Joris Beckers

If I locally patch Cryptography and change these lines https://github.com/pyca/cryptography/blob/4a4f4d94ce5a641de3020042c70c1734af265d5e/src/cryptography/hazmat/backends/openssl/backend.py#L2196-L2199 into ```python nid_cert = 427 nid_key = 427 # At least we can set this higher than OpenSSL's default pkcs12_iter...

> We originally chose this because PKCS12 is trash and trying to use AES resulted in lots of things being unable to read the files we created. However, OpenSSL 3.0...

I've also done some tests regarding compatibility with AES-256-CBC encrypted PKCS12 files: 1. ❌ Windows server 2016 2. ✔ Windows Server 2019 3. ✔ Windows 10 4. ❌ keytool of...

It seems like @AHalvar 's remark about being able to set the MAC algo is an important one. With v37.0's move to OpenSSL 3, it also changed to it's defaults....

Would it be possible to expose `PKCS12_set_mac` in a next release? Then I can try myself to override a few things. I tried compiling on windows but I can't manage...

@reaperhulk any chance for the extra binding to be available in a release any time soon? I see it didn't got included in 37.0.3 I now need to tell users...

#7043 has some openssl commands to troubleshoot those PKCS#12 files. If a recent version of openSSL can't read them, I think you can be confident that it's a invalid file....

And what's the output from command below? ``` openssl pkcs12 -noout -info -in some.pfx ``` With a OpenSSL v3, try converting the PFX to 3DES + SHA1 MAC. Does that...

How about, instead of crafting a input fields from the model, make the current input text area a real Json editor? Like the left side of the swagger editor tool...

For me, this also includes sorting photos by "date taken". Almost all my albums tell a story and stories have a sequence of events. Not being able the sort by...