Windows OpenSSL 下载安装网址:
https://slproweb.com/products/Win32OpenSSL.html
问:为什么想要使用P12的证书
答:因为可以一次支持Android 所需的CA,VPN,WLAN所需类型
实例:从P12中导出PEM格式证书,然后重新建立Android 12所支持的证书,12 系统只支持SHA1
openssl pkcs12 -nodes < Burp.p12 > Burp.pem
openssl pkcs12 -keypbe PBE-SHA1-3DES -certpbe PBE-SHA1-3DES -export -in Burp.pem -out Burp_1.p12 -name “SMIME-Cert”
检测所使用的加密算法:
openssl pkcs12 -info -in Burp.p12
MAC: sha256, Iteration 10000
MAC length: 32, salt length: 20
PKCS7 Data
Shrouded Keybag: PBES2, PBKDF2, AES-256-CBC, Iteration 10000, PRF hmacWithSHA256
Bag Attributes
friendlyName: cacert
localKeyID: 54 69 6D 65 20 31 36 39 33 38 30 37 39 34 33 34 37 34
Key Attributes:
提示验证PEM,输入Burp.pem文件名就可以正常输出了
数据引用:
https://www.qiniu.com/qfans/qnso-71872900#comments
https://hstechdocs.helpsystems.com/manuals/globalscape/archive/secureserver3/Converting_an_incompatible_PKCS_12_format_file_to_a_compatible_PKCS_12_.htm