The code in KMF that builds PKCS#12 files is broken when using multiple certificate/key combinations.
The code as written now writes a new PKCS#12 PDU for every cert/key instead of passing a list of certs/keys to be bundled in a single PDU. This is incorrect and probably incompatible with other PKCS12 implementations.
|