Menu

#94 Possibility to choose PBE algorithm

open
nobody
pbe (1)
3
2016-12-14
2016-12-14
johl
No

I wish for the possibility to choose what algorithm XCA uses for creating the certificate. We have som PKI-infrastructure that do not support RC. We was recommended to use the flag "-descert" when creating/exporting the certificate. I think we can do a workaround in XCA, and export the P12 and then spilt it to ca-part, key-part and client-part, then rebuild the P12 with commandline openssl, instead of XCA.

Please consider our request. This would be a useful feature for us. Think this also would be a useful part for algorithm for private key.

openssl pkcs12 help
-certpbe alg specify certificate PBE algorithm (default RC2-40)
-keypbe alg specify private key PBE algorithm (default 3DES)

Discussion


Log in to post a comment.