Masanori Satake wrote: > > I tried parsing the PFX file attached(passphrase:test) using PKCS12_parse() > function. > However I cannot get the right value of DSA private key parameter x. > > And I tried executing open-ssl command following > "openssl -in target.pfx -out target.key -nocerts -nodes". > I found that this case also resulted in that target.key outputfile has wrong > private key parameter x. > > I suppose that wrong parameter x is outputted only when MSB of parameter x > is ON. > > If there are any information on this issue, please let me know. > Thank you in advance, >
What makes you think its the wrong value if the MSB is set? Does it include a leading zero or does the value just look wrong? If so it may be the MS PKCS#12 export stuff using an invalid ASN1 INTEGER encoding. If the MSB is set it should prepend a zero otherwise it is negative. BTW what MSIE.OS are you using to create that PKCS#12 file? I tried this a while ago and it wouldn't export a DSA key to a PKCS#12 file. Steve. -- Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/ Personal Email: [EMAIL PROTECTED] Senior crypto engineer, Gemplus: http://www.gemplus.com/ Core developer of the OpenSSL project: http://www.openssl.org/ Business Email: [EMAIL PROTECTED] PGP key: via homepage. ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
