[openssl-dev] [openssl.org #4697] Bug in 1.1.0 (lost compatibility with previous releases)

David Woodhouse dwmw2 at infradead.org
Wed Oct 5 07:49:08 UTC 2016


On Wed, 2016-10-05 at 07:05 +0000, Sergey G Brazhnikov via RT wrote:
> 
> Just figured out that files encrypted with OpenSSL 1.1.0-stable can not be
> decrypted with previous releases and vice versa.
> Tested aes256, cast5-cfb, camellia128 on 1.1.0-stable, 1.0.2-stable and
> 0.9.8(cast5-cfb only)

What files? Do you mean private key files? If so, in what form?
Encrypted PEM, PKCS#8, PKCS#12? All could have different character set
behaviour. I'm assuming the passphrase has non-ASCII characters in it?

What is the local character set (chcp) when the file is created, and
when it is used? You're doing this on the same machine?

Can you show an example?

-- 
dwmw2
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5760 bytes
Desc: not available
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20161005/22b51c87/attachment.bin>


More information about the openssl-dev mailing list