pfx to key/cer chain

pfx2cer-key.sh

# convert from pfx to passwordless key/crt chain
# based on https://gist.github.com/ericharth/8334664

# params
PFX="hostname.pfx"
PASSWORD="pfxpassword"
OUT="hostname-2018"

# key
openssl pkcs12 -in $PFX -password pass:$PASSWORD -nodes -nocerts -out $OUT.key

# crt
openssl pkcs12 -in $PFX -password pass:$PASSWORD -nodes -nokeys -clcerts -out host.crt
openssl pkcs12 -in $PFX -password pass:$PASSWORD -nodes -nokeys -cacerts -out ca.crt
cat host.crt ca.crt > $OUT.crt
rm host.crt ca.crt