[gnutls-dev] unencrypted PKCS#12

Joe Orton joe at manyfish.co.uk
Wed Oct 27 12:24:01 CEST 2004


On Wed, Oct 27, 2004 at 12:08:24PM +0200, Nikos Mavrogiannopoulos wrote:
> On Wednesday 27 October 2004 09:04, Joe Orton wrote:
> 
> > > > - gnutls_pkcs12_bag_decrypt(bag, "") works, but if I pass a NULL I get
> > > >   a segmentation fault.
> > > I think I fixed that. Now it should return an error.
> > This has broken neon again!  The unclient.p12 certificate isn't readable
> > again now.  We had this working OK in neon with the old GNU TLS code.
> I reverted the change then.

Thanks Nikos.

> However how was this p12 structure generated? (using which program?)

Just using openssl pkcs12, see the makekeys.sh from neon I referenced
earlier.  Mozilla imports these certs without prompting for a password
IIRC.

joe




More information about the Gnutls-dev mailing list