Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SHA1 used as MAC algorithm for PKCS12 format #582

Open
greygreg87 opened this issue Dec 10, 2024 · 0 comments
Open

SHA1 used as MAC algorithm for PKCS12 format #582

greygreg87 opened this issue Dec 10, 2024 · 0 comments

Comments

@greygreg87
Copy link

greygreg87 commented Dec 10, 2024

Is your feature request related to a problem or specific use case? Please describe.
When writing certificate to PKCS12 format we successfully used solution described in discussion:
SetKeyAlgorithm(NistObjectIdentifiers.IdAes256Cbc, PkcsObjectIdentifiers.IdHmacWithSha256)
But when we check generated certificate format in openssl tool MAC algorithm is SHA1

Describe the solution you'd like
Possibility to configure MAC algorithm

Product deployment
Please complete the following information:

  • Deployment format: software,
  • Version: .NET Framework 4.8

Additional context
openssl response for command
openssl pkcs12 -info -in <cert_name>.p12:

  • for certificate generated using BouncyCastle:
    image

  • for same certificate imported and exported from Windows:
    image

We checked the certificate the following tools but always show SHA2: java keytool, keystore explorer, certivity, xca, windows cert store

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant