I've been using the openssl pkcs12
command to pack my certs/keys up for Windows 8,
openssl pkcs12 -export \
-in win8client-cert.pem \
-inkey win8client-key.pem \
-certfile ca-cert.pem \
-out win8client.p12
However, I'm not entirely clear what it does. If I'm feeding it the -certfile
why is that the certfile must also be manually installed on the host machine (a Windows 8 box)? When I take the .p12
and extract the cacert (using the Certificates MMC on Windows) I can install it on the host box and everything works fine.
Why can't it just get the CA cert form the .p12
(which is just a packing format by my understanding).