade to
2.10.2 or 2.10.6?
'Export Decryption certificate' will only export the leaf certificate of
your DOM installation. Technically, the leaf is sufficient to create
KDMs/DKDMs, but some software may require a full certificate chain, which
is what the error message you posted seems to signal.
Qube Master Pro may have a setting to override that behaviour and be happy
with the leaf only, but I am not familiar with that software.
- Carsten
_______________________________________________
DCPomatic mailing list
DCPomatic(a)carlh.net
http://main.carlh.net/cgi-bin/mailman/listinfo/dcpomatic
30 Jan
30 Jan
9:30 p.m.
New subject: [DCP-o-matic] Exporting a decryption certificate
So, the Qube Master Pro operator was able to issue a DKDM, using an
individual export of the Root, Intermediate, and Leaf.
Unfortunately now, I am receiving the following error in DCP-o-Matic when I
attempt to unlock the content.
An exception occurred: Could not decrypt KDM (error:0407A079:rsa
routines:RSA_padding_check_PKCS1_OAEP:oaep decoding error).
Any thoughts on this?
[image: SpectiCast] <http://www.specticast.com/> Tom Haines :: Executive
Director of Digital Cinema Services
210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA
Office: 215-618-3874 | Mobile: 484-269-8227 | Skype: tom.haines41
Facebook <https://www.facebook.com/SpectiCastEntertainment> | Twitter
<https://twitter.com/Specticast> | Google+
<https://plus.google.com/u/0/b/104757180246475600072/104757180246475600072/posts>
| Instagram <http://instagram.com/specticast> | Tumblr
<http://specticast.tumblr.com/>
On Thu, Jan 26, 2017 at 2:23 AM, GEORGE MAZARAKIS via DCPomatic <
dcpomatic(a)carlh.net> wrote:
If you send the cerificate chain they should be able
to unchain it (
using an utulity which comes with qube , or manually)
and install the root and intermidiate certificates on windows using
mmc.exe.
Then they can create DKDM for DoM using the pem cerificate
George
On 26/1/2017 1:28 πμ, dcpomatic-request(a)carlh.net wrote:
Send DCPomatic mailing list submissions to
dcpomatic(a)carlh.net
To subscribe or unsubscribe via the World Wide Web, visit
http://main.carlh.net/cgi-bin/mailman/listinfo/dcpomatic
or, via email, send a message with subject or body 'help' to
dcpomatic-request(a)carlh.net
You can reach the person managing the list at
dcpomatic-owner(a)carlh.net
When replying, please edit your Subject line so it is more specific
than "Re: Contents of DCPomatic digest..."
Today's Topics:
1. Re: Exporting a decryption certificate. (Carsten Kurz)
2. Re: Exporting a decryption certificate. (Tom Haines)
3. Re: Exporting a decryption certificate. (Carsten Kurz)
4. Re: Exporting a decryption certificate. (Carsten Kurz)
5. Re: Exporting a decryption certificate. (Tom Haines)
----------------------------------------------------------------------
Message: 1
Date: Wed, 25 Jan 2017 23:50:05 +0100
From: Carsten Kurz <audiovisual(a)t-online.de>
To: dcpomatic carlh net <DCPomatic(a)carlh.net>
Subject: Re: [DCP-o-matic] Exporting a decryption certificate.
Message-ID: <1BA06127-14B0-43EE-A89D-A5331B0A0513(a)t-online.de>
Content-Type: text/plain; charset=us-ascii
Am 25.01.2017 um 23:43 schrieb Tom Haines:
> Other way around. They are mastering the DCP, and I need to decrypt it
with
DOM
Okay, in this case you would need to use
'Export DCP encryption chain'.
And hope that Qube Master Pro accepts DOMs
root certificate/chain.
- Carsten
------------------------------
Message: 2
Date: Wed, 25 Jan 2017 17:59:31 -0500
From: Tom Haines <thaines(a)specticast.com>
To: Carsten Kurz <audiovisual(a)t-online.de>
Cc: dcpomatic carlh net <DCPomatic(a)carlh.net>
Subject: Re: [DCP-o-matic] Exporting a decryption certificate.
Message-ID:
<CAAgw8C5kMZKk-JYj8gu7kDuOieBv2Nt1z4w11Dcjwsv
yRTpoqw(a)mail.gmail.com>
Content-Type: text/plain;
charset="utf-8"
I can't find 'Export DCP encryption chain', but I did send him the result
from 'Export DCP decryption certificate' and that's what caused him this
error. Are they the same thing, or am I missing something?
[image: SpectiCast] <http://www.specticast.com/> Tom Haines :: Executive
Director of Digital Cinema Services
210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA
Office: 215-618-3874 | Mobile: 484-269-8227 | Skype: tom.haines41
Facebook <https://www.facebook.com/SpectiCastEntertainment> | Twitter
<https://twitter.com/Specticast> | Google+
<https://plus.google.com/u/0/b/104757180246475600072/
104757180246475600072/posts>
> | Instagram <http://instagram.com/specticast> | Tumblr
> <http://specticast.tumblr.com/>
>
> On Wed, Jan 25, 2017 at 5:50 PM, Carsten Kurz via DCPomatic <
> dcpomatic(a)carlh.net> wrote:
>
>> Am 25.01.2017 um 23:43 schrieb Tom Haines:
>>
>>> Other way around. They are mastering the DCP, and I need to decrypt it
>> with DOM
>>
>> Okay, in this case you would need to use 'Export DCP encryption chain'.
>> And hope that Qube Master Pro accepts DOMs root certificate/chain.
>>
>> - Carsten
>>
>>
>>
>> _______________________________________________
>> DCPomatic mailing list
>> DCPomatic(a)carlh.net
>> http://main.carlh.net/cgi-bin/mailman/listinfo/dcpomatic
>>
>
9:45 p.m.
New subject: [DCP-o-matic] Exporting a decryption certificate
I tried rebooting and I get the same error.
I am running DCP-o-Matic v2.10.2 on macOS Sierra 10.12.2
[image: SpectiCast] <http://www.specticast.com/> Tom Haines :: Executive
Director of Digital Cinema Services
210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA
Office: 215-618-3874 | Mobile: 484-269-8227 | Skype: tom.haines41
Facebook <https://www.facebook.com/SpectiCastEntertainment> | Twitter
<https://twitter.com/Specticast> | Google+
<https://plus.google.com/u/0/b/104757180246475600072/104757180246475600072/posts>
| Instagram <http://instagram.com/specticast> | Tumblr
<http://specticast.tumblr.com/>
On Mon, Jan 30, 2017 at 4:30 PM, Tom Haines <thaines(a)specticast.com> wrote:
So, the Qube Master Pro operator was able to issue a
DKDM, using an
individual export of the Root, Intermediate, and Leaf.
