Re: Crash when importing PKCS#12 files whose certbags are encrypted with AES

On Thursday, 10 May 2018 17:46:00 CEST Jonathan Schulze-Hewett wrote:
> All,
> 
> 
> 
> I'm sure you're aware of this already, but in case you are not, Firefox/nss
> crashes when it encounters a PKCS#12 file that uses AES to encrypt the
> certificate bags. You can create these using OpenSSL's pkcs12 command with
> the -certpbe option. Of course, it could be an issue with OpenSSL, but nss
> still shouldn't crash on them.

which bug is it? example files? version of NSS? version of OpenSSL?

and no, there are no known interoperability issues between openssl and NSS 
implementation of PKCS#12 with regards to AES encryption

-- 
Regards,
Hubert Kario
Senior Quality Engineer, QE BaseOS Security team
Web: www.cz.redhat.com
Red Hat Czech s.r.o., Purkyňova 115, 612 00  Brno, Czech Republic

-- 
dev-tech-crypto mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-tech-crypto

-----BEGIN PGP SIGNATURE-----
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=pW9l
-----END PGP SIGNATURE-----