> [[email protected] - Tue Dec 15 09:18:36 2009]: > > If you call just SSL_library_init() and PKCS12_PBE_add some pkcs12 files > will not be loadable and moreover the openssl will crash due to missing > checks for ciphers not found. I've reported the crash in a separate > report. Perhaps the PKCS12_PBE_add should add the algorithms which are > not added in the SSL_library_init() call but which are used in the > static PBE algorithms table? >
I'm not sure how many apps still use PKCS12_PBE_add() as it has been a no-op for quite a while. I've added 40 bit RC2 to SSL_library_init() which is the only algorithm missing for the most common type of PKCS#12 file (almost all of them from browsers). That should mean apps calling SSL_library_init() and not OpenSSL_add_all_algorithms() will still work. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [email protected]
