pfx 证书导出公钥和私钥

pfx 证书导出公钥和私钥

在做银联支付的时候，因为是多商户的，所以采用单独的私钥加密，需要提取 pfx 中的私钥

准备

准备 pfx 格式的证书

[root@blue acp_crt]# tree
.
├── acp_test_sign.pfx

提取密钥对

格式: openssl pkcs12 -in acp_test_sign.pfx -nocerts -nodes -out acp_test_sign.key

[root@blue acp_crt]# openssl pkcs12 -in acp_test_sign.pfx -nocerts -nodes -out acp_test_sign.key
Enter Import Password:
MAC verified OK
[root@blue acp_crt]# ls
.
├── acp_test_sign.key  # 密钥对
├── acp_test_sign.pfx  # pfx 证书

导出私钥

格式: openssl rsa -in acp_test_sign.key -out acp_test_sign_pri.key

[root@blue acp_crt]# openssl rsa -in acp_test_sign.key -out acp_test_sign_pri.key
writing RSA key
[root@blue acp_crt]# ls
acp_test_sign.key  acp_test_sign.pfx  acp_test_sign_pri.key
[root@blue acp_crt]# tree
.
├── acp_test_sign.key  # 密钥对
├── acp_test_sign.pfx  # pfx 证书
└── acp_test_sign_pri.key # 私钥

导出公钥

格式: openssl rsa -in acp_test_sign.key -pubout -out acp_test_sign_pub.key

[root@blue acp_crt]# openssl rsa -in acp_test_sign.key -pubout -out acp_test_sign_pub.key
writing RSA key
[root@blue acp_crt]# tree
.
├── acp_test_sign.key   # 密钥对
├── acp_test_sign.pfx   # pfx 证书
├── acp_test_sign_pri.key  # 私钥
└── acp_test_sign_pub.key  # 公钥