Unfortunately now, I am receiving the following error in DCP-o-Matic when
I attempt to unlock the content.
An exception occurred: Could not decrypt KDM (error:0407A079:rsa
routines:RSA_padding_check_PKCS1_OAEP:oaep decoding error).
Any thoughts on this?
[image: SpectiCast] <http://www.specticast.com/> Tom Haines :: Executive
Director of Digital Cinema Services
210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA
Office: 215-618-3874 <(215)%20618-3874> | Mobile: 484-269-8227
<(484)%20269-8227> | Skype: tom.haines41
Facebook <https://www.facebook.com/SpectiCastEntertainment> | Twitter
<https://twitter.com/Specticast> | Google+
<https://plus.google.com/u/0/b/104757180246475600072/104757180246475600072/posts>
| Instagram <http://instagram.com/specticast> | Tumblr
<http://specticast.tumblr.com/>
On Thu, Jan 26, 2017 at 2:23 AM, GEORGE MAZARAKIS via DCPomatic <
dcpomatic(a)carlh.net> wrote:
> If you send the cerificate chain they should be able to unchain it (
> using an utulity which comes with qube , or manually)
>
> and install the root and intermidiate certificates on windows using
> mmc.exe.
>
> Then they can create DKDM for DoM using the pem cerificate
>
> George
>
>
> On 26/1/2017 1:28 πμ, dcpomatic-request(a)carlh.net wrote:
> > Send DCPomatic mailing list submissions to
> > dcpomatic(a)carlh.net
> >
> > To subscribe or unsubscribe via the World Wide Web, visit
> > http://main.carlh.net/cgi-bin/mailman/listinfo/dcpomatic
> > or, via email, send a message with subject or body 'help' to
> > dcpomatic-request(a)carlh.net
> >
> > You can reach the person managing the list at
> > dcpomatic-owner(a)carlh.net
> >
> > When replying, please edit your Subject line so it is more specific
> > than "Re: Contents of DCPomatic digest..."
> >
> >
> > Today's Topics:
> >
> > 1. Re: Exporting a decryption certificate. (Carsten Kurz)
> > 2. Re: Exporting a decryption certificate. (Tom Haines)
> > 3. Re: Exporting a decryption certificate. (Carsten Kurz)
> > 4. Re: Exporting a decryption certificate. (Carsten Kurz)
> > 5. Re: Exporting a decryption certificate. (Tom Haines)
> >
> >
> > ----------------------------------------------------------------------
> >
> > Message: 1
> > Date: Wed, 25 Jan 2017 23:50:05 +0100
> > From: Carsten Kurz <audiovisual(a)t-online.de>
> > To: dcpomatic carlh net <DCPomatic(a)carlh.net>
> > Subject: Re: [DCP-o-matic] Exporting a decryption certificate.
> > Message-ID: <1BA06127-14B0-43EE-A89D-A5331B0A0513(a)t-online.de>
> > Content-Type: text/plain; charset=us-ascii
> >
> >
> > Am 25.01.2017 um 23:43 schrieb Tom Haines:
> >
> >> Other way around. They are mastering the DCP, and I need to decrypt it
> with DOM
> > Okay, in this case you would need to use 'Export DCP encryption chain'.
> And hope that Qube Master Pro accepts DOMs root certificate/chain.
> >
> > - Carsten
> >
> >
> >
> >
> >
> > ------------------------------
> >
> > Message: 2
> > Date: Wed, 25 Jan 2017 17:59:31 -0500
> > From: Tom Haines <thaines(a)specticast.com>
> > To: Carsten Kurz <audiovisual(a)t-online.de>
> > Cc: dcpomatic carlh net <DCPomatic(a)carlh.net>
> > Subject: Re: [DCP-o-matic] Exporting a decryption certificate.
> > Message-ID:
> > <CAAgw8C5kMZKk-JYj8gu7kDuOieBv2Nt1z4w11DcjwsvyRTpoqw@mail.
> gmail.com>
> > Content-Type: text/plain; charset="utf-8"
> >
> > I can't find 'Export DCP encryption chain', but I did send him the
> result
> > from 'Export DCP decryption certificate' and that's what caused him
this
> > error. Are they the same thing, or am I missing something?
> >
> > [image: SpectiCast] <http://www.specticast.com/> Tom Haines ::
> Executive
> > Director of Digital Cinema Services
> >
> > 210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA
> >
> > Office: 215-618-3874 | Mobile: 484-269-8227 | Skype: tom.haines41
> >
> > Facebook <https://www.facebook.com/SpectiCastEntertainment> | Twitter
> > <https://twitter.com/Specticast> | Google+
> > <https://plus.google.com/u/0/b/104757180246475600072/1047571
> 80246475600072/posts>
> > | Instagram <http://instagram.com/specticast> | Tumblr
> > <http://specticast.tumblr.com/>
> >
> > On Wed, Jan 25, 2017 at 5:50 PM, Carsten Kurz via DCPomatic <
> > dcpomatic(a)carlh.net> wrote:
> >
> >> Am 25.01.2017 um 23:43 schrieb Tom Haines:
> >>
> >>> Other way around. They are mastering the DCP, and I need to decrypt it
> >> with DOM
> >>
> >> Okay, in this case you would need to use 'Export DCP encryption
chain'.
> >> And hope that Qube Master Pro accepts DOMs root certificate/chain.
> >>
> >> - Carsten
> >>
> >>
> >>
> >> _______________________________________________
> >> DCPomatic mailing list
> >> DCPomatic(a)carlh.net
> >> http://main.carlh.net/cgi-bin/mailman/listinfo/dcpomatic
> >>
> >
10:03 p.m.
New subject: [DCP-o-matic] Exporting a decryption certificate
Hi Tom,
Are you importing the DCP on the same machine that you exported the
certificates from?
And you are doing "Add KDM" from the right-click menu when you get this
error?
Kind regards,
Carl
On Mon, 30 Jan 2017, Tom Haines via DCPomatic wrote:
So, the Qube Master Pro operator was able to issue a
DKDM, using an individual export of the Root, Intermediate, and Leaf.
Unfortunately now, I am receiving the following error in DCP-o-Matic when I attempt to
unlock the content.
An exception occurred: Could not decrypt KDM (error:0407A079:rsa
routines:RSA_padding_check_PKCS1_OAEP:oaep decoding error).
Any thoughts on this?
