[openssl.org #2128] PKCS12_PBE_add is a noop but maybe it should add the algorithms?

2010-01-19 Thread Stephen Henson via RT
[tm...@redhat.com - Tue Dec 15 09:18:36 2009]: If you call just SSL_library_init() and PKCS12_PBE_add some pkcs12 files will not be loadable and moreover the openssl will crash due to missing checks for ciphers not found. I've reported the crash in a separate report. Perhaps the

Re: [openssl.org #2128] PKCS12_PBE_add is a noop but maybe it should add the algorithms?

2010-01-11 Thread Jouni Malinen
On Tue, Dec 15, 2009 at 10:18 AM, Tomas Mraz via RT r...@openssl.org wrote: If you call just SSL_library_init() and PKCS12_PBE_add some pkcs12 files will not be loadable and moreover the openssl will crash due to missing checks for ciphers not found. I've reported the crash in a separate

Re: [openssl.org #2128] PKCS12_PBE_add is a noop but maybe it should add the algorithms?

2009-12-16 Thread tushar ganguli
Hi, I wanted to know where in the openssl source code is the subject key identifier being generated. Is it only the SHA1 hash (160) as mentioned in RFC3280 (4.2.1.2)? Regards, Tushar

Re: [openssl.org #2128] PKCS12_PBE_add is a noop but maybe it should add the algorithms?

2009-12-16 Thread Dr. Stephen Henson
On Wed, Dec 16, 2009, tushar ganguli wrote: Hi, I wanted to know where in the openssl source code is the subject key identifier being generated. Is it only the SHA1 hash (160) as mentioned in RFC3280 (4.2.1.2)? Don't post off-topic user queries to openssl-dev. It does use SHA1 and the

[openssl.org #2128] PKCS12_PBE_add is a noop but maybe it should add the algorithms?

2009-12-15 Thread Tomas Mraz via RT
If you call just SSL_library_init() and PKCS12_PBE_add some pkcs12 files will not be loadable and moreover the openssl will crash due to missing checks for ciphers not found. I've reported the crash in a separate report. Perhaps the PKCS12_PBE_add should add the algorithms which are not added in