You do break compatibility. Because there are PEM/DER clear text
key files and there are PKCS8 PEM/DER key files. The only thing that
you have to convert keys in test/* folder shows that.

Probably it would be better to introduce something like "--pkcs8-key" option
with similar switches "pem/der" format.

Aleksey

Tejkumar Arora wrote:
The PKCS8 file containing the encrypted private key can be
either in PEM or DER format, so the backward compatibility
is not really broken. The API for loading the key from
PEM/DER files takes in a password argument already, so
no API changes are needed to use PKCS8 files.

-Tej

_______________________________________________ xmlsec mailing list [EMAIL PROTECTED] http://www.aleksey.com/mailman/listinfo/xmlsec

Reply via email to