Added GNUTLS_BAG_SECRET that adds support for storing a randomly generated key

into a PKCS-12 structure. This is a gnutls extension, since PKCS-12 does not
specify what should be in the secret bag. What we do is store the key as
OCTET string and specify an OID of the PKCS-9 random nonce.

1 files changed, 2 insertions, 0 deletions

diff --git a/src/certtool.c b/src/certtool.c
index ae61a8e674..97647eaf01 100644
--- a/src/certtool.c
+++ b/src/certtool.c
@@ -2646,6 +2646,8 @@ BAGTYPE (gnutls_pkcs12_bag_type_t x)
       return "Encrypted";
     case GNUTLS_BAG_CRL:
       return "CRL";
+    case GNUTLS_BAG_SECRET:
+      return "Secret";
     default:
       return "Unknown";
     }