diff options
author | Dr. Stephen Henson <steve@openssl.org> | 2002-10-03 23:53:52 +0000 |
---|---|---|
committer | Dr. Stephen Henson <steve@openssl.org> | 2002-10-03 23:53:52 +0000 |
commit | 9a48b07ee40b9d4f0f00f0a0822b1296fefb10eb (patch) | |
tree | 72d37d95bd0218dd763d0e760673af4936a921fc /CHANGES | |
parent | 230fd6b7b66f0b72b1cf7fc300652a1adf94ba1a (diff) | |
download | openssl-9a48b07ee40b9d4f0f00f0a0822b1296fefb10eb.tar.gz |
Various enhancements to PKCS#12 code, new
medium level API, improved PKCS12_create
and additional functionality in pkcs12
utility.
Diffstat (limited to 'CHANGES')
-rw-r--r-- | CHANGES | 16 |
1 files changed, 16 insertions, 0 deletions
@@ -4,6 +4,22 @@ Changes between 0.9.7 and 0.9.8 [xx XXX 2002] + *) Add new 'medium level' PKCS#12 API. Certificates and keys + can be added using this API to created arbitrary PKCS#12 + files while avoiding the low level API. + + New options to PKCS12_create(), key or cert can be NULL and + will then be omitted from the output file. The encryption + algorithm NIDs can be set to -1 for no encryption, the mac + iteration count can be set to 0 to omit the mac. + + Enhance pkcs12 utility by making the -nokeys and -nocerts + options work when creating a PKCS#12 file. New option -nomac + to omit the mac, NONE can be set for an encryption algorithm. + New code is modified to use the enhanced PKCS12_create() + instead of the low level API. + [Steve Henson] + *) Extend ASN1 encoder to support indefinite length constructed encoding. This can output sequences tags and octet strings in this form. Modify pk7_asn1.c to support indefinite length |