Do not print private key parameters when exporting an encrypted private key.

diff --git a/src/certtool.c b/src/certtool.c
index 0ea52e8afdd77ffee2bfad44c9382c4c473d3021..4dc6dea26d66547812a26d4e02eee10f8143efe2 100644 (file)
--- a/src/certtool.c
+++ b/src/certtool.c
@@ -189,11 +189,14 @@ print_private_key (common_info_st* cinfo, gnutls_x509_privkey_t key)
   if (!key)
     return;
 
-  if (outcert_format == GNUTLS_X509_FMT_PEM)
-    privkey_info_int(cinfo, key);
 
   if (!cinfo->pkcs8)
     {
+      /* Only print private key parameters when an unencrypted
+       * format is used */
+      if (outcert_format == GNUTLS_X509_FMT_PEM)
+        privkey_info_int(cinfo, key);
+
       size = buffer_size;
       ret = gnutls_x509_privkey_export (key, outcert_format,
                                         buffer, &size);