Igor Delovski Board

[delovski]

myonlineusb - What are the differences between PEM, DER, P7B/PKCS#7, PFX/PKCS#12 certificates

PEM Format
It is the most common format that Certificate Authorities issue certificates in.

DER Format
It is a Binary form of ASCII PEM format certificate. All types of Certificates &
Private Keys can be encoded in DER format.

P7B/PKCS#7
They contain '--BEGIN PKCS--' & '--END PKCS7--' statements. It can contain
only Certificates & Chain certificates but not the Private key.

PFX/PKCS#12
They are used for storing the Server certificate, any Intermediate certificates
& Private key in one encryptable file.

[delovski]

apple - Source of SecPKCS12Import()

[Ike]

git - extractIdentityAndTrustTests - SecPKCS12Import fiddling

[Ike]

chromium.googlesource.com - x509_util_mac.cc

OSStatus CreatePolicy(...)
bool IsValidSecCertificate(...)
base::ScopedCFTypeRef<SecCertificateRef> CreateSecCertificateFromBytes()
base::ScopedCFTypeRef<SecCertificateRef>
CreateSecCertificateFromX509Certificate()
scoped_refptr<X509Certificate> CreateX509CertificateFromSecCertificate()
bool IsSelfSigned(...)
SHA256HashValue CalculateFingerprint256(...)
OSStatus CreateSSLClientPolicy(...)
OSStatus CreateSSLServerPolicy(...)
OSStatus CreateBasicX509Policy(...)
OSStatus CreateRevocationPolicies(...)

[Ike]

ars - Millions of high-security crypto keys crippled by newly discovered flaw

"The researchers examined keys used in electronic identity cards issued by
four countries and quickly found two - Estonia and Slovakia - were issuing
documents with fingerprinted keys, both of which were 2048 bits in length,
making them practically factorizable."