普通x509证书转p12格式

P12格式主要用于浏览器导入

先获取到x509格式证书

[root@host-10-11 ssl]# openssl x509 -text -noout -in client.crt
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:af:7f:c3:61:ee:88:c0:64:5d:38:53:4d:ce:87:9f:08:cc:28:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=CN, O=Private issued, OU=Root CA, CN=Private Root CA
        Validity
            Not Before: Apr 15 02:13:00 2023 GMT
            Not After : Apr 15 03:13:00 2023 GMT
        Subject: O=My client, CN=Client
.......

转换命令

• 无需CA参与

• 必须要有私钥和证书才可以

openssl pkcs12 -export -clcerts -in client.crt -inkey client.key -out client.p12

打赏