Fix SSL Certificate decode error (pkcs12: expected exactly two items in the authenticated safe)

[fpawel]

The solution for the problem discribed here. It works well for me.

[AGWA]

As I mentioned in the bug report linked from that bug report, I would review a PR for a DecodeAll function: golang/go#14015 (comment)

I don't think changing the existing functions to silently ignore extra data is a good idea.

[AGWA]

Oh, I just noticed that there's already an open PR for this, #8. I'll try to take a look soon.

[fpawel]

If I understood correctly, this behavior will not be changed and the problem is not solved

[AGWA]

Yes, looking at the PR I agree it is incomplete.

Could you provide an example PKCS#12 which I can use for testing?

[fpawel]

@AGWA, I can not unfortunately, because I've got it form AMQP. @tipycalFlow mentioned "Production Apple Push Notification Service", but I have no way to use it. If I create a certificate using OpenSSL, f.e. :

1. openssl genrsa -out key.pem
2. openssl req -new -x509 -extensions v3_ca -keyout key.pem -out cert.pem -days 365
3. cat key.pem cert.pem > cert.txt
4. openssl pkcs12 -export -in cert.txt -out cert.p12
   then cert.p12 wil be valid pkcs12 certificate, that your library correctly opens.