Re: [xmlsec] xmlsec tests use private keys in the clear

[Aleksey Sanin]

The changes you suggest would break the backward compatibility
(xmlsec command line options are also an API). Probably the right
way would be:

1) define new xmlSecKeyDataFormatPkcs8 item  in xmlSecKeyDataFormat enum
2) implement PKCS8 keys loading in xmlSecCryptoAppKeyLoad
3) fix xmlSecAppCryptoSimpleKeysMngrKeyAndCertsLoad to load DER certs
when Pkcs8 format is specified
4) Add new "privkeyPkcs8Param" for "--privkey-pkcs8" option
5) update tests scripts

xmlsec-nss might not support loading PEM and DER private key but other
implementations might still find use for it.

Aleksey
_______________________________________________ xmlsec mailing list [EMAIL PROTECTED] http://www.aleksey.com/mailman/listinfo/xmlsec