[Cryptography Team] RE: PKCS-12 support in X509

[Ron Teitelbaum]

Hey Rob,

That's terrific!!

Now I get it.  The PKCS-12 file was the file that I exported from MS IIE.  I
thought you were talking about the signed CSR, that I sent you.

Did you catch the comments on the TLS list?  I'm almost done with RC2 but do
we really need it?  I see suggestions that we shouldn't use it.  (I'll
probably finish it anyway, but I don't suggest we add it to supporteSuites
on SSL.

Ron

> -----Original Message-----
> From: Robert Withers [mailto:reefedjib at yahoo.com]
> Sent: Friday, March 30, 2007 1:25 PM
> To: Ron Teitelbaum
> Cc: Cryptography Team Development List
> Subject: PKCS-12 support in X509
> 
> Ron and all,
> 
> I just published a framework for decoding and decrypting PKCS12
> files, in order to gain access t the private key.  It is pretty
> hackish, since I assume encryption algorithms, the private key is RSA
> and the like, but it works for the example file you gave me, Ron.
> 
> Load all current packages from the repository and then run:
> 
> 	(Pkcs12PrivateKeyFileReader fromFile: pkcs12FileName)
> 		asPrivateKey
> 
> and it will return the RSAPrivateKey.  That KDF was a bitch!
> 
> cheers,
> Robert