|
![]() |
PKCS#12 |
Iksu Lee 2025-08-31 06:58:18 Registered user |
Hello,
I am using the StreamSec4 SDK in my Delphi project and encountered an issue when calling the ImportFromPfx() function. When I try to load a PFX (PKCS#12) certificate generated by an ACME client (Let’s Encrypt / win-acme), the function fails with an error. Could you please help me identify the cause of this issue? Any guidance on whether the SDK fully supports PFX (PKCS#12) certificates would be greatly appreciated. Thank you for your assistance. |
Henrick Wibell Hellström 2025-08-31 15:47:12 Registered user |
Could you please add more details?
- Is this the first time you attempted to open a PFX file created by win-acme with ST 4.0, or is this something that has worked in the past? - What error do you see? (Please note that PKCS#12 is an infinitely extendable standard, which means there is no such thing as "full support" for this standard. No one can ever make the claim that they "fully support PFX", because new edge case features might be added by any other implementation at any time. One implementation might add features that another implementation doesn't yet support. In some cases such features might simply be ignored by implementations that doesn't support them (such as in the case of non-critical extensions), while other implementations raise exceptions when they encounters something they're not implemented to handle. For instance, the latest version of OpenSSL still doesn't support the full IETF update of PKCS#8 (Asymmetric Key Packages, RFC 5280), while StreamSec Tools 4.0 implements considerably more of this standard. This means that you can create a perfectly standard compliant PFX file with ST 4.0 that can't be opened by OpenSSL. It is entirely possible that other implementations implement features that ST 4.0 doesn't support. But that is not necessarily the case here.) |