SpectiCast
Tom Haines :: Executive Director of
Digital Cinema Services
210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA
Office: 215-618-3874 | Mobile: 484-269-8227 | Skype: tom.haines41
Facebook | Twitter | Google+ | Instagram | Tumblr
On Thu, Jan 26, 2017 at 2:23 AM, GEORGE MAZARAKIS via DCPomatic
<dcpomatic(a)carlh.net> wrote:
If you send the cerificate chain they should be able to unchain it (
using an utulity which comes with qube , or manually)
and install the root and intermidiate certificates on windows using mmc.exe.
Then they can create DKDM for DoM using the pem cerificate
George
On 26/1/2017 1:28 πμ, dcpomatic-request(a)carlh.net wrote:
> Send DCPomatic mailing list submissions to
> dcpomatic(a)carlh.net
>
> To subscribe or unsubscribe via the World Wide Web, visit
> http://main.carlh.net/cgi-bin/mailman/listinfo/dcpomatic
> or, via email, send a message with subject or body 'help' to
> dcpomatic-request(a)carlh.net
>
> You can reach the person managing the list at
> dcpomatic-owner(a)carlh.net
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of DCPomatic digest..."
>
>
> Today's Topics:
>
> 1. Re: Exporting a decryption certificate. (Carsten Kurz)
> 2. Re: Exporting a decryption certificate. (Tom Haines)
> 3. Re: Exporting a decryption certificate. (Carsten Kurz)
> 4. Re: Exporting a decryption certificate. (Carsten Kurz)
> 5. Re: Exporting a decryption certificate. (Tom Haines)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Wed, 25 Jan 2017 23:50:05 +0100
> From: Carsten Kurz <audiovisual(a)t-online.de>
> To: dcpomatic carlh net <DCPomatic(a)carlh.net>
> Subject: Re: [DCP-o-matic] Exporting a decryption certificate.
> Message-ID: <1BA06127-14B0-43EE-A89D-A5331B0A0513(a)t-online.de>
> Content-Type: text/plain; charset=us-ascii
>
>
> Am 25.01.2017 um 23:43 schrieb Tom Haines:
>
>> Other way around. They are mastering the DCP, and I need to decrypt it
with DOM
> Okay, in this case you would need to use 'Export DCP encryption
chain'. And hope that Qube Master Pro accepts DOMs root certificate/chain.
>
> - Carsten
>
>
>
>
>
> ------------------------------
>
> Message: 2
> Date: Wed, 25 Jan 2017 17:59:31 -0500
> From: Tom Haines <thaines(a)specticast.com>
> To: Carsten Kurz <audiovisual(a)t-online.de>
> Cc: dcpomatic carlh net <DCPomatic(a)carlh.net>
> Subject: Re: [DCP-o-matic] Exporting a decryption certificate.
> Message-ID:
>
<CAAgw8C5kMZKk-JYj8gu7kDuOieBv2Nt1z4w11DcjwsvyRTpoqw(a)mail.gmail.com>
> Content-Type: text/plain; charset="utf-8"
>
> I can't find 'Export DCP encryption chain', but I did send him the
result
> from 'Export DCP decryption certificate' and that's what caused
him this
> error. Are they the same thing, or am I missing something?
>
> [image: SpectiCast] <http://www.specticast.com/> Tom Haines :: Executive
> Director of Digital Cinema Services
>
> 210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA
>
> Office: 215-618-3874 | Mobile: 484-269-8227 | Skype: tom.haines41
>
> Facebook <https://www.facebook.com/SpectiCastEntertainment> | Twitter
> <https://twitter.com/Specticast> | Google+
>
<https://plus.google.com/u/0/b/104757180246475600072/104757180246475600072/posts>
> | Instagram <http://instagram.com/specticast> | Tumblr
> <http://specticast.tumblr.com/>
>
> On Wed, Jan 25, 2017 at 5:50 PM, Carsten Kurz via DCPomatic <
> dcpomatic(a)carlh.net> wrote:
>
>> Am 25.01.2017 um 23:43 schrieb Tom Haines:
>>
>>> Other way around. They are mastering the DCP, and I need to decrypt it
>> with DOM
>>
>> Okay, in this case you would need to use 'Export DCP encryption
chain'.
>> And hope that Qube Master Pro accepts DOMs root certificate/chain.
>>
>> - Carsten
>>
>>
>>
>> _______________________________________________
>> DCPomatic mailing list
>> DCPomatic(a)carlh.net
>> http://main.carlh.net/cgi-bin/mailman/listinfo/dcpomatic
>>
>
10:09 p.m.
New subject: [DCP-o-matic] Exporting a decryption certificate
Yes to both
[image: SpectiCast] <http://www.specticast.com/> Tom Haines :: Executive
Director of Digital Cinema Services
210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA
Office: 215-618-3874 | Mobile: 484-269-8227 | Skype: tom.haines41
Facebook <https://www.facebook.com/SpectiCastEntertainment> | Twitter
<https://twitter.com/Specticast> | Google+
<https://plus.google.com/u/0/b/104757180246475600072/104757180246475600072/posts>
| Instagram <http://instagram.com/specticast> | Tumblr
<http://specticast.tumblr.com/>
On Mon, Jan 30, 2017 at 5:03 PM, Carl Hetherington <cth(a)carlh.net> wrote:
Hi Tom,
Are you importing the DCP on the same machine that you exported the
certificates from?
And you are doing "Add KDM" from the right-click menu when you get this
error?
Kind regards,
Carl
On Mon, 30 Jan 2017, Tom Haines via DCPomatic wrote:
So, the Qube Master Pro operator was able to
issue a DKDM, using an
individual export of the Root, Intermediate, and Leaf.
Unfortunately now, I am receiving the following error in DCP-o-Matic
when I
attempt to unlock the content.
An exception occurred: Could not decrypt KDM (error:0407A079:rsa
routines:RSA_padding_check_PKCS1_OAEP:oaep decoding error).
Any thoughts on this?
SpectiCast
Tom
Haines :: Executive
Director of Digital Cinema Services
210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA
Office: 215-618-3874 | Mobile: 484-269-8227 | Skype: tom.haines41
Facebook | Twitter | Google+ | Instagram | Tumblr
On Thu, Jan 26, 2017 at 2:23 AM, GEORGE MAZARAKIS via DCPomatic <
dcpomatic(a)carlh.net> wrote:
If you send the cerificate chain they
should be able to unchain it
(
using an utulity which comes with qube , or
manually)
and install the root and intermidiate certificates on windows
using mmc.exe.
