OPENSSL-PKCS12(1ssl) OpenSSL OPENSSL-PKCS12(1ssl) openssl-pkcs12 - PKCS#12 openssl pkcs12 [-help] [-passin ] [-passout ] [-password ] [-twopass] [-in _|] [-out _] [-nokeys] [-nocerts] [-noout] [-legacy] [-engine ] [-provider ] [-provider-path ] [-provparam [:]=] [-propquery propq] [-rand ] [-writerand ] () PKCS#12: [-info] [-nomacver] [-clcerts] [-cacerts] [-aes128] [-aes192] [-aes256] [-aria128] [-aria192] [-aria256] [-camellia128] [-camellia192] [-camellia256] [-des] [-des3] [-idea] [-noenc] [-nodes] () PKCS#12: [-export] [-inkey _|] [-certfile _] [-passcerts ] [-chain] [-untrusted _] [-CAfile ] [-no-CAfile] [-CApath ] [-no-CApath] [-CAstore ] [-no-CAstore] [-name ] [-caname ] [-CSP ] [-LMK] [-keyex] [-keysig] [-keypbe ] [-certpbe ] [-descert] [-macalg ] [-pbmac1_pbkdf2] [-pbmac1_pbkdf2_md ] [-iter ] [-noiter] [-nomaciter] [-maciter] [-macsaltlen] [-nomac] [-jdktrust ] PKCS#12 ( PFX) . PKCS#12 Netscape MSIE MS Outlook. PKCS#12 . PKCS#12. PKCS#12 -export ( ). PKCS#12 MAC -certpbe -iter -chain -export. PKCS#12 -export. AES-256-CBC PBKDF2 . PKCS#12 RC2-40-CBC -legacy -provider-path. -help . -passin . openssl-passphrase-options(1). -passout . -password -export -password -passout -passin. -twopass : PKCS#12 . -password -passin PKCS#12 -passout . -nokeys . -nocerts . -noout . -legacy . OpenSSL "-provider-path ./providers" OPENSSL_MODULES . RC2_CBC 3DES_CBC RC2 . 3DES_CBC. AES_256_CBC PBKDF2 . -engine " " openssl(1). . -provider -provider-path -provparam [:]= -propquery propq " " openssl(1) provider(7) property(7). -rand -writerand " " openssl(1) . () PKCS#12 -in _| . . -export PKCS#12 . -export " () PKCS#12". -out _ . PEM. -info PKCS#12 . -nomacver MAC. -clcerts ( CA). -cacerts CA ( ). -aes128 -aes192 -aes256 AES . -aria128 -aria192 -aria256 ARIA . -camellia128 -camellia192 -camellia256 Camellia . -des DES . -des3 DES . -idea IDEA . -noenc . -nodes OpenSSL 3.0 -noenc . () PKCS#12 -export PKCS#12 . -out _ PKCS#12 . . -in _| (URI). . -export . . PKCS#12. -inkey _|_ PKCS12. ( -in) . . -engine "org.openssl.engine:" . -certfile _ PKCS#12 -export. -passcerts -certfile -untrusted. openssl-passphrase-options(1). -chain PKCS#12. -in . (CA) -untrusted. -untrusted _ PKCS#12 -export -chain . . -CAfile -no-CAfile -CApath -no-CApath -CAstore _ -no-CAstore "Trusted Certificate Options" openssl-verification-options(1) . -name _ " " . . -caname _ " " . . Netscape MSIE. -CSP Microsoft CSP. . openssl-passphrase-options(1). -LMK "Local Key Set" ( ) . -keyex|-keysig . MSIE MS . " " RSA 512 . -keysig . S/MIME authenticode ( ActiveX) SSL MSIE 5.0 SSL. -keypbe -certpbe . PKCS#5 v1.5 PKCS#12 PBE ( "" ). ( "openssl list -cipher-algorithms") PKCS#5 v2.0. PKCS#12 . "NONE" . -descert DES . AES-256-CBC '-legacy'. '-descert' '-legacy' DES . -macalg MAC. SHA256. -pbmac1_pbkdf2 PBMAC1 PBKDF2 MAC PKCS#12. -pbmac1_pbkdf2_md PBKDF2 KDF. SHA256. "-pbmac1_pbkdf2". -iter MAC. 2048. . MAC . -noiter -nomaciter MAC 2048 MAC 1. . MAC . MSIE 4.0 MAC -nomaciter. -maciter MAC . -macsaltlen (salt) MAC. 16 NIST SP 800-132 . -nomac MAC. FIPS PKCS12 MAC PKCS12KDF FIPS FIPS. -jdktrust pkcs12 Java. trust oid . "anyExtendedKeyUsage" . Java PKCS12 -nokeys. . PKCS#12 -in -out PKCS#12 -export -name. -clcerts -cacerts -nocerts PKCS#12 . . . -clcerts . (CA) -nokeys -cacerts . -keypbe -certpbe . DES -keypbe PBE-SHA1-RC2-40 RC2 40 . openssl-pkcs8(1). 1.1 ASCII Windows. . . PKCS#12 (MT-safe) . PKCS#12 PEM: openssl pkcs12 -in file.p12 -out file.pem : openssl pkcs12 -in file.p12 -clcerts -out file.pem : openssl pkcs12 -in file.p12 -out file.pem -noenc PKCS#12: openssl pkcs12 -in file.p12 -info -noout PKCS#12 (legacy): openssl pkcs12 -in file.p12 -info -noout -legacy PKCS#12 PEM : openssl pkcs12 -export -in file.pem -out file.p12 -name "My PSE" : openssl pkcs12 -export -in file.pem -out file.p12 -name "My PSE" \ -certfile othercerts.pem PKCS#12 PEM PEM (legacy): openssl pkcs12 -export -in cert.pem -inkey key.pem -out file.p12 -legacy openssl(1) openssl-pkcs8(1) ossl_store-file(7) -engine OpenSSL 3.0. -nodes OpenSSL 3.0 -noenc . -macsaltlen 8 16 OpenSSL 3.6. 2000-2025 OpenSSL. . Apache 2.0 ( ""). . LICENSE . 3 . . : . 3.6.2 7 2026 OPENSSL-PKCS12(1ssl)