From tgyurci:

The Salted__ string does not always end with 9, the last character depends on the next byte, which is the salt for the key. Obviously it can be any byte.

diff --git a/magic/Magdir/ssl b/magic/Magdir/ssl
index 67e61a5b8e9a95f809d80b144f75718d9e95f1be..23093923932386704746b43a52b24412f20dd5c8 100644 (file)
--- a/magic/Magdir/ssl
+++ b/magic/Magdir/ssl
@@ -1,6 +1,6 @@
 
 #------------------------------------------------------------------------------
-# $File: ssl,v 1.3 2017/01/18 14:59:19 christos Exp $
+# $File: ssl,v 1.5 2017/12/29 04:00:07 christos Exp $
 # ssl:  file(1) magic for SSL file formats
 
 # Type: OpenSSL certificates/key files
@@ -17,4 +17,4 @@
 # OpenSSL enc file (recognized by a magic string preceding the password's salt)
 0      string  Salted__        openssl enc'd data with salted password
 # Using the -a or -base64 option, OpenSSL will base64-encode the data.
-0      string U2FsdGVkX19      openssl enc'd data with salted password, base64 encoded
+0      string U2FsdGVkX1       openssl enc'd data with salted password, base64 encoded