Then they can create DKDM for DoM using the pem cerificate
George
On 26/1/2017 1:28 πμ, dcpomatic-request(a)carlh.net wrote:
> Send DCPomatic mailing list submissions to
> dcpomatic(a)carlh.net
>
> To subscribe or unsubscribe via the World Wide Web, visit
> http://main.carlh.net/cgi-bin/mailman/listinfo/dcpomatic
> or, via email, send a message with subject or body 'help' to
> dcpomatic-request(a)carlh.net
>
> You can reach the person managing the list at
> dcpomatic-owner(a)carlh.net
>
> When replying, please edit your Subject line so it is more
specific
> than "Re: Contents of DCPomatic
digest..."
>
>
> Today's Topics:
>
> 1. Re: Exporting a decryption certificate. (Carsten Kurz)
> 2. Re: Exporting a decryption certificate. (Tom Haines)
> 3. Re: Exporting a decryption certificate. (Carsten Kurz)
> 4. Re: Exporting a decryption certificate. (Carsten Kurz)
> 5. Re: Exporting a decryption certificate. (Tom Haines)
>
>
> ------------------------------------------------------------
----------
>
> Message: 1
> Date: Wed, 25 Jan 2017 23:50:05 +0100
> From: Carsten Kurz <audiovisual(a)t-online.de>
> To: dcpomatic carlh net <DCPomatic(a)carlh.net>
> Subject: Re: [DCP-o-matic] Exporting a decryption certificate.
> Message-ID: <1BA06127-14B0-43EE-A89D-A5331B0A0513(a)t-online.de>
> Content-Type: text/plain; charset=us-ascii
>
>
> Am 25.01.2017 um 23:43 schrieb Tom Haines:
>
>> Other way around. They are mastering the DCP, and I need to
decrypt
it with DOM
> Okay, in this case you would need to
use 'Export DCP encryption
chain'. And hope that Qube Master Pro accepts
DOMs root certificate/chain.
>
> - Carsten
>
>
>
>
>
> ------------------------------
>
> Message: 2
> Date: Wed, 25 Jan 2017 17:59:31 -0500
> From: Tom Haines <thaines(a)specticast.com>
> To: Carsten Kurz <audiovisual(a)t-online.de>
> Cc: dcpomatic carlh net <DCPomatic(a)carlh.net>
> Subject: Re: [DCP-o-matic] Exporting a decryption certificate.
> Message-ID:
> <CAAgw8C5kMZKk-JYj8gu7kDuOieBv2Nt1z4w11Dcjwsv
yRTpoqw(a)mail.gmail.com>
> Content-Type: text/plain;
charset="utf-8"
>
> I can't find 'Export DCP encryption chain', but I did send him
the result
> from 'Export DCP decryption
certificate' and that's what caused
him this
> error. Are they the same thing, or am
I missing something?
>
> [image: SpectiCast] <http://www.specticast.com/> Tom Haines ::
Executive
> Director of Digital Cinema Services
>
> 210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA
>
> Office: 215-618-3874 | Mobile: 484-269-8227 | Skype:
tom.haines41
>
> Facebook <https://www.facebook.com/SpectiCastEntertainment> |
Twitter
> <https://twitter.com/Specticast>
| Google+
> <https://plus.google.com/u/0/b/104757180246475600072/
104757180246475600072/posts>
> | Instagram
<http://instagram.com/specticast> | Tumblr
> <http://specticast.tumblr.com/>
>
> On Wed, Jan 25, 2017 at 5:50 PM, Carsten Kurz via DCPomatic <
> dcpomatic(a)carlh.net> wrote:
>
>> Am 25.01.2017 um 23:43 schrieb Tom Haines:
>>
>>> Other way around. They are mastering the DCP, and I need to
decrypt it
>> with DOM
>>
>> Okay, in this case you would need to use 'Export DCP encryption
chain'.
>> And hope that Qube Master Pro
accepts DOMs root
certificate/chain.
> >>
> >> - Carsten
> >>
> >>
> >>
> >> _______________________________________________
> >> DCPomatic mailing list
> >> DCPomatic(a)carlh.net
> >> http://main.carlh.net/cgi-bin/mailman/listinfo/dcpomatic
> >>
> >
10:41 p.m.
New subject: [DCP-o-matic] Exporting a decryption certificate
Hi Tom,
Maybe you'd like to email me those certificates and the DKDM. They don't
give away any secrets without the private key that is stored on your
machine.
All the best,
Carl
On Mon, 30 Jan 2017, Tom Haines wrote:
Yes to both
SpectiCast
Tom Haines :: Executive Director of
Digital Cinema Services
210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA
Office: 215-618-3874 | Mobile: 484-269-8227 | Skype: tom.haines41
Facebook | Twitter | Google+ | Instagram | Tumblr
On Mon, Jan 30, 2017 at 5:03 PM, Carl Hetherington <cth(a)carlh.net> wrote:
Hi Tom,
Are you importing the DCP on the same machine that you exported the
certificates from?
And you are doing "Add KDM" from the right-click menu when you get this
error?
Kind regards,
Carl
On Mon, 30 Jan 2017, Tom Haines via DCPomatic wrote:
> So, the Qube Master Pro operator was able to issue a DKDM, using an individual
export of the Root, Intermediate, and Leaf.
>
> Unfortunately now, I am receiving the following error in DCP-o-Matic when I
attempt to unlock the content.
>
> An exception occurred: Could not decrypt KDM (error:0407A079:rsa
routines:RSA_padding_check_PKCS1_OAEP:oaep decoding error).
>
> Any thoughts on this?
>
> SpectiCast
> Tom Haines :: Executive
Director of Digital Cinema Services
>
> 210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA
>
> Office: 215-618-3874 | Mobile: 484-269-8227 | Skype: tom.haines41
>
> Facebook | Twitter | Google+ | Instagram | Tumblr
>
>
> On Thu, Jan 26, 2017 at 2:23 AM, GEORGE MAZARAKIS via DCPomatic
<dcpomatic(a)carlh.net> wrote:
> If you send the cerificate chain they should be able to unchain it (
> using an utulity which comes with qube , or manually)
>
> and install the root and intermidiate certificates on windows using
mmc.exe.
>
> Then they can create DKDM for DoM using the pem cerificate
>
> George
>
>
> On 26/1/2017 1:28 πμ, dcpomatic-request(a)carlh.net wrote:
> > Send DCPomatic mailing list submissions to
> > dcpomatic(a)carlh.net
> >
> > To subscribe or unsubscribe via the World Wide Web, visit
> > http://main.carlh.net/cgi-bin/mailman/listinfo/dcpomatic
> > or, via email, send a message with subject or body 'help'
to
> > dcpomatic-request(a)carlh.net
> >
> > You can reach the person managing the list at
> > dcpomatic-owner(a)carlh.net
> >
> > When replying, please edit your Subject line so it is more specific
> > than "Re: Contents of DCPomatic digest..."
