Re: openssl and jss PKCS8 compatibility

2007-08-15 Thread Nelson Bolyard
David Stutzman wrote: > As an additional note on this I tried extending PBEAlgorithm so I could > create one using the constructor and I passed in 8 for the salt length > instead of the 20 that is passed in by default with the > PBE_SHA1_DES3_CBC static I am using. JSS still gave me the longer sal

Re: openssl and jss PKCS8 compatibility

2007-08-15 Thread David Stutzman
As an additional note on this I tried extending PBEAlgorithm so I could create one using the constructor and I passed in 8 for the salt length instead of the 20 that is passed in by default with the PBE_SHA1_DES3_CBC static I am using. JSS still gave me the longer salt when I viewed it with du

openssl and jss PKCS8 compatibility

2007-08-15 Thread David Stutzman
I'm trying to export a key in PKCS8 format using JSS that is readable by OpenSSL. Using dumpasn1, I can see that the structure of the 2 objects are similar, but not the same. I *think* I see where the problem is but I'm not sure. The only thing I see different is the 3rd SEQUENCE down, which I t