Why openssl on windows produces error but not on centos to read pkcs12

ruby-talk
1

Hi,

Its been days trying to figure out what could be wrong, hence I need
some one who already did tried to read pkcs12 certificate before.

This is code which I'm using both on centos and windows,

require 'openssl'

if ARGV.length == 2
pkcs12 = OpenSSL::PKCS12.new(File.read(ARGV[0]), ARGV[1])
p pkcs12.certificate
else
puts "Usage: load_cert.rb "
end

Running this produces error on windows but not in linux/cygwin

Error:

OpenSSL::PKCS12::PKCS12Error: PKCS12_parse: mac verify failure from
(irb):21:in initialize' from (irb):21:innew' from (irb):21 from
C:/Ruby192/bin/irb:12:in `'

This has been so frustrating, that I tried to produce own certificate
own windows then tried again but it gives same error

I did these steps

- Use this software to create certificates http://xca.sourceforge.net/
- Exported UserCert2.crt, ruby reads correctly
crt = File.read "UserCert2.crt"
irb(main):018:0> certificate = OpenSSL::X509::Certificate.new crt
=> #<OpenSSL::X509::Certificate subject=/CN=Noman Tariq,
issuer=/C=AU/ST=NSW/CN=CA, serial=2, not_before=2012-04-22 05:54:00 UTC,
not_after=2013-04-22 05:54:00

- Exported to usercert.p12, ruby gives same error

OpenSSL::PKCS12::PKCS12Error: PKCS12_parse: mac verify failure from
(irb):21:in initialize' from (irb):21:innew' from (irb):21 from
C:/Ruby192/bin/irb:12:in `'

Thanks in advance for any clue or help,
Nauman

···

--
Posted via http://www.ruby-forum.com/\.

2

Maybe Process Monitor from Sysinternals Suite can help you follow
syscalls of the process and identify the issue.

Kind regards

robert

···

On Sun, Apr 22, 2012 at 9:35 AM, Nauman Thanvi <lists@ruby-forum.com> wrote:

OpenSSL::PKCS12::PKCS12Error: PKCS12_parse: mac verify failure from
(irb):21:in initialize' from (irb):21:innew' from (irb):21 from
C:/Ruby192/bin/irb:12:in `'

Thanks in advance for any clue or help,

--
remember.guy do |as, often| as.you_can - without end
http://blog.rubybestpractices.com/

3

Nauman Thanvi wrote in post #1057798:

This is code which I'm using both on centos and windows,

require 'openssl'

if ARGV.length == 2
pkcs12 = OpenSSL::PKCS12.new(File.read(ARGV[0]), ARGV[1])

I don't use Windows, but could it be that File.read() is opening the
file in text mode, and thus doing CR/LF conversions?

Try:

... File.read(ARGV[0], :mode=>"rb") ...

(which looks to have been added in 1.9.x), or:

data = File.open(ARGV[0],"rb") { |f| f.read }
pkcs12 = OpenSSL::PCKS12.new(data, ARGV[1])

The documentation doesn't make it clear whether IO.read() opens in text
or binary mode, but it's possible that it defaults to text.

Regards,

Brian.

···

--
Posted via http://www.ruby-forum.com/\.

4

Robert Klemme wrote in post #1057821:

···

On Sun, Apr 22, 2012 at 9:35 AM, Nauman Thanvi <lists@ruby-forum.com> > wrote:

OpenSSL::PKCS12::PKCS12Error: PKCS12_parse: mac verify failure from
(irb):21:in initialize' from (irb):21:innew' from (irb):21 from
C:/Ruby192/bin/irb:12:in `'

Thanks in advance for any clue or help,

Maybe Process Monitor from Sysinternals Suite can help you follow
syscalls of the process and identify the issue.

Kind regards

robert

I don't seems to understand, how in this context it can help me? can you
please explain bit more?

--
Posted via http://www.ruby-forum.com/\.

5

W dniu 23 kwietnia 2012 19:11 użytkownik Brian Candler
<lists@ruby-forum.com> napisał:

The documentation doesn't make it clear whether IO.read() opens in text
or binary mode, but it's possible that it defaults to text.

File.read() does CRLF conversion.

File.binread() doesn't. (It was added in 1.9.3 I think.)

-- Matma Rex

6

PM is capable of tracing all syscalls and recording them along with
arguments and return values IIRC. That way you often get a good idea
what a program does and what the source of such an error might be. Of
course this works only if the error has something to do with the
system and is not internally in program logic. I suspect your case
has to do with the system. That's why I suggested this.

Cheers

robert

···

On Mon, Apr 23, 2012 at 3:12 AM, Nauman Thanvi <lists@ruby-forum.com> wrote:

I don't seems to understand, how in this context it can help me? can you
please explain bit more?

--
remember.guy do |as, often| as.you_can - without end
http://blog.rubybestpractices.com/

7

Bartosz Dziewoński wrote in post #1058033:

W dniu 23 kwietnia 2012 19:11 użytkownik Brian Candler
<lists@ruby-forum.com> napisał:

The documentation doesn't make it clear whether IO.read() opens in text
or binary mode, but it's possible that it defaults to text.

File.read() does CRLF conversion.

File.binread() doesn't. (It was added in 1.9.3 I think.)

-- Matma Rex

Thanks Guys, that was the problem, I did already figure it out yesterday
after spending lot of time, wish had seen forum :)..

So this works,

File.read(ARGV[0], "rb")

Thanks all for replies,
Nauman

···

--
Posted via http://www.ruby-forum.com/\.