OPENSSL-PKCS12(1ssl) OpenSSL OPENSSL-PKCS12(1ssl) (NAME) openssl-pkcs12 - PKCS#12 (SYNOPSIS) openssl pkcs12 [-help] [-passin arg] [-passout arg] [-password arg] [-twopass] [-in filename|uri] [-out filename] [-nokeys] [-nocerts] [-noout] [-legacy] [-engine id] [-provider name] [-provider-path path] [-provparam [name:]key=value] [-propquery propq] [-rand files] [-writerand file] () PKCS#12: [-info] [-nomacver] [-clcerts] [-cacerts] [-aes128] [-aes192] [-aes256] [-aria128] [-aria192] [-aria256] [-camellia128] [-camellia192] [-camellia256] [-des] [-des3] [-idea] [-noenc] [-nodes] () PKCS#12: [-export] [-inkey filename|uri] [-certfile filename] [-passcerts arg] [-chain] [-untrusted filename] [-CAfile file] [-no-CAfile] [-CApath dir] [-no-CApath] [-CAstore uri] [-no-CAstore] [-name name] [-caname name] [-CSP name] [-LMK] [-keyex] [-keysig] [-keypbe cipher] [-certpbe cipher] [-descert] [-macalg digest] [-pbmac1_pbkdf2] [-pbmac1_pbkdf2_md digest] [-iter count] [-noiter] [-nomaciter] [-maciter] [-macsaltlen] [-nomac] [-jdktrust usage] (DESCRIPTION) PKCS#12 ( PFX ) . PKCS#12 Netscape MSIE MS Outlook . (OPTIONS) PKCS#12 . PKCS#12 . PKCS#12 -export ( ) . PKCS#12 MAC -certpbe -iter -chain -export . PKCS#12 -export . AES-256-CBC PBKDF2 . (legacy) PKCS#12 RC2-40-CBC -legacy -provider-path . -help . -passin arg . arg openssl-passphrase-options(1) . -passout arg . -password arg -export -password -passout -passin . -twopass : PKCS#12 . -password -passin ( PKCS#12) -passout ( ) . -nokeys . -nocerts . -noout . -legacy legacy. OpenSSL "-provider-path ./providers" OPENSSL_MODULES . RC2 RC2_CBC 3DES_CBC . 3DES_CBC . legacy legacy AES_256_CBC PBKDF2 . -engine id "Engine Options" openssl(1) . . -provider name -provider-path path -provparam [name:]key=value -propquery propq "Provider Options" openssl(1) provider(7) property(7) . -rand files, -writerand file "Random State Options" openssl(1) . () PKCS#12 -in filename|uri URI . . -export PKCS#12 . -export " () PKCS#12" . -out filename . PEM . -info PKCS#12 . -nomacver MAC. -clcerts ( CA). -cacerts CA ( ). -aes128, -aes192, -aes256 AES . -aria128, -aria192, -aria256 ARIA . -camellia128, -camellia192, -camellia256 Camellia . -des DES . -des3 Triple DES . -idea IDEA . -noenc . -nodes OpenSSL 3.0 -noenc . () PKCS#12 -export PKCS#12 . -out filename PKCS#12 . . -in filename|uri URI . . -export URI . . PKCS#12 . -inkey filename|uri PKCS#12. ( -in) . . -engine URI "org.openssl.engine:" URI . -certfile filename PKCS#12 -export . -passcerts arg -certfile -untrusted. arg openssl-passphrase-options(1) . -chain PKCS#12 . -in ( ) . CA CA -untrusted . -untrusted filename PKCS#12 -export -chain . . -CAfile file, -no-CAfile, -CApath dir, -no-CApath, -CAstore uri, -no-CAstore "Trusted Certificate Options" openssl-verification-options(1) . -name friendlyname " " (friendly name) . . -caname friendlyname " " . . Netscape MSIE . -CSP name name CSP . . arg openssl-passphrase-options(1) . -LMK "Local Key Set" . -keyex|-keysig . MSIE . " " RSA . -keysig . S/MIME Authenticode ( ActiveX) SSL MSIE 5.0 SSL . -keypbe alg, -certpbe alg . PBE PKCS#5 v1.5 PKCS#12 ( " (NOTES)" ). ( "openssl list -cipher-algorithms") PKCS#5 v2.0 . PKCS#12 . "NONE" . -descert Triple DES. AES-256-CBC '-legacy' . '-descert' '-legacy' Triple DES . -macalg digest () MAC. SHA256 . -pbmac1_pbkdf2 PBMAC1 PBKDF2 MAC PKCS#12. -pbmac1_pbkdf2_md digest PBKDF2 KDF. SHA256 . "-pbmac1_pbkdf2" . -iter count MAC . . : . MAC . -noiter, -nomaciter MAC MAC . MAC . MSIE 4.0 MAC -nomaciter . -maciter MAC . -macsaltlen (salt) MAC . NIST SP 800-132 . -nomac MAC. FIPS MAC PKCS#12 PKCS12KDF FIPS FIPS . -jdktrust pkcs12 Java keystore. OID . "anyExtendedKeyUsage" . PKCS12 -nokeys . (NOTES) . PKCS#12 -in -out PKCS#12 -export -name . -clcerts -cacerts -nocerts PKCS#12 . . . -clcerts . CA -nokeys -cacerts CA . -keypbe -certpbe . Triple DES -keypbe PBE-SHA1-RC2-40 RC2 . openssl-pkcs8(1) . 1.1 ASCII . . . PKCS#12 (MT-safe) . (EXAMPLES) PKCS#12 PEM: openssl pkcs12 -in file.p12 -out file.pem : openssl pkcs12 -in file.p12 -clcerts -out file.pem : openssl pkcs12 -in file.p12 -out file.pem -noenc PKCS#12: openssl pkcs12 -in file.p12 -info -noout PKCS#12 (legacy): openssl pkcs12 -in file.p12 -info -noout -legacy PKCS#12 PEM : openssl pkcs12 -export -in file.pem -out file.p12 -name "My PSE" : openssl pkcs12 -export -in file.pem -out file.p12 -name "My PSE" \ -certfile othercerts.pem PKCS#12 PEM PEM legacy: openssl pkcs12 -export -in cert.pem -inkey key.pem -out file.p12 -legacy (SEE ALSO) openssl(1), openssl-pkcs8(1), ossl_store-file(7) (HISTORY) -engine OpenSSL 3.0 . -nodes OpenSSL 3.0 -noenc . -macsaltlen OpenSSL 3.6 . (COPYRIGHT) - OpenSSL . . . ("") . . LICENSE . 3.6.4 2026-08-25 OPENSSL-PKCS12(1ssl)