Re: Error setting CRYPT_KEYINFO_QUERY attribute string
Peter Gutmann <[email protected]> Wed, 20 Mar 2013 22:35:52 +1300
| Newsgroups | gmane.comp.encryption.cryptlib |
|---|---|
| Message-ID | <[email protected]> |
Fred MAISON <[email protected]> writes: >but I am still unable to retrieve the public part of the CA in the p12 (CA >cert), on which I want make some checks (keyUsage, and so on ...) Well since PKCS #12 isn't an officially supported format in cryptlib (because of its numerous security problems - presumably you read the warnings about this when you enabled the define in config.h) it's really just coincidence if it works or not. For example if you look at the ASN.1 dump you sent me: : pbeWithSHAAnd40BitRC2-CBC (1 2 840 113549 1 12 1 6) that's a quarter-century-old old obsolete cipher using a key size that was too weak to be used fifteen years ago, so it's not too surprising that that, or any one of numerous other issues, is preventing it from being read. Peter. _______________________________________________ Cryptlib mailing list [email protected] via Mail: [email protected] Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/ http://news.gmane.org/gmane.comp.encryption.cryptlib Posts from non-subscribed addresses are blocked to prevent spam, please subscribe in order to post messages.