KMIP Plugin Needs PKCS#8 for DER Format for Private Keys
Bug #1445575 reported by
Dave McCowan
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Barbican |
Fix Released
|
High
|
Dave McCowan |
Bug Description
pyOpenSSL can only generate PKCS#1 DER Format for Private Keys.
Instead, use pyCrypto with pkcs=8 to generate a DER in the proper format.
Changed in barbican: | |
assignee: | nobody → Dave McCowan (dave-mccowan) |
Changed in barbican: | |
status: | New → In Progress |
Changed in barbican: | |
milestone: | none → kilo-rc1 |
importance: | Undecided → High |
Changed in barbican: | |
status: | Fix Committed → Fix Released |
Changed in barbican: | |
milestone: | kilo-rc1 → 2015.1.0 |
To post a comment you must log in.
Reviewed: https:/ /review. openstack. org/174724 /git.openstack. org/cgit/ openstack/ barbican/ commit/ ?id=eb0e1ecf72d 4c328262354fad7 bd6d6348c938e1
Committed: https:/
Submitter: Jenkins
Branch: master
commit eb0e1ecf72d4c32 8262354fad7bd6d 6348c938e1
Author: Dave McCowan <email address hidden>
Date: Thu Apr 16 23:24:21 2015 -0400
Refactor and Fix Translation Code for PER and DER Formats
For private keys, both in PEM and DER format, we will use
PKCS#8. This patch corrects our DER format so it is now PKCS#8.
Also, move the secret type logic into translation methods and
complete the unit tests.
Closes-Bug: #1445575 5593345ca0d90a5 fa2fadb3465
Change-Id: Ifacbc496e1120b