[openssl-project] To use or not use the iconv API, and to use or not use other libraries

[Richard Levitte]

In message <2418FE0A-8A61-47AD-9E60-F40BD0C79582 at openssl.org> on Mon, 11 Jun 2018 19:29:09 +0200, Richard Levitte <levitte at openssl.org> said:

levitte> 
levitte> 
levitte> "Salz, Rich" <rsalz at akamai.com> skrev: (11 juni 2018 18:54:37 CEST)
levitte> >>    Except that, because of the way PKCS12_gen_mac() works, this isn't
levitte> >    true.  If the input pass phrase looks like a UTF-8 encoded string
levitte> >  (because there are valid characters in other encodings that will like
levitte> >  like UTF-8 byte sequences), it will be used as if -passutf8 was given
levitte> >    instead.
levitte> >  
levitte> >Well, at least I started down the path.  I wonder if one of those flags
levitte> >should set the keygen to asc?
levitte> 
levitte> That could be an idea, except that's not an easy change. Effectively, that's exactly equivalent to doing a naïve utf-8 encode in the application. 

BTW, this subthread is a development discussion...  shouldn't that be
happening on github, along with a WIP PR?

-- 
Richard Levitte         levitte at openssl.org
OpenSSL Project         http://www.openssl.org/~levitte/