exporting private key from gpgsm

[Simon Josefsson]

Anand Kumria <wildfire at progsoc.uts.edu.au> writes:

> form, which I believe is PKCS#8 form. Worse neither openssl (0.9.8a-3)
> not gnutls (1.2.9-2) are able to parse the PKCS#12 secret key that gpgsm
> (1.9.19-2) produces.
>
> eve:[~/PKI/CA]% openssl pkcs12 -info -in giskard.key.p12
> 14397:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag:tasn_dec.c:1282:
> 14397:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error:tasn_dec.c:374:Type=PKCS12
>
> eve:[~/PKI/CA]% certtool --p12-info --infile giskard.key.pem
> Enter password:
> p12_import: Base64 decoding error.
>
> Any information, or suggestions, would be appreciatd.

You may want to try GnuTLS 1.3.2; I fixed several PKCS#12 and PKCS#8
problems in 1.3.1.  One of the bugs caused the certtool output above.

The OpenSSL output suggest there is a deeper problem though.

Cheers,
Simon