SSL

Checking Certificate Chain with OpenSSL

Checking A Remote Certificate Chain With OpenSSL

Change .p12 / .pfx password

Say you have a private key / certificate file mycert.pfx, and you want to change its password:

# Use -nodes (no DES) to produce a .pem file without encrypting the private key at all
openssl pkcs12 -in mycert.pfx -nodes | openssl pkcs12 -export -out mycert-new.pfx

For information, the output of the first pkcs12 invocation parses the pkcs#12 file into a format called .pem. So one can also produce a pkcs12 file from a .pem file with:

openssl pkcs12 -export -in mycert.pem -out mycert-new.pfx