newpass_bag
if (!newpass_bag(sk_PKCS12_SAFEBAG_value(bags, i), oldpass, newpass,
static int newpass_bag(PKCS12_SAFEBAG *bag, const char *oldpass,