Conversation
|
Note openssl can be used to convert the keys like: |
|
+1 to broadening the support of our PEM file conversion. I think the algorithm and the digest should be saved with the part for consistency with the rest of the code. I'm happy to do the refactoring to do that. Refactoring made me think about tests to make sure i didn't break anything. I noticed we don't have any tests for |
|
Mostly done but I'm looking at trying to make the support for encrypted PKCS1 files more generic rather than just supporting the one cipher. |
|
@markt-asf OK Please close this PR when yours is ready (or when you have committed). |
|
Done. Not quite as generic as I would like but I couldn't figure out how to get from DEK-Info to JSSE standard names without a manual lookup. |
I had the same problem: |
Allow to decrypt PEM keys starting like:
Proc-Type: 4,ENCRYPTED
DEK-Info: DES-EDE3-CBC,3EEF0D821F09467F
CRuSQwLsLRukfxzyTvl15rP4q+DGV3zTdD+vpZgpR/OiJvN2FAb/hLlMjo4RBE7m
...