Support broken PKCS#12 key generation.
authorDr. Stephen Henson <steve@openssl.org>
Wed, 24 Aug 2016 17:55:51 +0000 (18:55 +0100)
committerMatt Caswell <matt@openssl.org>
Thu, 25 Aug 2016 10:43:40 +0000 (11:43 +0100)
commit647ac8d3d7143e3721d55e1f57730b6f26e72fc9
tree348db63e7d70ef08282b1ec947c524dd75e7020a
parent0fe17491c34848db3cbb39c1841099161b4b449f
Support broken PKCS#12 key generation.

OpenSSL versions before 1.1.0 didn't convert non-ASCII
UTF8 PKCS#12 passwords to Unicode correctly.

To correctly decrypt older files, if MAC verification fails
with the supplied password attempt to use the broken format
which is compatible with earlier versions of OpenSSL.

Reviewed-by: Richard Levitte <levitte@openssl.org>
apps/pkcs12.c