<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-1">
<title></title>
</head>
<body>
The changes you suggest would break the backward compatibility<br>
(xmlsec command line options are also an API). Probably the right<br>
way would be:<br>
<br>
1) define new xmlSecKeyDataFormatPkcs8 item in xmlSecKeyDataFormat enum<br>
2) implement PKCS8 keys loading in xmlSecCryptoAppKeyLoad<br>
3) fix xmlSecAppCryptoSimpleKeysMngrKeyAndCertsLoad to load DER certs<br>
when Pkcs8 format is specified<br>
4) Add new "privkeyPkcs8Param" for "--privkey-pkcs8" option<br>
5) update tests scripts<br>
<br>
xmlsec-nss might not support loading PEM and DER private key but other<br>
implementations might still find use for it.<br>
<br>
Aleksey<br>
</body>
</html>