Skip to content

mention what happens if OPENSSL_NO_RC2 is defined#9415

Closed
vladak wants to merge 1 commit intoopenssl:masterfrom
vladak:pkcs12_app_man_rc2
Closed

mention what happens if OPENSSL_NO_RC2 is defined#9415
vladak wants to merge 1 commit intoopenssl:masterfrom
vladak:pkcs12_app_man_rc2

Conversation

@vladak
Copy link
Contributor

@vladak vladak commented Jul 19, 2019

The changes in cset 7e1b748 modified the pkcs12 command to use 3DES for certificate encryption if RC2 is disabled. This updates the man page to reflect the change.

@openssl-machine openssl-machine added the hold: cla required The contributor needs to submit a license agreement label Jul 19, 2019
@vladak vladak force-pushed the pkcs12_app_man_rc2 branch from 763c854 to 30b19f7 Compare July 19, 2019 14:04
@mattcaswell mattcaswell added branch: 1.1.1 Applies to OpenSSL_1_1_1-stable branch (EOL) branch: master Applies to master branch labels Jul 19, 2019
Copy link
Member

@mattcaswell mattcaswell left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks like we are still awaiting a CCLA update for you? Do you have an update on this?

@mattcaswell mattcaswell added the approval: review pending This pull request needs review by a committer label Jul 19, 2019
@vladak
Copy link
Contributor Author

vladak commented Jul 19, 2019

Yep, let me ping the internal person.

@kroeckx
Copy link
Member

kroeckx commented Jul 19, 2019

Can I suggest we just always make 3DES the default.

@mattcaswell
Copy link
Member

Can I suggest we just always make 3DES the default.

In master, yes. In 1.1.1 we can't really do that so this PR would still be relevant there.

@kroeckx
Copy link
Member

kroeckx commented Jul 19, 2019

I can't believe that NID_pbe_WithSHA1And3_Key_TripleDES_CBC is still the best that pkcs#12 supports, and I wonder what happens if you use the -aes128 option.

@vladak
Copy link
Contributor Author

vladak commented Jul 19, 2019 via email

@vladak
Copy link
Contributor Author

vladak commented Aug 8, 2019

closing to kick the CLA bot

@vladak vladak closed this Aug 8, 2019
@vladak vladak reopened this Aug 8, 2019
@openssl-machine openssl-machine removed the hold: cla required The contributor needs to submit a license agreement label Aug 8, 2019
@paulidale
Copy link
Contributor

The internal person has somewhat disappeared but they managed to obtain a letter from an othorty Filter in Oracal Legal. The response added you to the Oracle CCLA.
It will take a day for this to be incorporated into the contributors database.

@vladak
Copy link
Contributor Author

vladak commented Aug 8, 2019 via email

Copy link
Member

@mattcaswell mattcaswell left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reconfirming this now CLA issues are resolved.

Still needs second review.

@mattcaswell mattcaswell added approval: done This pull request has the required number of approvals and removed approval: review pending This pull request needs review by a committer labels Aug 9, 2019
@mattcaswell
Copy link
Member

Pushed to master and 1.1.1. Thanks.

@mattcaswell mattcaswell closed this Aug 9, 2019
levitte pushed a commit that referenced this pull request Aug 9, 2019
Reviewed-by: Tomas Mraz <[email protected]>
Reviewed-by: Matt Caswell <[email protected]>
(Merged from #9415)

(cherry picked from commit 8c47e55)
levitte pushed a commit that referenced this pull request Aug 9, 2019
Reviewed-by: Tomas Mraz <[email protected]>
Reviewed-by: Matt Caswell <[email protected]>
(Merged from #9415)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approval: done This pull request has the required number of approvals branch: master Applies to master branch branch: 1.1.1 Applies to OpenSSL_1_1_1-stable branch (EOL)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants