tree 807613089f00a8872526d79d870a81c447d76026
parent 84c0c900fce961baf99fe000f1ca4a2fc5911b41
author David Benjamin <davidben@google.com> 1614446647 -0500
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1614627565 +0000

Support creating unencrypted PKCS#12 files.

PKCS#12 is overly general and, among other things, supports disabling
encryption. In practice, the unencrypted form is not widely implemented.
Moreover, even in contexts where cleartext is fine, an unencrypted
PKCS#12 file still requires a password for the mandatory MAC component.
They're not very useful.

However, cryptography.io uses them. Previously, we added support for
parsing these. This CL adds support for creating them too, because now
cryptography.io now also depends on that.

Change-Id: Ib7c4e29615047b6c73f887fea7c80f8844999bb7
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/46045
Commit-Queue: David Benjamin <davidben@google.com>
Reviewed-by: Adam Langley <agl@google.com>