|
 |
90c79f |
diff -up ./cmd/pk12util/pk12util.c.orig ./cmd/pk12util/pk12util.c
|
|
|
90c79f |
--- ./cmd/pk12util/pk12util.c.orig 2021-05-28 02:50:43.000000000 -0700
|
|
|
90c79f |
+++ ./cmd/pk12util/pk12util.c 2021-06-15 17:05:37.200262345 -0700
|
|
|
90c79f |
@@ -1031,9 +1031,11 @@ main(int argc, char **argv)
|
|
|
90c79f |
char *export_file = NULL;
|
|
|
90c79f |
char *dbprefix = "";
|
|
|
90c79f |
SECStatus rv;
|
|
|
90c79f |
- SECOidTag cipher = SEC_OID_AES_256_CBC;
|
|
|
90c79f |
- SECOidTag hash = SEC_OID_SHA256;
|
|
|
90c79f |
- SECOidTag certCipher = SEC_OID_AES_128_CBC;
|
|
|
90c79f |
+ SECOidTag cipher =
|
|
|
90c79f |
+ SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_3KEY_TRIPLE_DES_CBC;
|
|
|
90c79f |
+ SECOidTag hash = SEC_OID_SHA1;
|
|
|
90c79f |
+ SECOidTag certCipher =
|
|
|
90c79f |
+ SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_40_BIT_RC2_CBC;
|
|
|
90c79f |
int keyLen = 0;
|
|
|
90c79f |
int certKeyLen = 0;
|
|
|
90c79f |
secuCommand pk12util;
|
|
|
90c79f |
@@ -1147,6 +1149,9 @@ main(int argc, char **argv)
|
|
|
90c79f |
}
|
|
|
90c79f |
}
|
|
|
90c79f |
|
|
|
90c79f |
+ if (PK11_IsFIPS()) {
|
|
|
90c79f |
+ certCipher = SEC_OID_UNKNOWN;
|
|
|
90c79f |
+ }
|
|
|
90c79f |
if (pk12util.options[opt_CertCipher].activated) {
|
|
|
90c79f |
char *cipherString = pk12util.options[opt_CertCipher].arg;
|
|
|
90c79f |
|
|
|
90c79f |
diff -up ./tests/tools/tools.sh.orig ./tests/tools/tools.sh
|
|
|
90c79f |
--- ./tests/tools/tools.sh.orig 2021-06-15 17:06:27.650564449 -0700
|
|
|
90c79f |
+++ ./tests/tools/tools.sh 2021-06-15 17:07:59.934117192 -0700
|
|
|
90c79f |
@@ -47,9 +47,9 @@
|
|
|
90c79f |
"PKCS #5 Password Based Encryption with SHA-1 and DES-CBC"
|
|
|
90c79f |
|
|
|
90c79f |
# if we change the defaults in pk12util, update these variables
|
|
|
90c79f |
- export CERT_ENCRYPTION_DEFAULT="AES-128-CBC"
|
|
|
90c79f |
- export KEY_ENCRYPTION_DEFAULT="AES-256-CBC"
|
|
|
90c79f |
- export HASH_DEFAULT="SHA-256"
|
|
|
90c79f |
+ export CERT_ENCRYPTION_DEFAULT=${pkcs12v2pbeWithSha1And40BitRc2Cbc}
|
|
|
90c79f |
+ export KEY_ENCRYPTION_DEFAULT=${pkcs12v2pbeWithSha1AndTripleDESCBC}
|
|
|
90c79f |
+ export HASH_DEFAULT="SHA-1"
|
|
|
90c79f |
|
|
|
90c79f |
export PKCS5v1_PBE_CIPHERS="${pkcs5pbeWithMD2AndDEScbc},\
|
|
|
90c79f |
${pkcs5pbeWithMD5AndDEScbc},\
|