Comments (11)
Not for now. It is a MS specific when exporting PKCS#12. I'll have a look to see if it is simple to implement.
from yaog.
From openssl site about this ( openssl pkcs12 create ):
"This option was useful for old export grade software which could use signing only keys of arbitrary size but had restrictions on the permissible sizes of keys which could be used for encryption."
What is the use case for this ? Does MS software still uses it ?
from yaog.
Hi Patrickpr, thanks for your reply and update. yes that is one of the mandatory options for certificate to use in Microsoft SQL Server to encrypt connections using TLS.
This is the certificate requirement:
The certificate must be created by using the KeySpec option of AT_KEYEXCHANGE. Usually, the certificate's key usage property (KEY_USAGE) will also include key encipherment (CERT_KEY_ENCIPHERMENT_KEY_USAGE).
Thanks in advance.
from yaog.
This just needs a quick patch on existing p12 export, so I will start working on it, and should release a new version next week.
from yaog.
sounds great Patrick! thank you very much.
from yaog.
Hi,
Made a quick change : now you can set the private key flag on p12 export :
and it seems to do something :-) :
But I don"t have anything to test it on.
I attached below the updated version of yaog. It's only the .exe, so you need to put it in your current yaog directory replacing your exe.
Can you make some test and give me feedback with this version ?
$ sha256sum.exe YetAnotherOpensslGui.exe
0617ed4fb044eeb9acd2c409bbde0f0ec614ec0c43be7bb59ddf85bfa98235cb *YetAnotherOpensslGui.exe
Note : you need to be currently using the latest yaog version.
from yaog.
Hi Patrick, that's great. I'll download and test it. appreciate your help.
I'll keep you posted about the result.
from yaog.
Hi Patrick, good news. I could test it and it is working as expected. now MSSQL is able to recognize the certificate and I can use it.
Thank you very much. congrats! very nice tool!
from yaog.
Ok, thanks for testing.
I will finish the encryptions parameters of PKCS12 and release a new version soon.
from yaog.
@w8083 : the new release (1.1.2) is available, I suggest you download it to replace your current version.
from yaog.
thanks @patrickpr I'll do.
from yaog.
Related Issues (13)
- Impossible generate certs HOT 4
- generating a P12 file containing a Pem HOT 4
- document how to fix the windows 10 fonts DPI issue
- x509 extensions are not included in CSR HOT 2
- cannot load certificate in binary format
- 3072 bit RSA keys HOT 1
- Feature Request: Save x509 extensions in loadable file
- Feature Request Combine Private Key and CRT file to make Self Signed Cert in PFX format
- Update OpenSSL to version 1.1.1 HOT 3
- Can't find the exe HOT 1
- Error when using email to generate cert HOT 4
- interface not printing well HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from yaog.