Re: [xmlsec] xmlsec tests use private keys in the clear

[Tejkumar Arora]

Aleksey Sanin wrote:

If you give people a safe with a provision to lock it, but they want to
leave it unlocked, not much you can do about it :).
But if you refuse to give them a safe without  a locking provision, atleast
you're doing your part in discouraging bad habits....

I think you misunderstood me. I never said that I do not want ot provide a safe.
The only thing I said is that I do not want to say that you shouldn't keep your
money w/o a safe if you understand what are you doing (for example,
you put your money in house with 24x7 guards.

Nothing else.
The difference between --privkey and --pkcs8 is marginal really.
I lean towards --privkey because it becomes immediately obvious
what the arg is. "pkcs8" may not be common knowledge.

The command line becames bigger and bigger :)

In either case, your test scripts will need another parameter in order
to support all pvt key formats (der, pem, pkcs8 der, pkcs8 pem).

Oh, yes. You are right :(

I'll send the changes in a few days.

Let me know if you want me to help you with something :)

Aleksey

I'm attaching the changes. There's a new optional parameter to the test
scripts. By default, the tests will run with certs/pubkeys in der format, and
private keys in pkcs8-der format.

thanks

-Tej

diff.gz
Description: GNU Zip compressed data

tarball.gz
Description: GNU Zip compressed data