将签名时间添加到PKCS7签名CMS？

Question

我正在尝试将签名时间属性添加到我使用SignedCMS签名的文件中。

private byte[] signFile(byte[] fileContent, X509Certificate2 verificationCert)
{
   ContentInfo contentInfo = new ContentInfo(fileContent);

   SignedCms signedCMS = new SignedCms(contentInfo);

   CmsSigner cmsSigner = new CmsSigner(SubjectIdentifierType.IssuerAndSerialNumber, verificationCert);

   Oid signedDate = new Oid("1.2.840.113549.1.9.5"); //oid for PKCS #9 signing time 

   signedDate.Value = DateTime.Now.ToString();

   CryptographicAttributeObject cryptoAtty = new CryptographicAttributeObject(signedDate);

   cmsSigner.SignedAttributes.Add(cryptoAtty);

   signedCMS.ComputeSignature(cmsSigner, false);

   byte[] encoded = signedCMS.Encode();

   return encoded;
}

Encode抛出错误：

CryptographicException: The object identifier is poorly formatted. 

有关如何正确添加签名时间的任何想法？我想我可能必须将签名时间转换为ASN.1编码对象并将其添加到cryptoAtty的值。如何将日期/时间转换为ASN.1编码对象？

Answer 1

那很容易。

cmsSigner.SignedAttributes.Add(new Pkcs9SigningTime());