8. Optionen von pfx

Das Programm pfx von Steve Henson erlaubt es, Zertifikate und Private Keys in Netscape- und Microsoft-Browser zu importieren. Hinweis: Dieses Programm wurde durch das Programm pkcs12 (s. Anhang PKCS12) ersetzt und wird hier nur der Vollständigkeit halber aufgeführt!

Import:

usage is pfx [options]

where: [options] is one or more of the following

-in file.p12     PFX file to read (default stdin).
-out file.pem    file to output to (default stdout).
-noout           don't output any certificates or keys just say if decryption
                 was OK.
-nokeys          don't output any private keys.
-print_certs     output all certificates.
-des             encrypt private keys with DES.
-des3            encrypt private keys with triple DES (default).
-idea            encrypt private keys with idea.
-nodes           don't encrypt private keys.

Export:

usage is pfx -export -name NAME [options]

NAME is the certificate name (this appears in the listbox in Netscape) this
option is mandatory with -export .

-in file.pem     PEM file to read certificate from (default stdin).
-out file.p12    file to output to (default stdout).
-inkey file.pem  file to read private key from if not same as certificate.
-chain           add a complete chain of certificates (default just one).
-certfile c.pem  add all the certificates in c.pem