Dmitry Belyavskiy

@paulidale all your suggestions are accepted

The test failure seems irrelevant

@DDvO would you mind reviewing this PR after my recent updates?

@t8m Would you mind to review this PR?

Ping @openssl/committers for the 2nd review

@DDvO I see. I'd say we need to design this API first and refactor the PKCS#12 code after that. AFAIR you use PBMAC1 in CMP so we could discuss it...

This code looks good to me after the changes I've requested are done and we are interested in having it upstream. @djmdjm could you please look at it if time...