Error message: Algorithm AES-128-CBC not recognized

Question

I get the following error message when I try to load the client key and certificate.
Any ideas of what is wrong?


2009-10-19 14:47:06 | [main] | ERROR | Redirect Err | Exception in thread "main"
2009-10-19 14:47:06 | [main] | ERROR | Redirect Err | java.lang.InternalError: Algorithm AES-128-CBC not recognized
2009-10-19 14:47:06 | [main] | ERROR | Redirect Err | at com.enterprisedt.net.puretls.crypto.B.A(Unknown Source)
2009-10-19 14:47:06 | [main] | ERROR | Redirect Err | at com.enterprisedt.net.puretls.crypto.EAYEncryptedPrivateKey.createPrivateKey(Unknown Source)
2009-10-19 14:47:06 | [main] | ERROR | Redirect Err | at com.enterprisedt.net.puretls.SSLContext.loadEAYKeyFile(Unknown Source)
2009-10-19 14:47:06 | [main] | ERROR | Redirect Err | at com.enterprisedt.net.puretls.SSLContext.loadEAYKeyFile(Unknown Source)
2009-10-19 14:47:06 | [main] | ERROR | Redirect Err | at com.enterprisedt.net.ftp.ssl.SSLFTPClient.loadClientCertificate(Unknown Source)

Answer 1

I get the following error message when I try to load the client key and certificate.
Any ideas of what is wrong?


2009-10-19 14:47:06 | [main] | ERROR | Redirect Err | Exception in thread "main"
2009-10-19 14:47:06 | [main] | ERROR | Redirect Err | java.lang.InternalError: Algorithm AES-128-CBC not recognized
2009-10-19 14:47:06 | [main] | ERROR | Redirect Err | at com.enterprisedt.net.puretls.crypto.B.A(Unknown Source)
2009-10-19 14:47:06 | [main] | ERROR | Redirect Err | at com.enterprisedt.net.puretls.crypto.EAYEncryptedPrivateKey.createPrivateKey(Unknown Source)
2009-10-19 14:47:06 | [main] | ERROR | Redirect Err | at com.enterprisedt.net.puretls.SSLContext.loadEAYKeyFile(Unknown Source)
2009-10-19 14:47:06 | [main] | ERROR | Redirect Err | at com.enterprisedt.net.puretls.SSLContext.loadEAYKeyFile(Unknown Source)
2009-10-19 14:47:06 | [main] | ERROR | Redirect Err | at com.enterprisedt.net.ftp.ssl.SSLFTPClient.loadClientCertificate(Unknown Source)

The key is generated with:
openssl genrsa -aes128 -out key.pem 2048

and the certificate with:
openssl req -new -key key.pem -out cert.csr

Answer 2

We'll check this out and get back to you.

Answer 3

Currently we don't support encrypting the private key using AES.

Best to use 3DES, e.g. openssl genrsa -des3 -out key.pem 2048

Answer 4

OK thankyou. Do you plan to support AES in the near future?
Regards Karin

Answer 5

We've a bit more testing to do, but can give you a patched build tomorrow for you to try out, hopefully. Please email us to request it.

Answer 6

Ok, we've added this functionality for AES128, AES192 and AES256. We'll send you an email with a link of where to download the patched jar. We'll release this in 3.1.2 in due course.

Answer 7

So, does it work for you?