default_algorithms = ALL
CRYPT_PARAMS = id-Gost28147-89-CryptoPro-A-ParamSet
-If you want use unmask private key format, you must add:
- PK_PARAMS = UNMASK
+BouncyCastle cryptoprovider has some problems with private key parsing from PrivateKeyInfo,
+so if you want to use old private key representation format, which supported by BC,
+you must add:
+ PK_PARAMS = LEGACY_PK_WRAP
to [gost_section]
Where engine_id parameter specifies name of engine (should be "gost").