Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-41038

QSslKey reading / writing DER with a passphrase is bogus

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • P2: Important
    • 5.4.0 Alpha
    • 5.3.1
    • Network: SSL
    • None
    •  5c3a499c9ffbf2d4872dd6a6916b3a3a9a7d9cdd

    Description

      QSslKey provides a constructor which is supposed to be able to read DER data, optionally encrypted with a passphrase. Conversely it provides a toDer method which outputs DER data, optionally encrypted with a passphrase.

      The problem is that "encrypted DER" on its own is unusable : we lack information about the crypto algorithm and the initialization vector (IV) which were used.

      Note that this problem only affects DER input / output, the PEM format is fine as in addition to the encrypted data it has RFC822-style headers which convey the algorithm / IV information.

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            sharky Jeremy Lainé
            sharky Jeremy Lainé
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes