-
0b66fb09
by Tatsuyuki Ishi at 2026-02-27T22:14:36+01:00
crypt32: Support importing cert-only PKCS blobs in PFXImportCertStore.
gnutls_pkcs12_simple_parse() assumes the blob includes at least one private
key, which is not true for some applications. Add our own parsing loop,
capable of handling zero or one private key. Still assume that there is up
to one key and up to one chain, to avoid complexity of key/cert matching.
Wine-Bug: https://bugs.winehq.org/show_bug.cgi?id=52330
-
30bc071d
by Tatsuyuki Ishi at 2026-02-27T22:14:36+01:00
crypt32/tests: Add tests for importing cert-only PKCS#12 blobs.
Wine-Bug: https://bugs.winehq.org/show_bug.cgi?id=52330
-
986f9b66
by Tatsuyuki Ishi at 2026-02-27T22:14:36+01:00
crypt32: Verify MAC before parsing the store in PFXImportCertStore.
The gnutls_pkcs12_simple_parse man page tells you to verify the MAC
before calling parse. Do the verification after import, which was where
previously we would have called simple_parse.