PKCS12_decrypt_skey(3ssl)

PKCS12_decrypt_skey3ssl

Pkcs12 shrouded keybag decrypt functions

Usage

 #include <openssl/pkcs12.h>
 PKCS8_PRIV_KEY_INFO *PKCS12_decrypt_skey(const PKCS12_SAFEBAG *bag,
                                          const char *pass, int passlen);
 PKCS8_PRIV_KEY_INFO *PKCS12_decrypt_skey_ex(const PKCS12_SAFEBAG *bag,
                                             const char *pass, int passlen,
                                             OSSL_LIB_CTX *ctx,
                                             const char *propq);

Overview

PKCS12_decrypt_skey() Decrypt the PKCS#8 shrouded keybag contained within bag using the supplied password pass of length passlen.

PKCS12_decrypt_skey_ex() is similar to the above but allows for a library context ctx and property query propq to be used to select algorithm implementations.

Return values

Both functions will return the decrypted key or NULL if an error occurred.

Releases

3 releases since Debian 12 (Bookworm); the text changed 2 times.

  1. 12
  2. 13
  3. Arch

Conforming to

IETF RFC 7292 (<https://tools.ietf.org/html/rfc7292>)

History

PKCS12_decrypt_skey_ex() was added in OpenSSL 3.0.

From openssl 3.6.5-1 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.