Wrapper around openssl for converting pkcs12 certificates exported out of IIS into unencrypted x509 for Apache

convert_pfx_to_pem.sh

#!/bin/bash

[[ -z "$1" ]] && echo "Please specify a .pfx file!" && exit 1;

#combined format:
openssl pkcs12 -in "$1" -out "${1%.pfx}.key_cert.pem" -nodes

#extract certificate/public key
openssl x509 -in "${1%.pfx}.key_cert.pem" -out "${1%.pfx}.cert"

#extract private key
openssl rsa -in "${1%.pfx}.key_cert.pem" -out "${1%.pfx}.key"