Skip to content

Switch PKCS#12 library to software.sslmate.com/src/go-pkcs12#328

Merged
manicminer merged 1 commit intomainfrom
auth/pkcs12-sslmate
Feb 22, 2023
Merged

Switch PKCS#12 library to software.sslmate.com/src/go-pkcs12#328
manicminer merged 1 commit intomainfrom
auth/pkcs12-sslmate

Conversation

@manicminer
Copy link
Copy Markdown
Contributor

@manicminer manicminer commented Feb 21, 2023

golang.org/x/crypto/pkcs12 is unmaintained, this replacement is license compatible and more up-to-date.

This wins us the following:

  • Support for parsing out certificate chains stored in PKCS#12 bundles
  • Support for SHA256 HMAC which is the default hash function for PKCS#12 bundles with newer versions of OpenSSL/LibreSSL

Related: hashicorp/terraform-provider-azurerm#19374
Related: manicminer/hamilton#212

golang.org/x/crypto/pkcs12 is unmaintained, this replacement is license
compatible and more up-to-date.

This wins us the following:
- Support for parsing out certificate chains stored in PKCS#12 bundles
- Support for SHA256 HMAC which is the default hash function for PKCS#12
  bundles with newer versions of OpenSSL/LibreSSL
@manicminer manicminer requested a review from a team as a code owner February 21, 2023 20:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

release-once-merged The SDK should be released once this PR is merged

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants