default_algorithms = ALL
CRYPT_PARAMS = id-Gost28147-89-CryptoPro-A-ParamSet
-If you want use unmask private key format, you must add:
- PK_PARAMS = UNMASK
+BouncyCastle cryptoprovider has some problems with private key parsing from PrivateKeyInfo,
+so if you want to use old private key representation format, which supported by BC,
+you must add:
+ PK_PARAMS = LEGACY_PK_WRAP
to [gost_section]
Where engine_id parameter specifies name of engine (should be "gost").
#include "gost_lcl.h"
#include "e_gost_err.h"
-#define PK_UNMASK_PARAM "UNMASK"
+#define PK_WRAP_PARAM "LEGACY_PK_WRAP"
/*
* Pack bignum into byte buffer of given size, filling all leading bytes by
/* unmasked private key */
const char *pk_param = get_gost_engine_param(GOST_PARAM_PK_PARAMS);
- if(pk_param != NULL && strcmp(pk_param, PK_UNMASK_PARAM) == 0) {
+ if(pk_param != NULL && strcmp(pk_param, PK_WRAP_PARAM) == 0) {
ASN1_STRING *octet = NULL;
int priv_len = 0;
unsigned char *priv_buf = NULL;