Re: Unable to load PKCS#12 with password and no MAC

2022-02-28 Thread Hubert Kario
On Thursday, 17 February 2022 10:31:40 CET, Florin Spătar wrote: I see. Thanks for the suggested workaround. Are there any plans for PKCS12_parse to support PKCS12 files without MAC or any plans to use a FIPS approved algorithm for PKCS12 MAC? Any of these would help dealing with PKCS12 files

Re: Unable to load PKCS#12 with password and no MAC

2022-02-17 Thread Tomas Mraz
On Thu, 2022-02-17 at 11:31 +0200, Florin Spătar wrote: > I see. Thanks for the suggested workaround. > > Are there any plans for PKCS12_parse to support PKCS12 files without > MAC  That would be a simple feature PR against master branch if anyone wants to take it. It would require some tests of

Re: Unable to load PKCS#12 with password and no MAC

2022-02-17 Thread Florin Spătar
I see. Thanks for the suggested workaround. Are there any plans for PKCS12_parse to support PKCS12 files without MAC or any plans to use a FIPS approved algorithm for PKCS12 MAC? Any of these would help dealing with PKCS12 files in FIPS mode. Thanks, Florin Spatar On 16.02.2022 17:25, Tomas

Re: Unable to load PKCS#12 with password and no MAC

2022-02-16 Thread Tomas Mraz
Yes, unfortunately PKCS12_parse currently does not support PKCS12 files without the MAC. Such support could be easily added. As a workaround you can look at how the pkcs12 application is implemented and use these calls instead. Regards, Tomas Mraz, OpenSSL On Wed, 2022-02-16 at 14:09 +, Flor