bcgit
SHA1 used as MAC algorithm for PKCS12 format
Is your feature request related to a problem or specific use case? Please describe.
When writing certificate to PKCS12 format we successfully used solution described in discussion:
SetKeyAlgorithm(NistObjectIdentifiers.IdAes256Cbc, PkcsObjectIdentifiers.IdHmacWithSha256)
But when we check generated certificate format in openssl tool MAC algorithm is SHA1
Describe the solution you'd like Possibility to configure MAC algorithm
Product deployment Please complete the following information:
- Deployment format: software,
- Version: .NET Framework 4.8
Additional context
openssl response for command
openssl pkcs12 -info -in <cert_name>.p12:
-
for certificate generated using BouncyCastle:
-
for same certificate imported and exported from Windows:
We checked the certificate the following tools but always show SHA2: java keytool, keystore explorer, certivity, xca, windows cert store
