Parse error on certificate stored in DB

[rabol]

Hi

When trying to retrieve a certificate from the MySQL I get this error when calling the parse() method:

Process runtime error, reason: "8004387136:error:0DFFF0A8:asn1 encoding routines:
CRYPTO_internal:wrong tag:/AppleInternal/Library/BuildRoots/9e200cfa-7d96-11ed-886f-a23c4f261b56/Library/Caches/com.apple.xbs/Sources/libressl/libressl-3.3/crypto/asn1/tasn_dec.c:1167:. 8004387136:error:0DFFF03A:asn1 encoding routines:
CRYPTO_internal:nested asn1 error:/AppleInternal/Library/BuildRoots/9e200cfa-7d96-11ed-886f-a23c4f261b56/Library/Caches/com.apple.xbs/Sources/libressl/libressl-3.3/crypto/asn1/tasn_dec.c:337:Type=PKCS12. "  

Running on a MBP with M1 processor

[salim-sudo]

The same error happened to me, with the system windows 10, postgresql 10 and Laravel 10:
LSNepomuceno\LaravelA1PdfSign\Exceptions\ProcessRunTimeException: [0]: Process runtime error, reason: "1828:error:0D0680A8:asn1 encoding routines:asn1_check_tlen:wrong tag:crypto\asn1\tasn_dec.c:1149:. . 1828:error:0D07803A:asn1 encoding routines:asn1_item_embed_d2i:nested asn1 error:crypto\asn1\tasn_dec.c:309:Type=PKCS12. .

[salim-sudo]

In my temp folder, the certificate pfx obtained is not encrypted. When I open a certificate, I get the following information:

i have problem in this code

function decryptCertData(
string $hashKey,
string $encryptCert,
string $password,
bool $isBase64 = false,
bool $usePathEnv = false,
): ManageCert
{

    $cert = (new ManageCert)->setHashKey($hashKey);
   
    $uuid = Str::orderedUuid();
    $pfxName = "{$cert->getTempDir()}{$uuid}.pfx";

    $decryptedData = $cert->getEncrypter()->decryptString($encryptCert);
//  dd((new ManageCert)->setHashKey($hashKey),$encryptCert,$decryptedData,$cert->getEncrypter()->decryptString($password));
    File::put($pfxName, $isBase64 ? base64_decode($decryptedData) : $decryptedData);

    return $cert->fromPfx(
        $pfxName,
        $cert->getEncrypter()->decryptString($password),
        $usePathEnv
    );

[lsnepomuceno]

Hello @salim-sudo ,

To sign a file with a digital certificate, the decryptString method is not required. This method is only used when encrypting the certificate for storage in a database, for instance.

To use the .pfx file, simply provide the certificate path and password, as shown in the documentation example:
https://laravel-a1-pdf-sign.netlify.app/docs/1.x/working-with-certificate

If you prefer a simpler process, you can just use the helper. In this case, you only need to provide the path to the PDF file, the certificate path, and the password:
https://laravel-a1-pdf-sign.netlify.app/docs/1.x/helpers