Problems Seal CFDI 3.3 with OpenSSL

0

I am changing from SHA-1 to SHA-256 for version 3.3 of CFDI. I use OpenSSL to generate the key and sign the original string but I can not get the validations to pass, if it generates a stamp but it is valid with several websites and it does not happen. These are the OpenSSL instructions to see if anyone can help me ...

  

openssl pkcs8 -inform DER -in Certificate.key -passin pass: Password   -out Certificate.key.pem

     

openssl dgst -sha256 -sign Certificate.key.pem StringOriginal.txt |   openssl enc -base64 -A > Stamp256.txt

    
asked by Luis Francisco López 03.10.2017 в 17:25
source

1 answer

0

That problem is very common, I list some solutions that have worked for me. Verify that:

  • The .key file corresponds to the .cer of the CFDI you are trying to validate
  • The password you are using to generate the .pem file is the correct one
  • That the original string was generated correctly. Remember that if your CFDI has add-ons, the resulting original string is different.
  • I hope this solves your problem Greetings.

        
    answered by 15.12.2017 в 10:25