Re: Fwd: TLS/SSH bugs

On Tue, Dec 9, 2014 at 11:31 PM, Peter Gutmann
<[email protected]> wrote:
> Frederik Kriewitz <[email protected]> writes:
>
>>Is there some kind of command line tool to create/convert/examine p15
>>containers? I would like to test an alternative tool (instead of the APC
>>Security Wizard) to generate the file to track down these issues.
>
> No, there used to be one many years ago but it got essentially zero use so it
> was discontinued.  If you want to generate a custom cert, the easiest way to
> do it is to use one of the self-test functions, e.g. testBasicCert() or
> testComplexCert().

Is the code of the tool still available somewhere? We would be very
interested in making it work again or using it as a base for a new
one.
All we need to do is to convert one or more certs and the
corresponding key (DER/PEM/PKCS#12 format) into a p15 container. No
need to actually generate a new key/cert with it.

>>See this post for an example what the Security Wizard does with ASN1
>>UTF8Strings: http://forums.apc.com/message/65550#65550
>
> How do you get a UTF-8 string into Windows?  Its native format is
> Unicode/UTF-16, where does the UTF8 string come from?  Is this an existing
> certificate that contains UTF8 strings which the wizard is displaying?  Can
> you send me a copy of the cert?

The cert was generated by a OpenSSL based CA using UTF8Strings for the
CA subject.
I attached the certs and related files to the APC forum post.
http://forums.apc.com/message/65550#65550

I've no idea what the APC SecWiz is doing in the background.
To me it looks like a problem with the ASN1 parser or the way how it's
used by the SecWiz.

_______________________________________________
Cryptlib mailing list
[email protected] via Mail: [email protected]
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.