Re: Error setting CRYPT_KEYINFO_QUERY attribute string

Peter Gutmann <[email protected]> Wed, 20 Mar 2013 22:35:52 +1300
Newsgroups gmane.comp.encryption.cryptlib
Message-ID <[email protected]>
Fred MAISON <[email protected]> writes:

>but I am still unable to retrieve the public part of the CA in the p12 (CA
>cert), on which I want make some checks (keyUsage, and so on ...)

Well since PKCS #12 isn't an officially supported format in cryptlib (because
of its numerous security problems - presumably you read the warnings about
this when you enabled the define in config.h) it's really just coincidence if
it works or not.  For example if you look at the ASN.1 dump you sent me:

         :             pbeWithSHAAnd40BitRC2-CBC (1 2 840 113549 1 12 1 6)

that's a quarter-century-old old obsolete cipher using a key size that was too
weak to be used fifteen years ago, so it's not too surprising that that, or
any one of numerous other issues, is preventing it from being read.

Peter.

_______________________________________________
Cryptlib mailing list
[email protected] via Mail: [email protected]
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.