note 130002 added to function.openssl-pkcs12-read

From: Date: Thu, 30 Jan 2025 06:02:25 +0000
Subject: note 130002 added to function.openssl-pkcs12-read
Groups: php.notes 
Request: Send a blank email to php-notes+get-221820@lists.php.net to get a copy of this message
There may be no need to configure OpenSSL to use legacy algorithms. If possible, it's easier and more portable just to convert the encrypted certificates file. The steps below use a .p12 file but it should work to swap these commands for a .pfx file. 1. Dump the certs from the old .p12 (it will ask for the certificate password): openssl pkcs12 -in old.p12 -out temp.pem -nodes -legacy 2. Make a new .p12 encrypted with algorithms used in OpenSSL v3 (create a new certificate password): openssl pkcs12 -export -in temp.pem -out new.p12 -certpbe AES-256-CBC -keypbe AES-256-CBC -iter 2048 3. Rename the new.p12 so it's accessible by your app. ---- Server IP: 45.112.84.4 Probable Submitter: 45.112.84.18 (proxied: 149.28.248.88) ---- Manual Page -- https://php.net/manual/en/function.openssl-pkcs12-read.php Edit -- https://main.php.net/note/edit/130002 Del: integrated -- https://main.php.net/note/delete/130002/integrated Del: useless -- https://main.php.net/note/delete/130002/useless Del: bad code -- https://main.php.net/note/delete/130002/bad+code Del: spam -- https://main.php.net/note/delete/130002/spam Del: non-english -- https://main.php.net/note/delete/130002/non-english Del: in docs -- https://main.php.net/note/delete/130002/in+docs Del: other reasons-- https://main.php.net/note/delete/130002 Reject -- https://main.php.net/note/reject/130002 Search -- https://main.php.net/manage/user-notes.php

« previous php.notes (#221820) next »