I get the timestamp!
By Weijun-Oracle on Apr 06, 2007
It costs me several days to finally get the timestamp signing ready. The most complicated things, of course, are still understanding RFC 3161, writing the server with PKCS #7, and constructing the ASN.1 DER bytes. Besides these, I also learnt (yesterday evening) that unlike the code signer, which shows a dialog if it's not trusted (shown above as item #2), the timestamp authority must be trusted by the Java Plugin ('s root CA). Otherwise, the timestamp is silently ignored.