import certificate. doesn't matter which password for cert?

RouterOS General
1

for moderator: excusemua, move this post to right forum. it’s my inattention.

Hi guru!

Import certificate:

/import certificate file-name= passphrase=

Let’s enter for

*.crt – force wrong password,
*.key – force wrong password

Result is:

decryption-failures: 1
NO decrypted-private-key

That’s GOOD!

Let’s enter for
*.crt – force wrong password,
*.key – true password

Result is:

decryption-failures: 0
cert in status KR (/certificate print)

it’s work but should not.
WHHHYYYY ???
and that’s BAD!

Thnx 4 ur time.

2

Hi,

crt file contains only public part of the certificate, that is visible to all anyway, so it’s not protected by password.