452471 - pk12util -o fails when -c option specifies pkcs12v2 PBE ciphers

Status: RESOLVED WORKSFORME

(NSS :: Libraries, defect)

Description

[Elio Maldonado]

Attachment: the database I used

To reproduce
pk12util -o elio.p12 -n "elio - Dummy Ltd" -K foobar -W foobar -v -d nssdb -c "PKCS #12 V2 PBE With Sha1 and 128 Bit RC4"
result
pk12util: Algorithm: "PKCS #12 V2 PBE With Sha1 and 128 Bit RC4": security library: invalid algorithm.

Using same cipher cert encryption is okay
pk12util -o elio.p12 -n "elio - Dummy Ltd" -K foobar -W foobar -v -d nssdb -C "PKCS #12 V2 PBE With Sha1 and 128 Bit RC4"
pk12util: PKCS12 EXPORT SUCCESSFUL

I went down the list of pkcs #12 ones -- with -C
These failed
"PKCS #12 V2 PBE With Sha1 and 128 Bit RC4"
"PKCS #12 V2 PBE With Sha1 and 40 Bit RC4"
"PKCS #12 V2 PBE With Sha1 and Triple DES CBC"
"PKCS #12 V2 PBE With Sha1 and 128 Bit RC2 CBC"
"PKCS #12 V2 PBE With Sha1 and 128 Bit RC2 CBC"
"PKCS #12 V2 PBE With Sha1 and 40 Bit RC2 CBC"

These worked
"PKCS #5 Password Based Encryption with MD2 and DES CBC"
"PKCS #5 Password Based Encryption with MD5 and DES CBC"
"PKCS #5 Password Based Encryption with SHA1 and DES CBC"
"PKCS #5 Password Based Encryption with MD2 and DES CBC"
"PKCS #5 Password Based Encryption with MD5 and DES CBC"
"PKCS #5 Password Based Encryption with SHA1 and DES CBC"

Comment 1

[Elio Maldonado]

I meant -c (lower case) in above list.

Comment 2

[Robert Relyea]

This seems to be fixed now, at least in the patch I have for Bug 1707130. I believe they have probably been fixed for quite some time. I suspect it was related to case and non-case compares because the pkcs12 versions in NSS have a capital 'A' in and where the pkcs5v1 have a lower case 'a'.