This is a collection of tools and shell script required by system administrators, devops, and devsecops and is pretty much a work in progress.
Often we are issued with Personal Information Exchange Format (PFX) and are left to convert them to Privacy Enhanced Mail (PEM) files. To make matters worse, we have to extract the cacert chain from pfx files.
This script extract-certs.sh
does just that. I have tried and tested this script on Git Bash and Linux.
$ sh extract-cert.sh mycert.pfx
Enter Import Password:
MAC verified OK
Enter Import Password:
MAC verified OK
Enter Import Password:
MAC verified OK
Certificate CA: mycert-cacert.pem and Certificate: mycert-cert.pem verification
mycert-cert.pem: OK
Certificate: mycert-cert.pem modulus matches with Key: mycert-key.pem modulus: OK
- Benchmarking Redhat and Debian variants for security.
- Validating a cacert chain.
- Docs to for quickly testing openssl certs for mutual tls.