Support for encrypted PEM

PeculiarVentures / x509

@peculiar/x509 is an easy to use TypeScript/Javascript library based on @peculiar/asn1-schema that makes generating X.509 Certificates and Certificate Requests as well as validating certificate chains easy

https://peculiarventures.github.io/x509/

MIT License

78 stars 10 forks source link

Support for encrypted PEM #12

Open TJKoury opened 2 years ago

TJKoury commented 2 years ago

Any plans to support OpenSSL encrypted PEM? For now looking to support PKCS8 using pbeWithMD5AndDES-CBC to be interoperable with OpenSSL.

rmhrisk commented 2 years ago

Not currently. OpenSSL also supports AES-GCM based PEM files. We’d accept a PR to support them.

microshine commented 2 years ago

MD5 and DES-CBC algorithms are not supported by WebCrypto API. You also need an extended crypto module.

webcrypto-liner (for Browser) and @peculiar/webcrypto (for NodeJS) implement DES-CBC.

CMCDragonkai commented 1 year ago

@microshine can you provide an example of how to load an encrypted PEM (that is accepted by openssl) into x509 using your @peculiar/webcrypto library?