note 130002 added to function.openssl-pkcs12-read
| From: | quinn@strangecode.com | Date: | Thu, 30 Jan 2025 06:02:25 +0000 |
| Subject: | note 130002 added to function.openssl-pkcs12-read | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-221820@lists.php.net to get a copy of this message | ||
There may be no need to configure OpenSSL to use legacy algorithms. If possible, it's easier
and more portable just to convert the encrypted certificates file. The steps below use a
.p12 file but it should work to swap these commands for a .pfx file.
1. Dump the certs from the old .p12 (it will ask for the certificate password):
openssl pkcs12 -in old.p12 -out temp.pem -nodes -legacy
2. Make a new .p12 encrypted with algorithms used in OpenSSL v3 (create a new
certificate password):
openssl pkcs12 -export -in temp.pem -out new.p12 -certpbe AES-256-CBC -keypbe AES-256-CBC -iter 2048
3. Rename the new.p12 so it's accessible by your app.
----
Server IP: 45.112.84.4
Probable Submitter: 45.112.84.18 (proxied: 149.28.248.88)
----
Manual Page -- https://php.net/manual/en/function.openssl-pkcs12-read.php
Edit -- https://main.php.net/note/edit/130002
Del: integrated -- https://main.php.net/note/delete/130002/integrated
Del: useless -- https://main.php.net/note/delete/130002/useless
Del: bad code -- https://main.php.net/note/delete/130002/bad+code
Del: spam -- https://main.php.net/note/delete/130002/spam
Del: non-english -- https://main.php.net/note/delete/130002/non-english
Del: in docs -- https://main.php.net/note/delete/130002/in+docs
Del: other reasons-- https://main.php.net/note/delete/130002
Reject -- https://main.php.net/note/reject/130002
Search -- https://main.php.net/manage/user-notes.php