Pkcs12 extraction

gistfile1.txt

#!/bin/bash

# Input PKCS#12 file
P12_FILE="$1"

if [[ ! -f "$P12_FILE" ]]; then
    echo "❌ Usage: $0 site.p12"
    exit 1
fi

# Remove extension to get sitename
BASENAME=$(basename "$P12_FILE" .p12)

echo "🔐 Extracting from: $P12_FILE"
echo "📁 Output base name: $BASENAME"

# 1. Extract encrypted private key
openssl pkcs12 -in "$P12_FILE" -nocerts -out "$BASENAME.encrypted.key"

# 2. Decrypt private key to PKCS#1
openssl rsa -in "$BASENAME.encrypted.key" -out "$BASENAME.key"

# 3. Extract leaf/site certificate
openssl pkcs12 -in "$P12_FILE" -clcerts -nokeys -out "$BASENAME.site.crt"

# 4. Extract intermediate chain
openssl pkcs12 -in "$P12_FILE" -cacerts -nokeys -chain -out "$BASENAME.chain.crt"

# 5. Combine for fullchain
cat "$BASENAME.site.crt" "$BASENAME.chain.crt" > "$BASENAME.fullchain.crt"

# 6. Cleanup encrypted key
rm -f "$BASENAME.encrypted.key"

echo "✅ Extraction complete. Files created:"
echo " - Private Key        : $BASENAME.key"
echo " - Site Certificate   : $BASENAME.site.crt"
echo " - Chain Certificate  : $BASENAME.chain.crt"
echo " - Fullchain Cert     : $BASENAME.fullchain.crt"