> >
> >
> > Today's Topics:
> >
> > 1. Re: Exporting a decryption certificate. (Carsten Kurz)
> > 2. Re: Exporting a decryption certificate. (Tom Haines)
> > 3. Re: Exporting a decryption certificate. (Carsten Kurz)
> > 4. Re: Exporting a decryption certificate. (Carsten Kurz)
> > 5. Re: Exporting a decryption certificate. (Tom Haines)
> >
> >
> >
----------------------------------------------------------------------
> >
> > Message: 1
> > Date: Wed, 25 Jan 2017 23:50:05 +0100
> > From: Carsten Kurz <audiovisual(a)t-online.de>
> > To: dcpomatic carlh net <DCPomatic(a)carlh.net>
> > Subject: Re: [DCP-o-matic] Exporting a decryption certificate.
> > Message-ID:
<1BA06127-14B0-43EE-A89D-A5331B0A0513(a)t-online.de>
> > Content-Type: text/plain; charset=us-ascii
> >
> >
> > Am 25.01.2017 um 23:43 schrieb Tom Haines:
> >
> >> Other way around. They are mastering the DCP, and I need to
decrypt it with DOM
> > Okay, in this case you would need to use 'Export DCP encryption
chain'. And hope that Qube Master Pro accepts DOMs root certificate/chain.
> >
> > - Carsten
> >
> >
> >
> >
> >
> > ------------------------------
> >
> > Message: 2
> > Date: Wed, 25 Jan 2017 17:59:31 -0500
> > From: Tom Haines <thaines(a)specticast.com>
> > To: Carsten Kurz <audiovisual(a)t-online.de>
> > Cc: dcpomatic carlh net <DCPomatic(a)carlh.net>
> > Subject: Re: [DCP-o-matic] Exporting a decryption certificate.
> > Message-ID:
> >
<CAAgw8C5kMZKk-JYj8gu7kDuOieBv2Nt1z4w11DcjwsvyRTpoqw(a)mail.gmail.com>
> > Content-Type: text/plain; charset="utf-8"
> >
> > I can't find 'Export DCP encryption chain', but I did
send him the result
> > from 'Export DCP decryption certificate' and that's
what caused him this
> > error. Are they the same thing, or am I missing something?
> >
> > [image: SpectiCast] <http://www.specticast.com/> Tom Haines
:: Executive
> > Director of Digital Cinema Services
> >
> > 210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA
> >
> > Office: 215-618-3874 | Mobile: 484-269-8227 | Skype: tom.haines41
> >
> > Facebook <https://www.facebook.com/SpectiCastEntertainment> |
Twitter
> > <https://twitter.com/Specticast> | Google+
> >
<https://plus.google.com/u/0/b/104757180246475600072/104757180246475600072/posts>
> > | Instagram <http://instagram.com/specticast> | Tumblr
> > <http://specticast.tumblr.com/>
> >
> > On Wed, Jan 25, 2017 at 5:50 PM, Carsten Kurz via DCPomatic <
> > dcpomatic(a)carlh.net> wrote:
> >
> >> Am 25.01.2017 um 23:43 schrieb Tom Haines:
> >>
> >>> Other way around. They are mastering the DCP, and I need to
decrypt it
> >> with DOM
> >>
> >> Okay, in this case you would need to use 'Export DCP
encryption chain'.
> >> And hope that Qube Master Pro accepts DOMs root
certificate/chain.
> >>
> >> - Carsten
> >>
> >>
> >>
> >> _______________________________________________
> >> DCPomatic mailing list
> >> DCPomatic(a)carlh.net
> >> http://main.carlh.net/cgi-bin/mailman/listinfo/dcpomatic
> >>
> >
11:22 p.m.
New subject: [DCP-o-matic] Exporting a decryption certificate
Hi Tom,
Thanks. It looks rather as if that DKDM has been created for different
certificates to the ones you sent. Have you only sent your Qube operator
one set? Where did the certificate files that you sent to me come from?
Best,
Carl
On Mon, 30 Jan 2017, Carl Hetherington via DCPomatic wrote:
Hi Tom,
Maybe you'd like to email me those certificates and the DKDM. They don't
give away any secrets without the private key that is stored on your
machine.
All the best,
Carl
On Mon, 30 Jan 2017, Tom Haines wrote:
> Yes to both
>
> SpectiCast
> Tom Haines :: Executive Director
of Digital Cinema Services
>
> 210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA
>
> Office: 215-618-3874 | Mobile: 484-269-8227 | Skype: tom.haines41
>
> Facebook | Twitter | Google+ | Instagram | Tumblr
>
>
> On Mon, Jan 30, 2017 at 5:03 PM, Carl Hetherington <cth(a)carlh.net> wrote:
> Hi Tom,
>
> Are you importing the DCP on the same machine that you exported the
> certificates from?
>
> And you are doing "Add KDM" from the right-click menu when you get
this
> error?
>
> Kind regards,
> Carl
>
> On Mon, 30 Jan 2017, Tom Haines via DCPomatic wrote:
>
> > So, the Qube Master Pro operator was able to issue a DKDM, using an
individual export of the Root, Intermediate, and Leaf.
> >
> > Unfortunately now, I am receiving the following error in DCP-o-Matic when
I attempt to unlock the content.
> >
> > An exception occurred: Could not decrypt KDM (error:0407A079:rsa
routines:RSA_padding_check_PKCS1_OAEP:oaep decoding error).
> >
> > Any thoughts on this?
> >
> > SpectiCast
> > Tom
Haines :: Executive Director of Digital Cinema Services
> >
> > 210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA
> >
> > Office: 215-618-3874 | Mobile: 484-269-8227 | Skype: tom.haines41
> >
> > Facebook | Twitter | Google+ | Instagram | Tumblr
> >
> >
> > On Thu, Jan 26, 2017 at 2:23 AM, GEORGE MAZARAKIS via DCPomatic
<dcpomatic(a)carlh.net> wrote:
> > If you send the cerificate chain they should be able to unchain it
(
> > using an utulity which comes with qube , or manually)
> >
> > and install the root and intermidiate certificates on windows using
mmc.exe.
> >
> > Then they can create DKDM for DoM using the pem cerificate
> >
> > George
> >
> >
> > On 26/1/2017 1:28 πμ, dcpomatic-request(a)carlh.net wrote:
> > > Send DCPomatic mailing list submissions to
> > > dcpomatic(a)carlh.net
> > >
> > > To subscribe or unsubscribe via the World Wide Web, visit
> > > http://main.carlh.net/cgi-bin/mailman/listinfo/dcpomatic
> > > or, via email, send a message with subject or body
'help' to
> > > dcpomatic-request(a)carlh.net
> > >
> > > You can reach the person managing the list at
> > > dcpomatic-owner(a)carlh.net
> > >
> > > When replying, please edit your Subject line so it is more
specific
> > > than "Re: Contents of DCPomatic digest..."
