PKCS 12 support questions

Dmitry Eremin-Solenikov dbaryshkov at
Sun Jan 19 01:47:41 CET 2014


I'm currently looking onto extending gpgsm import to support more
private key algorithms.
(Primary target being gost ecc public keys, but see below).
After looking onto minip12.c I have several questions.

1) Is there a reason, why minip12 is so limited on supported features?
Even small changes
in the options used to generate p12 make minip12 barf on errors. Even
aes-256-cbs is not

2) Why is it implemented in gnupg itself - i.e. not in libksba? Would
it benefitable to push
at least parts of ASN.1 parsing to libksba?

With best wishes

More information about the Gnupg-devel mailing list