[gnutls-devel] GnuTLS | certtool --to-p12 seems to alway require a password (#888)

Development of GNU's TLS library gnutls-devel at lists.gnutls.org
Mon Dec 23 20:03:11 CET 2019

Daniel Kahn Gillmor created an issue: https://gitlab.com/gnutls/gnutls/issues/888

It would be nice to permit `certtool --to-p12` to generate password-less PKCS#12 objects.

certtool --no-text --key-type rsa --hash SHA512 --bits 2048 --to-p12 --p12-name bob --password '' --load-privkey bob.key --load-ca-certificate ca.crt --load-certificate bob.crt --outfile bob.p12 < /dev/null
Generating a PKCS #12 structure...
Loading private key list...
Loaded 1 private keys.
bag_encrypt: The request is invalid.

using `--null-password` or `--empty-password` is of course not the same thing as having no password set.

(fwiw, `--password ''` is a weird way to state "no password" -- it might be nicer to explicitly add `--no-password`.  Also, it looks like `--ask-pass` is irrelevant for `--to-p12`, since it always requires a password)

Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/issues/888
You're receiving this email because of your account on gitlab.com.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20191223/eae6f452/attachment.html>

More information about the Gnutls-devel mailing list