> > >
> > >
> > > Today's Topics:
> > >
> > > 1. Re: Exporting a decryption certificate. (Carsten Kurz)
> > > 2. Re: Exporting a decryption certificate. (Tom Haines)
> > > 3. Re: Exporting a decryption certificate. (Carsten Kurz)
> > > 4. Re: Exporting a decryption certificate. (Carsten Kurz)
> > > 5. Re: Exporting a decryption certificate. (Tom Haines)
> > >
> > >
> > >
----------------------------------------------------------------------
> > >
> > > Message: 1
> > > Date: Wed, 25 Jan 2017 23:50:05 +0100
> > > From: Carsten Kurz <audiovisual(a)t-online.de>
> > > To: dcpomatic carlh net <DCPomatic(a)carlh.net>
> > > Subject: Re: [DCP-o-matic] Exporting a decryption certificate.
> > > Message-ID:
<1BA06127-14B0-43EE-A89D-A5331B0A0513(a)t-online.de>
> > > Content-Type: text/plain; charset=us-ascii
> > >
> > >
> > > Am 25.01.2017 um 23:43 schrieb Tom Haines:
> > >
> > >> Other way around. They are mastering the DCP, and I need
to decrypt it with DOM
> > > Okay, in this case you would need to use 'Export DCP
encryption chain'. And hope that Qube Master Pro accepts DOMs root certificate/chain.
> > >
> > > - Carsten
> > >
> > >
> > >
> > >
> > >
> > > ------------------------------
> > >
> > > Message: 2
> > > Date: Wed, 25 Jan 2017 17:59:31 -0500
> > > From: Tom Haines <thaines(a)specticast.com>
> > > To: Carsten Kurz <audiovisual(a)t-online.de>
> > > Cc: dcpomatic carlh net <DCPomatic(a)carlh.net>
> > > Subject: Re: [DCP-o-matic] Exporting a decryption certificate.
> > > Message-ID:
> > >
<CAAgw8C5kMZKk-JYj8gu7kDuOieBv2Nt1z4w11DcjwsvyRTpoqw(a)mail.gmail.com>
> > > Content-Type: text/plain; charset="utf-8"
> > >
> > > I can't find 'Export DCP encryption chain', but I
did send him the result
> > > from 'Export DCP decryption certificate' and
that's what caused him this
> > > error. Are they the same thing, or am I missing something?
> > >
> > > [image: SpectiCast] <http://www.specticast.com/> Tom
Haines :: Executive
> > > Director of Digital Cinema Services
> > >
> > > 210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA
> > >
> > > Office: 215-618-3874 | Mobile: 484-269-8227 | Skype:
tom.haines41
> > >
> > > Facebook
<https://www.facebook.com/SpectiCastEntertainment> | Twitter
> > > <https://twitter.com/Specticast> | Google+
> > >
<https://plus.google.com/u/0/b/104757180246475600072/104757180246475600072/posts>
> > > | Instagram <http://instagram.com/specticast> | Tumblr
> > > <http://specticast.tumblr.com/>
> > >
> > > On Wed, Jan 25, 2017 at 5:50 PM, Carsten Kurz via DCPomatic
<
> > > dcpomatic(a)carlh.net> wrote:
> > >
> > >> Am 25.01.2017 um 23:43 schrieb Tom Haines:
> > >>
> > >>> Other way around. They are mastering the DCP, and I
need to decrypt it
> > >> with DOM
> > >>
> > >> Okay, in this case you would need to use 'Export DCP
encryption chain'.
> > >> And hope that Qube Master Pro accepts DOMs root
certificate/chain.
> > >>
> > >> - Carsten
> > >>
> > >>
> > >>
> > >> _______________________________________________
> > >> DCPomatic mailing list
> > >> DCPomatic(a)carlh.net
> > >> http://main.carlh.net/cgi-bin/mailman/listinfo/dcpomatic
> > >>
> > >
11:35 p.m.
New subject: [DCP-o-matic] Exporting a decryption certificate
He also asked for the signing public keys. I will send you offline the
exact package I sent him.
[image: SpectiCast] <http://www.specticast.com/> Tom Haines :: Executive
Director of Digital Cinema Services
210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA
Office: 215-618-3874 | Mobile: 484-269-8227 | Skype: tom.haines41
Facebook <https://www.facebook.com/SpectiCastEntertainment> | Twitter
<https://twitter.com/Specticast> | Google+
<https://plus.google.com/u/0/b/104757180246475600072/104757180246475600072/posts>
| Instagram <http://instagram.com/specticast> | Tumblr
<http://specticast.tumblr.com/>
On Mon, Jan 30, 2017 at 6:22 PM, Carl Hetherington <cth(a)carlh.net> wrote:
Hi Tom,
Thanks. It looks rather as if that DKDM has been created for different
certificates to the ones you sent. Have you only sent your Qube operator
one set? Where did the certificate files that you sent to me come from?
Best,
Carl
On Mon, 30 Jan 2017, Carl Hetherington via DCPomatic wrote:
Hi Tom,
Maybe you'd like to email me those certificates and the DKDM. They don't
give away any secrets without the private key that is stored on your
machine.
All the best,
Carl
On Mon, 30 Jan 2017, Tom Haines wrote:
> Yes to both
>
> SpectiCast
> Tom
Haines :: Executive
Director of Digital Cinema Services
>
> 210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA
>
> Office: 215-618-3874 | Mobile: 484-269-8227 | Skype: tom.haines41
>
> Facebook | Twitter | Google+ | Instagram | Tumblr
>
>
> On Mon, Jan 30, 2017 at 5:03 PM, Carl Hetherington <cth(a)carlh.net>
wrote:
> Hi Tom,
>
> Are you importing the DCP on the same machine that you exported
the
> certificates from?
>
> And you are doing "Add KDM" from the right-click menu when you
get this
> error?
>
> Kind regards,
> Carl
>
> On Mon, 30 Jan 2017, Tom Haines via DCPomatic wrote:
>
> > So, the Qube Master Pro operator was able to issue a DKDM,
using
an individual export of the Root, Intermediate, and Leaf.
> >
> > Unfortunately now, I am receiving the following error in
DCP-o-Matic when I attempt to unlock the content.
