On Thursday, 17 February 2022 10:31:40 CET, Florin Spătar wrote:
I see. Thanks for the suggested workaround.
Are there any plans for PKCS12_parse to support PKCS12 files
without MAC or any plans to use a FIPS approved algorithm for
PKCS12 MAC? Any of these would help dealing with PKCS12 files
On Thu, 2022-02-17 at 11:31 +0200, Florin Spătar wrote:
> I see. Thanks for the suggested workaround.
>
> Are there any plans for PKCS12_parse to support PKCS12 files without
> MAC
That would be a simple feature PR against master branch if anyone wants
to take it. It would require some tests of
I see. Thanks for the suggested workaround.
Are there any plans for PKCS12_parse to support PKCS12 files without MAC
or any plans to use a FIPS approved algorithm for PKCS12 MAC? Any of
these would help dealing with PKCS12 files in FIPS mode.
Thanks,
Florin Spatar
On 16.02.2022 17:25, Tomas
Yes, unfortunately PKCS12_parse currently does not support PKCS12 files
without the MAC. Such support could be easily added. As a workaround
you can look at how the pkcs12 application is implemented and use these
calls instead.
Regards,
Tomas Mraz, OpenSSL
On Wed, 2022-02-16 at 14:09 +, Flor