my mistake (typo): only option to specify pkcs12 password is
CURLOPT_SSLCERTPASSWD.
or from command-line: ... --cert-type P12 --cert my.p12:secret.
if "secret" is not specified, curl not asks password and throws error
"could not parse PKCS12 file, check password, OpenSSL error
error:23076071:PKCS12 routines:PKCS12_parse:mac verify failure".

patch tested on curl-7.49.1

github pull request - best way to commit patch?

2016-06-15 15:20 GMT+04:00 Dmitry Bakshaev <dab1818_at_gmail.com>:

> only way to use PKCS12 files with password is specify it on command-line
> "--cert my.p12:secret" or set via CURLOPT_SSLCERTTYPE option.
>
> this patch adds invocation of PEM_def_callback() to grab password
> interactively if password not specified,
> like SSL_CTX_use_certificate_chain_file() does for PEM files.
>
> also patch allow to use empty passwords on PKCS12 files.
>
> code based on load_pkcs12() function from openssl/apps/apps.c
>

-------------------------------------------------------------------
List admin: https://cool.haxx.se/list/listinfo/curl-library
Etiquette: https://curl.haxx.se/mail/etiquette.html