Backlog Parapheur

Une erreur avec la prod contralia survient (fonctionne en test) :
~~~
"message": "Certificate path could not be build for \"\/C=FR\/ST=75\/L=PARIS\/O=LA POSTE - DSI COURRIER\/OU=0002 356000000\/serialNumber=ACP-HORO-560-003\/CN=HORODATAGE_DE_LA_POSTE_TSU_560_003\".
Check your trusted certificates.",

"file": "\/var\/www\/html\/MaarchParapheur\/plugins\/SetaPDF-Signer\/library\/SetaPDF\/Signer\/ValidationRelatedInfo\/Collector.php",
"line": 396,
"trace": [
"#0 \/var\/www\/html\/MaarchParapheur\/plugins\/SetaPDF-Signer\/library\/SetaPDF\/Signer\/ValidationRelatedInfo\/Collector.php(664): SetaPDF_Signer_ValidationRelatedInfo_Collector->buildPath(Object(SetaPDF_Signer_X509_Certificate), Object(DateTime), NULL)",
"#1 \/var\/www\/html\/MaarchParapheur\/plugins\/SetaPDF-Signer\/library\/SetaPDF\/Signer\/ValidationRelatedInfo\/Collector.php(507): SetaPDF_Signer_ValidationRelatedInfo_Collector->_processCertificate(Object(SetaPDF_Signer_ValidationRelatedInfo_Result), 6, Object(DateTime), NULL)",
"#2 \/var\/www\/html\/MaarchParapheur\/plugins\/SetaPDF-Signer\/library\/SetaPDF\/Signer\/ValidationRelatedInfo\/Collector.php(1023): SetaPDF_Signer_ValidationRelatedInfo_Collector->_getByLeftCertificates(Object(SetaPDF_Signer_ValidationRelatedInfo_Result), Array, 6, NULL, NULL)",
"#3 \/var\/www\/html\/MaarchParapheur\/plugins\/SetaPDF-Signer\/library\/SetaPDF\/Signer\/ValidationRelatedInfo\/Collector.php(1111): SetaPDF_Signer_ValidationRelatedInfo_Collector->getBySignedData(Object(SetaPDF_Signer_Cms_SignedData), 6, NULL, NULL, Object(SetaPDF_Signer_ValidationRelatedInfo_Result))",
"#4 \/var\/www\/html\/MaarchParapheur\/plugins\/SetaPDF-Signer\/library\/SetaPDF\/Signer\/ValidationRelatedInfo\/Collector.php(1073): SetaPDF_Signer_ValidationRelatedInfo_Collector->getByIntegrityResult(Object(SetaPDF_Signer_ValidationRelatedInfo_IntegrityResult), 6, NULL, NULL, Object(SetaPDF_Signer_ValidationRelatedInfo_Result))",
"#5 \/var\/www\/html\/MaarchParapheur\/src\/app\/document\/controllers\/DigitalSignatureController.php(398): SetaPDF_Signer_ValidationRelatedInfo_Collector->getByFieldName(Object(SetaPDF_Core_Document), 'Signature')",
"#6 \/var\/www\/html\/MaarchParapheur\/src\/app\/document\/controllers\/DigitalSignatureController.php(280): Document\controllers\DigitalSignatureController::timestampHashes(Array)",
"#7 \/var\/www\/html\/MaarchParapheur\/src\/app\/document\/controllers\/DocumentController.php(856): Document\controllers\DigitalSignatureController::signHashes(Array)",
"#8 [internal function]: Document\controllers\DocumentController->setAction(Object(Slim\Http\Request), Object(Slim\Http\Response), Array)",
"#9 \/var\/www\/html\/MaarchParapheur\/vendor\/slim\/slim\/Slim\/Handlers\/Strategies\/RequestResponse.php(40): call_user_func(Array, Object(Slim\Http\Request), Object(Slim\Http\Response), Array)",
"#10 \/var\/www\/html\/MaarchParapheur\/vendor\/slim\/slim\/Slim\/Route.php(281): Slim\Handlers\Strategies\RequestResponse->invoke(Array, Object(Slim\Http\Request), Object(Slim\Http\Response), Array)",
"#11 \/var\/www\/html\/MaarchParapheur\/vendor\/slim\/slim\/Slim\/MiddlewareAwareTrait.php(117): Slim\Route->invoke(Object(Slim\Http\Request), Object(Slim\Http\Response))",
"#12 \/var\/www\/html\/MaarchParapheur\/vendor\/slim\/slim\/Slim\/Route.php(268): Slim\Route->callMiddlewareStack(Object(Slim\Http\Request), Object(Slim\Http\Response))",
"#13 \/var\/www\/html\/MaarchParapheur\/vendor\/slim\/slim\/Slim\/App.php(503): Slim\Route->run(Object(Slim\Http\Request), Object(Slim\Http\Response))",
"#14 \/var\/www\/html\/MaarchParapheur\/rest\/index.php(46): Slim\App->invoke(Object(Slim\Http\Request), Object(Slim\Http\Response))",
"#15 [internal function]: Closure->{closure}(Object(Slim\Http\Request), Object(Slim\Http\Response), Object(Slim\App))",
"#16 \/var\/www\/html\/MaarchParapheur\/vendor\/slim\/slim\/Slim\/DeferredCallable.php(57): call_user_func_array(Object(Closure), Array)",
"#17 [internal function]: Slim\DeferredCallable->_invoke(Object(Slim\Http\Request), Object(Slim\Http\Response), Object(Slim\App))",
"#18 \/var\/www\/html\/MaarchParapheur\/vendor\/slim\/slim\/Slim\/MiddlewareAwareTrait.php(70): call_user_func(Object(Slim\DeferredCallable), Object(Slim\Http\Request), Object(Slim\Http\Response), Object(Slim\App))",
"#19 \/var\/www\/html\/MaarchParapheur\/vendor\/slim\/slim\/Slim\/MiddlewareAwareTrait.php(117): Slim\App->Slim{closure}(Object(Slim\Http\Request), Object(Slim\Http\Response))",
"#20 \/var\/www\/html\/MaarchParapheur\/vendor\/slim\/slim\/Slim\/App.php(392): Slim\App->callMiddlewareStack(Object(Slim\Http\Request), Object(Slim\Http\Response))",
"#21 \/var\/www\/html\/MaarchParapheur\/vendor\/slim\/slim\/Slim\/App.php(297): Slim\App->process(Object(Slim\Http\Request), Object(Slim\Http\Response))",
"#22 \/var\/www\/html\/MaarchParapheur\/rest\/index.php(151): Slim\App->run()",
"#23 {main}"
]
~~~

Cela fonctionne avec les API DOCAPOSTE sur l'URL test.contralia.fr mais pas avec les API sur l'URL de prod www.contralia.fr.
Les certificats d'horodatage ne proviennent alors pas des mêmes entités :

Test :
cn=DOCAPOSTE - UNITE HORODATAGE
serialNumber=84169EKE258
ou=0002 320217144
2.5.4.97=NTRFR-320217144
o=DOCAPOSTE BPO
l=Ivry Sur Seine
st=94
c=FR

Prod :
CN=HORODATAGE_DE_LA_POSTE_TSU_560_003
serialNumber=ACP-HORO-560-003
OU=0002 356000000
O=LA POSTE - DSI COURRIER
L=PARIS
ST=75
C=FR

Vu avec le client.