====== Common OpenSSL Operations ======

===== Extracting a private key in PEM format from a P12 container =====

<code>
openssl pkcs12 -in container.p12 -out key.pem -legacy -nocerts -nodes
</code>

===== Extracting a certificate in PEM format from a P12 container =====

<code>
openssl pkcs12 -in container.p12 -out certificate.pem -legacy -nokeys -nodes
</code>

===== Converting a CER certificate to a PEM certificate =====

<code>
openssl x509 -inform der -in certificate.cer -out certificate.pem
</code>

===== Adding intermediate certificates to a P12 file =====

This requires a combination of some of the earlier demonstrated commands:

First, extract the key from the existing P12 container:

<code>
openssl pkcs12 -in container.p12 -out key.pem -legacy -nocerts -nodes
</code>

If you don't already have the certificate in a separate file, extract that from the P12 container too:

<code>
openssl pkcs12 -in container.p12 -out certificate.pem -legacy -nokeys -nodes
</code>

Then, concatenate the certificate and the intermediate certificates:

<code>
cat certificate.pem intermediate.pem > certs.pem
</code>

Finally, merge everything back in a new P12 container:

<code>
openssl pkcs12 -export -out all.p12 -inkey key.pem -in certs.pem
</code>

{{tag>openssl certificates}}