certs_import.sh

# Private key import
security import $PRIVATE_KEY_FILE -k $RAPPI_KEYCHAIN -f pkcs12 -P $KEYCHAIN_PWD -A
# Private key to pem
openssl pkcs12 -in $PRIVATE_KEY_FILE -out $PRIVATE_KEY_FILE.pem -nocerts -nodes -passin pass:$PRIVATE_KEY_PWD
# Key modulus
key_modulus=$(openssl rsa -noout -modulus -in $PRIVATE_KEY_FILE.pem | openssl md5)

for cert in $certs_dir/*; do
 # Cert verification
 security verify-cert -c $cert
 # Cert to der
 openssl x509 -inform DER -in $cert -out $cert.crt
 # Cert modulus
 cert_modulus=$(openssl x509 -modulus -noout -in $cert.crt | openssl md5)
 # Making sure the cert corresponds to the private key
 if [ "$key_modulus" = "$cert_modulus" ]; then
  # Cert import
  security import $cert -k $RAPPI_KEYCHAIN -A
 fi
done