Skip to content

Using legacy PKCS12 with OpenSSL 3.0

Raul Metsma edited this page Jun 22, 2023 · 1 revision

OpenSSL 3.0

The OpenSSL legacy provider supplies OpenSSL implementations of algorithms that have been deemed legacy. Such algorithms have commonly fallen out of use, have been deemed insecure by the cryptography community, or something similar.

Convert

openssl pkcs12 -in signout.p12 -out signout.pem -legacy
openssl pkcs12 -export -in signout.pem -inkey signout.pem -out signout-new.p12

Verify

openssl pkcs12 -in signout-new.p12 -info 
openssl pkcs12 -in signout.p12 -info -legacy
Clone this wiki locally