Re: openssl 1.0.1c cannot parse newest GOST/PFX

2012-11-13 Thread Dr. Stephen Henson
On Tue, Nov 13, 2012, Eugene Grosbein wrote: Hi! Recently we purchased Aladdin eToken USB with digital signature inside that uses GOST 34.11/34.10-2001 for official electronic contacts with Russian Government. It works just fine with Windows XP and CryptoPro CSP. I've exported it with

Re: openssl 1.0.1c cannot parse newest GOST/PFX

2012-11-13 Thread Eugene Grosbein
13.11.2012 20:10, Dr. Stephen Henson пишет: On Tue, Nov 13, 2012, Eugene Grosbein wrote: Hi! Recently we purchased Aladdin eToken USB with digital signature inside that uses GOST 34.11/34.10-2001 for official electronic contacts with Russian Government. It works just fine with Windows XP

Re: openssl 1.0.1c cannot parse newest GOST/PFX

2012-11-13 Thread Dr. Stephen Henson
On Tue, Nov 13, 2012, Eugene Grosbein wrote: 13.11.2012 20:10, Dr. Stephen Henson ?: On Tue, Nov 13, 2012, Eugene Grosbein wrote: Hi! Recently we purchased Aladdin eToken USB with digital signature inside that uses GOST 34.11/34.10-2001 for official electronic contacts with

Re: openssl 1.0.1c cannot parse newest GOST/PFX

2012-11-13 Thread Eugene Grosbein
14.11.2012 00:33, Dr. Stephen Henson пишет: You can only convert the certificates to PKCS#7 not the private key. There is an option in Windows to export to PKCS#7. Yes, openssl converts the certificates with -nokeys option just fine. If you want to decrypt the PKCS#12 file you need to

openssl 1.0.1c cannot parse newest GOST/PFX

2012-11-12 Thread Eugene Grosbein
Hi! Recently we purchased Aladdin eToken USB with digital signature inside that uses GOST 34.11/34.10-2001 for official electronic contacts with Russian Government. It works just fine with Windows XP and CryptoPro CSP. I've exported it with its private key to pfx file (PKCS#12 format) using