markdown 将pfx SSL证书转换为cert / primary密钥

Posted 2021-05-05

Requires the passcode for the .pfx file prior.

Extract .key file from .pfx file (will need to set a password here too):
```sh
openssl pkcs12 -in [yourfile.pfx] -nocerts -out [keyfile-encrypted.key]
```

Extract .crt file from .pfx file:
```sh
openssl pkcs12 -in [yourfile.pfx] -clcerts -nokeys -out [certificate.crt]
```

Extract pem formatted .key from previous .key:
```
openssl rsa -in [keyfile-encrypted.key] -outform PEM -out [keyfile-encrypted-pem.key]
```

Source:

- https://www.markbrilman.nl/2011/08/howto-convert-a-pfx-to-a-seperate-key-crt-file/