Discussion:
openssl pkcs12 command line and UTF-8 encoded passwords
Harakiri
2005-12-16 18:07:33 UTC
Permalink
Hello,

there seems to be an issue with the openssl pkcs12
command and passwords which are UTF-8 encoded.
(OpenSSL 0.9.7d 17 Mar 2004)

Im using the option -passin file:mypin.txt

When mypin.txt contains a password (i.e. german
umlauts) which is UTF-8 encoded (bash: file mypin.txt
returns : UTF-8 Unicode text, with no line
terminators) openssl does not recognize the password
as correct.

However, when i encode the password to ISO-8859-1 it
works
(bash: file mypin.txt returns : ISO-8859 text, with no
line terminators).

This is an unexpected behaviour, because i have set my
locale option to UTF8 - i would expect that openssl
either finds the correct encoding (like the command
file does) itself OR uses the default encoding set in
my locale setting.

Is this a bug, a feature or a user error ?

Thanks

__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users-MCmKBN63+***@public.gmane.org
Automated List Manager majordomo-MCmKBN63+***@public.gmane.org
Dr. Stephen Henson
2005-12-16 18:36:52 UTC
Permalink
Post by Harakiri
Hello,
there seems to be an issue with the openssl pkcs12
command and passwords which are UTF-8 encoded.
(OpenSSL 0.9.7d 17 Mar 2004)
[snip]
Post by Harakiri
Is this a bug, a feature or a user error ?
The current behaviour of the pkcs12 utility is to effectively only support
passwords in ISO8859-1 format.

Support may be added with a -utf8 command line switch option to the pkcs12
utility at some point.

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users-MCmKBN63+***@public.gmane.org
Automated List Manager majordomo-MCmKBN63+***@public.gmane.org
Harakiri
2005-12-17 11:57:59 UTC
Permalink
Thank you
Post by Dr. Stephen Henson
The current behaviour of the pkcs12 utility is to
effectively only support
passwords in ISO8859-1 format.
Support may be added with a -utf8 command line
switch option to the pkcs12
utility at some point.
Steve.
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users-MCmKBN63+***@public.gmane.org
Automated List Manager majordomo-MCmKBN63+***@public.gmane.org
Loading...