This article includes updates for Nexus Timestamp Server 2.3.0.

Nexus Timestamp Server includes a simple test client that can be installed with the server and be used for sending requests. It is located in the installation directory.

Mandatory parameters in a request are url and either data or tsq.

To get help, enter tsp --help and you receive this information:

Command	Description

Command	Description
--url http://timestamp.nexusgroup.com	The full URL to the TSA service.
--data <filename>	A file that shall be timestamped.
--tsq <filename>	An existing timestamp request in binary format (DER) to send.
--outrq <filename>	Save the timestamp request in binary format (DER).
--out <filename>	Save the timestamp response generated by the TSA (DER).
--alg sha-1\|sha-256\|sha-512	Digest Algorithm must be set if -data is used.
--cert	Certificate will be included in response (optional). The response will be verified if this parameter is set.
--nonce	Nonce set in request (optional).
--policy oid-policy	Policy used to generate a timestamp response (optional).
--keys filename:pin	The path and file name (optional, but needed for client ssl).
--trust filename:pin	The path and file name (optional, but needed for ssl). A directory containing trusted certificates may be specified instead of a file.
--password	Password to open key store (optional, but needed for client ssl).
--isAuthcode	true \| false - Sets the flag for Authenticode request.

Here are some examples of timestamp requests:

Example 1: Request without TLS

tsp --url http://localhost:8879/sample/tsa --tsq timestamp.tsq

Example 2: Request without TLS

tsp --url http://localhost:8879/sample/tsa --data timestamp.txt --alg SHA-256 --cert

Example 3: Request with TLS

tsp --url https://localhost:8843/sample/tsa --tsq timestamp.tsq --trust certs/ --keys keys/sslClient.p12:1234 --password 1234 --cert

Example 4: Request with TLS with client authentication

tsp --url https://localhost:8886/sample2/tsa --data timestamp.txt --alg SHA-256 --trust certs/ --keys keys/sslClient.p12:1234 --password 1234

Example 5: Authenticode Request

This example will not apply the signature on the file.

tsp --url https://localhost:8879/authenticodesample/tsa --data timestamp.ps1 --isAuthcode true --alg SHA-256

External timestamp client

To create a timestamp request:

Send the timestamp request to the timestamp service.
Verify the response. For example, you can use one of these tools:

OpenSSL
cURL

Nexus Documentation