PemUtils fails to parse PKCS#8 private keys when using PBES2

[tvernum]

PemUtils can parse PKCS#8 encrypted files, but only if the algorithm name in the PKCS8 info is a name supported by SecretKeyFactory

elasticsearch/libs/ssl-config/src/main/java/org/elasticsearch/common/ssl/PemUtils.java

Lines 368 to 369 in 1399fb6

	EncryptedPrivateKeyInfo encryptedPrivateKeyInfo = new EncryptedPrivateKeyInfo(keyBytes);
	SecretKeyFactory secretKeyFactory = SecretKeyFactory.getInstance(encryptedPrivateKeyInfo.getAlgName());

This works when using PBES1 but not for PBES2.

See: https://discuss.elastic.co/t/elasticsearch-certutil-http/286230/2

[elasticmachine]

Pinging @elastic/es-security (Team:Security)

[jkakavas]

I guess this resolves #32021 too ?

[tvernum]

Yes, it looks like it does. I didn't remember that issue existed.