9

Is it possible to create a pfx file without import password? Or is it possible to remove the import password from pfx file that I've already created?

Orion
  • 91
  • 1
  • 1
  • 2

1 Answers1

10

Is it possible to create a pfx file without import password?

Yes, it is possible: 

openssl req -x509 -newkey rsa:4096 -keyout PrivateKey.pem -out Cert.pem -days 365 -nodes

openssl pkcs12 -export -out keyStore.p12 -inkey PrivateKey.pem -in Cert.pem

Or is it possible to remove the import password from pfx file that I've already created?

Yes, it is possible:

openssl pkcs12 -in old.pfx -nodes | openssl pkcs12 -export -keypbe NONE -certpbe NONE -out new.p12

Conversion from .p12 format to .pfx format is possible by just renaming the file.

Hope that helps!

Seb_Schulz
  • 404
  • 2
  • 4
  • Wow. Good job. That `-keypbe NONE -certpbe NONE` stuff looks like undocumented behavior. It's neither in https://www.openssl.org/docs/manmaster/man1/openssl-pkcs12.html nor in https://www.openssl.org/docs/manmaster/man1/openssl-pkcs8.html – StackzOfZtuff Oct 02 '19 at 09:04
  • 7
    @StackzOfZtuff What? Undocumented behavior for openssl? Nah... Impossible. – dim Oct 02 '19 at 13:12
  • 1
    @dim: yeah. Perish the thought, right? ;) – StackzOfZtuff Oct 02 '19 at 13:27