SSL Toolkit

PKCS12 Converter ​

The PKCS12 Converter can be used to package individual PEMs and a private key into a PKCS12 PEM.

To do this, the PEMs to be packaged and the private key must be specified via the form. The form supports the input of a fixed list with a private key, an end certificate, an intermediate certificate and a root certificate. In addition, a user-defined chain of PEMs can also be specified. The private key must be specified in the first place, followed by all other PEMs.

The user-defined chain must consist of individual PEMs that are enclosed with a valid PEM header. The individual PEMs must be appended to each other without an empty line. The private key must be specified in the first place.

The following algorithms are used :

  • PBE-SHA1-RC2-40 for the certificates
  • PBE-SHA1-3DES for the private key

The PKCS12 file is generated analogous to the OpenSSL call:

bash
openssl pkcs12 -export -in $input -out $output -passout pass:$password
openssl pkcs12 -export -in $input -out $output -passout pass:$password
  • $input = The pems
  • $output = The output file
  • $password = The password