> >
> > An exception occurred: Could not decrypt KDM
(error:0407A079:rsa
routines:RSA_padding_check_PKCS1_OAEP:oaep decoding
error).
> >
> > Any thoughts on this?
> >
> > SpectiCast
> > Tom
Haines ::
Executive Director of Digital Cinema Services
> >
> > 210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA
> >
> > Office: 215-618-3874 | Mobile: 484-269-8227 | Skype:
tom.haines41
> >
> > Facebook | Twitter | Google+ | Instagram | Tumblr
> >
> >
> > On Thu, Jan 26, 2017 at 2:23 AM, GEORGE MAZARAKIS via
DCPomatic
<dcpomatic(a)carlh.net> wrote:
> > If you send the cerificate
chain they should be able to
unchain it (
> > using an utulity which
comes with qube , or manually)
> >
> > and install the root and intermidiate certificates on
windows using mmc.exe.
> >
> > Then they can create DKDM for DoM using the pem
cerificate
> >
> > George
> >
> >
> > On 26/1/2017 1:28 πμ, dcpomatic-request(a)carlh.net wrote:
> > > Send DCPomatic mailing list submissions to
> > > dcpomatic(a)carlh.net
> > >
> > > To subscribe or unsubscribe via the World Wide Web,
visit
bin/mailman/listinfo/dcpomatic
> > > or, via email, send a
message with subject or body
'help' to
> > >
dcpomatic-request(a)carlh.net
> > >
> > > You can reach the person managing the list at
> > > dcpomatic-owner(a)carlh.net
> > >
> > > When replying, please edit your Subject line so it is
more specific
> > > than "Re:
Contents of DCPomatic digest..."
> > >
> > >
> > > Today's Topics:
> > >
> > > 1. Re: Exporting a decryption certificate.
(Carsten
Kurz)
> > > 2. Re: Exporting a
decryption certificate. (Tom
Haines)
> > > 3. Re: Exporting a
decryption certificate.
(Carsten Kurz)
> > > 4. Re: Exporting a
decryption certificate.
(Carsten Kurz)
> > > 5. Re: Exporting a
decryption certificate. (Tom
Haines)
> > >
> > >
> > > ------------------------------
----------------------------------------
> > >
> > > Message: 1
> > > Date: Wed, 25 Jan 2017 23:50:05 +0100
> > > From: Carsten Kurz <audiovisual(a)t-online.de>
> > > To: dcpomatic carlh net <DCPomatic(a)carlh.net>
> > > Subject: Re: [DCP-o-matic] Exporting a decryption
certificate.
> > > Message-ID:
<1BA06127-14B0-43EE-A89D-
A5331B0A0513(a)t-online.de>
> > > Content-Type:
text/plain; charset=us-ascii
> > >
> > >
> > > Am 25.01.2017 um 23:43 schrieb Tom Haines:
> > >
> > >> Other way around. They are mastering the DCP, and I
need to decrypt it with DOM
> > > Okay, in this case you
would need to use 'Export DCP
encryption chain'. And hope that Qube Master
Pro accepts DOMs root
certificate/chain.
> > > >
> > > > - Carsten
> > > >
> > > >
> > > >
> > >
> > >
> > > ------------------------------
> > >
>
> > > > Message: 2
> > > > Date: Wed, 25 Jan 2017 17:59:31 -0500
> > > > From: Tom Haines <thaines(a)specticast.com>
> > > > To: Carsten Kurz <audiovisual(a)t-online.de>
> > > > Cc: dcpomatic carlh net <DCPomatic(a)carlh.net>
> > > > Subject: Re: [DCP-o-matic] Exporting a decryption
certificate.
> > > Message-ID:
> > > <CAAgw8C5kMZKk-JYj8gu7kDuOieBv2Nt1z4w11Dcjwsv
yRTpoqw(a)mail.gmail.com>
> > > Content-Type:
text/plain; charset="utf-8"
> > >
> > > I can't find 'Export DCP encryption chain', but I
did
send him the result
> > > from 'Export DCP
decryption certificate' and that's
what caused him this
> > > error. Are they the
same thing, or am I missing
something?
> > >
> > > [image: SpectiCast] <http://www.specticast.com/> Tom
Haines :: Executive
> > > Director of Digital
Cinema Services
> > >
> > > 210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA
19103,
USA
> > >
> > > Office: 215-618-3874 | Mobile: 484-269-8227 | Skype:
tom.haines41
> > >
> > > Facebook <https://www.facebook.com/
SpectiCastEntertainment> | Twitter
> > >
<https://twitter.com/Specticast> | Google+
> > > <https://plus.google.com/u/0/b/104757180246475600072/
104757180246475600072/posts>
> > > | Instagram
<http://instagram.com/specticast> |
Tumblr
> > >
<http://specticast.tumblr.com/>
> > >
> > > On Wed, Jan 25, 2017 at 5:50 PM, Carsten Kurz via
DCPomatic <
> > >
dcpomatic(a)carlh.net> wrote:
> > >
> > >> Am 25.01.2017 um 23:43 schrieb Tom Haines:
> > >>
> > >>> Other way around. They are mastering the DCP, and I
need to decrypt it
> > >> with DOM
> > >>
> > >> Okay, in this case you would need to use 'Export DCP
encryption chain'.
> > >> And hope that Qube
Master Pro accepts DOMs root
certificate/chain.
> > >>
> > >> - Carsten
> > >>
> > >>
> > >>
> > >> _______________________________________________
> > >> DCPomatic mailing list
> > >> DCPomatic(a)carlh.net
> > >> http://main.carlh.net/cgi-bin/
mailman/listinfo/dcpomatic
> > > >>
> > > > 
31 Jan
31 Jan
7:55 a.m.
New subject: [DCP-o-matic] Exporting a decryption certificate
I remember that I had an issue after I had been working with, and updating DCP-o-matic for
a long time on the same machine. I couldn't issue working certificates for a DKDM.
'Recreate certificates and keys' solved that issue. Something in preferences must
have been mixed up over so many version updates.
However, I guess before doing that, exporting the current chain and saving it under a name
of the current date and DOM version before that may be a good idea. Depends on what you
had been working on before.
- Carsten
12:25 p.m.
New subject: [DCP-o-matic] Exporting a decryption certificate
At the moment it looks like the DKDM was issued against the signing veers
and not the decrypting certainty.
On Tue, Jan 31, 2017 at 3:03 AM Carsten Kurz via DCPomatic <
dcpomatic(a)carlh.net> wrote:
I remember that I had an issue after I had been
working with, and updating
DCP-o-matic for a long time on the same machine. I couldn't issue working
certificates for a DKDM.
'Recreate certificates and keys' solved that issue. Something in
preferences must have been mixed up over so many version updates.
