Hi Fraser, Could you please do the following first? 1. file a Mozilla bugzilla bug for this against Product JSS Release 4.4.1, then assign to yourself: https://bugzilla.mozilla.org/ 2. After making sure your patch compiles well with the 4.4.1 base, attach the patch to that ticket, and mark reviewers thanks! Christina On 04/04/2017 02:56 AM, Fraser Tweedale wrote:
Hi team,
Please review attached patches for JSS and Dogtag that:
- add some new EncryptedPrivateKeyInfo export and import functions to JSS
- update Dogtag's `pki pkcs12' command to use the new functions to achieve AES encryption of the key bags, with wrapping/unwrapping occurring on the token.
PKCS #12 files produced by current releases continue to import properly (of course, this is an important test vector).
These patches do not address the PKCS #12 KRA recovery export; This is my next task and separate patches will be produced.
Thanks, Fraser