KMIP Plugin Needs PKCS#8 for DER Format for Private Keys

Bug #1445575 reported by Dave McCowan
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Barbican
Fix Released
High
Dave McCowan

Bug Description

pyOpenSSL can only generate PKCS#1 DER Format for Private Keys.

Instead, use pyCrypto with pkcs=8 to generate a DER in the proper format.

Changed in barbican:
assignee: nobody → Dave McCowan (dave-mccowan)
Changed in barbican:
status: New → In Progress
Changed in barbican:
milestone: none → kilo-rc1
importance: Undecided → High
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to barbican (master)

Reviewed: https://review.openstack.org/174724
Committed: https://git.openstack.org/cgit/openstack/barbican/commit/?id=eb0e1ecf72d4c328262354fad7bd6d6348c938e1
Submitter: Jenkins
Branch: master

commit eb0e1ecf72d4c328262354fad7bd6d6348c938e1
Author: Dave McCowan <email address hidden>
Date: Thu Apr 16 23:24:21 2015 -0400

    Refactor and Fix Translation Code for PER and DER Formats

    For private keys, both in PEM and DER format, we will use
    PKCS#8. This patch corrects our DER format so it is now PKCS#8.
    Also, move the secret type logic into translation methods and
    complete the unit tests.

    Closes-Bug: #1445575
    Change-Id: Ifacbc496e1120b5593345ca0d90a5fa2fadb3465

Changed in barbican:
status: In Progress → Fix Committed
Thierry Carrez (ttx)
Changed in barbican:
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in barbican:
milestone: kilo-rc1 → 2015.1.0
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.