However, I guess before doing that, exporting the current chain and saving
it under a name of the current date and DOM version before that may be a
good idea. Depends on what you had been working on before.
- Carsten
_______________________________________________
DCPomatic mailing list
DCPomatic(a)carlh.net
http://main.carlh.net/cgi-bin/mailman/listinfo/dcpomatic
--
[image: SpectiCast] <http://www.specticast.com/> Tom Haines :: Executive
Director of Digital Cinema Services
210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA
Office: 215-618-3874 | Mobile: 484-269-8227 | Skype: tom.haines41
Facebook <https://www.facebook.com/SpectiCastEntertainment> | Twitter
<https://twitter.com/Specticast> | Google+
<https://plus.google.com/u/0/b/104757180246475600072/104757180246475600072/posts>
| Instagram <http://instagram.com/specticast> | Tumblr
<http://specticast.tumblr.com/>
2:57 p.m.
New subject: [DCP-o-matic] Exporting a decryption certificate
Thanks everyone for the help. It turns out the mastering facility used the
signing keys instead of the decrypting keys.
The DKDM issued with the decrypting keys works.
Interestingly, this did uncover a crash situation.
1. I created a new project
2. I imported the DCP using "Add Folder..."
3. Right clicked on the DCP in the content window selected Add KDM
4. Selected the original KDM the mastering facility incorrectly produced.
5. I receive the "An exception occurred: Could not decrypt KDM
(error:0407A079:rsa routines:RSA_padding_check_PKCS1_OAEP:oaep decoding
error)." error message
6. I clicked back on the imported DCP in the content window, and DoM
crashed.
This happened in 2.9.0 and 2.10.2 running on macOS Sierra 10.12.2.
When I have a second today, I'll download the test build and see if it
happens there as well.
[image: SpectiCast] <http://www.specticast.com/> Tom Haines :: Executive
Director of Digital Cinema Services
210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA
Office: 215-618-3874 | Mobile: 484-269-8227 | Skype: tom.haines41
Facebook <https://www.facebook.com/SpectiCastEntertainment> | Twitter
<https://twitter.com/Specticast> | Google+
<https://plus.google.com/u/0/b/104757180246475600072/104757180246475600072/posts>
| Instagram <http://instagram.com/specticast> | Tumblr
<http://specticast.tumblr.com/>
On Tue, Jan 31, 2017 at 7:25 AM, Tom Haines <thaines(a)specticast.com> wrote:
At the moment it looks like the DKDM was issued
against the signing veers
and not the decrypting certainty.
On Tue, Jan 31, 2017 at 3:03 AM Carsten Kurz via DCPomatic <
dcpomatic(a)carlh.net> wrote:
I remember that I had an issue after I had been
working with, and
updating DCP-o-matic for a long time on the same machine. I couldn't issue
working certificates for a DKDM.
'Recreate certificates and keys' solved that issue. Something in
preferences must have been mixed up over so many version updates.
However, I guess before doing that, exporting the current chain and
saving it under a name of the current date and DOM version before that may
be a good idea. Depends on what you had been working on before.
- Carsten
_______________________________________________
DCPomatic mailing list
DCPomatic(a)carlh.net
http://main.carlh.net/cgi-bin/mailman/listinfo/dcpomatic
--
[image: SpectiCast] <http://www.specticast.com/> Tom Haines :: Executive
Director of Digital Cinema Services
210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA
Office: 215-618-3874 <(215)%20618-3874> | Mobile: 484-269-8227
<(484)%20269-8227> | Skype: tom.haines41
Facebook <https://www.facebook.com/SpectiCastEntertainment> | Twitter
<https://twitter.com/Specticast> | Google+
<https://plus.google.com/u/0/b/104757180246475600072/104757180246475600072/posts>
| Instagram <http://instagram.com/specticast> | Tumblr
<http://specticast.tumblr.com/>
13 Feb
13 Feb
9:46 p.m.
New subject: [DCP-o-matic] Exporting a decryption certificate
On Tue, 31 Jan 2017, Tom Haines via DCPomatic wrote:
Thanks everyone for the help. It turns out the
mastering facility used the signing keys instead of the decrypting keys.
The DKDM issued with the decrypting keys works.
Interestingly, this did uncover a crash situation.
1. I created a new project
2. I imported the DCP using "Add Folder..."
3. Right clicked on the DCP in the content window selected Add KDM
4. Selected the original KDM the mastering facility incorrectly produced.
5. I receive the "An exception occurred: Could not decrypt KDM (error:0407A079:rsa
routines:RSA_padding_check_PKCS1_OAEP:oaep decoding error)." error message
6. I clicked back on the imported DCP in the content window, and DoM crashed.
This happened in 2.9.0 and 2.10.2 running on macOS Sierra 10.12.2.
When I have a second today, I'll download the test build and see if it happens there
as well.
Thanks Tom, I believe this bug is already on the to-do list. I will
investigate.
All the best,
Carl
SpectiCast
Tom Haines :: Executive Director of
Digital Cinema Services
210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA
Office: 215-618-3874 | Mobile: 484-269-8227 | Skype: tom.haines41
Facebook | Twitter | Google+ | Instagram | Tumblr
On Tue, Jan 31, 2017 at 7:25 AM, Tom Haines <thaines(a)specticast.com> wrote:
At the moment it looks like the DKDM was issued against the signing veers and not
the decrypting certainty.
On Tue, Jan 31, 2017 at 3:03 AM Carsten Kurz via DCPomatic <dcpomatic(a)carlh.net>
wrote:
I remember that I had an issue after I had been working with, and updating
DCP-o-matic for a long time on the same machine. I couldn't issue
working certificates for a DKDM.
'Recreate certificates and keys' solved that issue. Something in
preferences must have been mixed up over so many version updates.
However, I guess before doing that, exporting the current chain and saving it under
a name of the current date and DOM version before that may be
a good idea. Depends on what you had been working on before.
- Carsten
_______________________________________________
DCPomatic mailing list
DCPomatic(a)carlh.net
http://main.carlh.net/cgi-bin/mailman/listinfo/dcpomatic
--
SpectiCast
Tom Haines :: Executive Director of
Digital Cinema Services
210 W Rittenhouse Sq, Ste 400 | Philadelphia, PA 19103, USA
Office: 215-618-3874 | Mobile: 484-269-8227 | Skype: tom.haines41
Facebook | Twitter | Google+ | Instagram | Tumblr
2996
days inactive
3014
days old
11 comments
4 participants
participants (4)
-
Carl Hetherington -
Carsten Kurz -
GEORGE MAZARAKIS -
Tom Haines