Signature and TSTInfo not available from ParseResponse()

[jpgoldberg]

I strongly suspect that I am "using it wrong", but the structure returned by ParseResponse does not include the signature and may be missing other information which might be necessary to verifying a response.

[vanbroup]

The Parse function called by ParseResponse does verify the signature when a certificate is included. If the certificate is not included in the response it can currently not be validated.

timestamp/timestamp.go

Line 267 in 54ddd77

if err = p7.Verify(); err != nil {

We might need to create a new function to validate with an external certificate.

What is your use case?

[jpgoldberg]

Mostly I wanted to create a human readable version of the TSR. I'm happy to leave verification to OpenSSL or some other tool.