From 498c66ffe5a3f2b0716372fb5dc2448ec626b9ae Mon Sep 17 00:00:00 2001 From: Dmitry Eremin-Solenikov Date: Mon, 21 Nov 2016 20:52:43 +0300 Subject: certtool: support generating GOST-encrypted PKCS#8/12 files Signed-off-by: Dmitry Eremin-Solenikov --- src/certtool-common.c | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/src/certtool-common.c b/src/certtool-common.c index 88a0f19535..858de98163 100644 --- a/src/certtool-common.c +++ b/src/certtool-common.c @@ -1162,6 +1162,16 @@ int cipher_to_flags(const char *cipher) return GNUTLS_PKCS_USE_PBES2_AES_256; } else if (strcasecmp(cipher, "rc2-40") == 0) { return GNUTLS_PKCS_USE_PKCS12_RC2_40; + } else if (strcasecmp(cipher, "gost28147-tc26z") == 0) { + return GNUTLS_PKCS_USE_PBES2_GOST_TC26Z; + } else if (strcasecmp(cipher, "gost28147-cpa") == 0) { + return GNUTLS_PKCS_USE_PBES2_GOST_CPA; + } else if (strcasecmp(cipher, "gost28147-cpb") == 0) { + return GNUTLS_PKCS_USE_PBES2_GOST_CPB; + } else if (strcasecmp(cipher, "gost28147-cpc") == 0) { + return GNUTLS_PKCS_USE_PBES2_GOST_CPC; + } else if (strcasecmp(cipher, "gost28147-cpd") == 0) { + return GNUTLS_PKCS_USE_PBES2_GOST_CPD; } fprintf(stderr, "unknown cipher %s\n", cipher); -- cgit v1.2.1