<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /></head><body style='font-size: 10pt; font-family: "Times New Roman",Times,serif'>
<p>Hi, Everyone,</p>
<p>We are having issues exporting the certificate with the .pfx</p>
<p>Error printout log file as follows:</p>
<p>OpenSSL> pkcs12 -export -out "cfored.pfx" -inkey "cfored_encrypted_private.key"<br />-in "mergeredcertificate.crt"<br />Usage: pkcs12 [options]<br />where options are<br />-export output PKCS12 file<br />-chain add certificate chain<br />-inkey file private key if not infile<br />-certfile f add all certs in f<br />-CApath arg - PEM format directory of CA's<br />-CAfile arg - PEM format file of CA's<br />-name "name" use name as friendly name<br />-caname "nm" use nm as CA friendly name (can be used more than once).<br />-in infile input filename<br />-out outfile output filename<br />-noout don't output anything, just verify.<br />-nomacver don't verify MAC.<br />-nocerts don't output certificates.<br />-clcerts only output client certificates.<br />-cacerts only output CA certificates.<br />-nokeys don't output private keys.<br />-info give info about PKCS#12 structure.<br />-des encrypt private keys with DES<br />-des3 encrypt private keys with triple DES (default)<br />-idea encrypt private keys with idea<br />-seed encrypt private keys with seed<br />-aes128, -aes192, -aes256<br /> encrypt PEM output with cbc aes<br />-camellia128, -camellia192, -camellia256<br /> encrypt PEM output with cbc camellia<br />-nodes don't encrypt private keys<br />-noiter don't use encryption iteration<br />-nomaciter don't use MAC iteration<br />-maciter use MAC iteration<br />-nomac don't generate MAC<br />-twopass separate MAC, encryption passwords<br />-descert encrypt PKCS#12 certificates with triple DES (default RC2-40)<br />-certpbe alg specify certificate PBE algorithm (default RC2-40)<br />-keypbe alg specify private key PBE algorithm (default 3DES)<br />-macalg alg digest algorithm used in MAC (default SHA1)<br />-keyex set MS key exchange type<br />-keysig set MS key signature type<br />-password p set import/export password source<br />-passin p input file pass phrase source<br />-passout p output file pass phrase source<br />-engine e use engine e, possibly a hardware device.<br />-rand file;file;...<br /> load the file (or the files in the directory) into<br /> the random number generator<br />-CSP name Microsoft CSP name<br />-LMK Add local machine keyset attribute to private key<br />error in pkcs12<br />OpenSSL></p>
<div>-- <br />
<p><strong>Harold Huggins</strong></p>
<p style="text-align: left; line-height: 10px;"> </p>
</div>
</body></html>