AzureDevOps-KeyVaultPfx-ToFile-openssl

#!/bin/bash

# Map variables retrieved from Key Vault to environment variables such as:
#   env:
#     CERT_DATA: $(certData)
#     CERT_PASSWORD: $(certPassword)

# Read in the PFX data and save as pfx file
echo "${CERT_DATA}" | base64 --decode > cert.pfx

# Extract out the certificate using the pfx password
openssl pkcs12  -nodes -nokeys -passin pass:"${CERT_PASSWORD}" -in cert.pfx -out  cert.pem

# Extract out the private key using the pfx password
openssl pkcs12  -nodes -nocerts -passin pass:"${CERT_PASSWORD}" -in cert.pfx -out cert.key