Mailing Lists: Apple Mailing Lists

Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Extracting Private Keys from PFX or PKCS12



You'll need to use the higher-level API in <Security/ SecImportExport.h> for this; there is no support for PKCS12 at the CDSA level.

--dpm

On Jul 28, 2008, at 7:39 PM, Eric wrote:

Hi,

Does anyone know of a way to extract private keys from PFX or PKCS#12 formats using the CDSA/CSSM API?

The only data structure I've found that seems to be related is the CSSM_CERT_BUNDLE. If I construct one from scratch, set the encoding, and set the CSSM_DATA equal to the PFX/PKCS data, I assume that I could set the type equal to either CSSM_CERT_BUNDLE_PFX or CSSM_CERT_BUNDLE_PKCS12 and have it be valid.

From there, it appears I could use CSSM_CL_CertGroupFromVerifiedBundle to convert it into a CSSM_CERTGROUP, but I'm not sure where to go from that point because there still doesn't seem to be a way to extract the private key when it's in either the CSSM_CERT_BUNDLE or CSSM_CERTGROUP format.

If anyone can provide any insight into this issue, I would appreciate it. Please let me know.


Thanks,

- Eric P.



 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Apple-cdsa mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/apple-cdsa/email@hidden

This email sent to email@hidden

_______________________________________________ Do not post admin requests to the list. They will be ignored. Apple-cdsa mailing list (email@hidden) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/apple-cdsa/email@hidden

This email sent to email@hidden
References: 
 >Extracting Private Keys from PFX or PKCS12 (From: Eric <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.