Converting pem to encrypted pfx
by Mark_667 from LinuxQuestions.org on (#53Q20)
I have a plaintext PEM file containing private key and cert chain that I need to convert to a pfx file encrypted using 3DES and signed with SHA1 for compatibility with Microsoft products which don't like Elliptic Curves.
openssl pkcs12 -export -keypbe PBE-SHA1-3DES
to convert it to a pfx works but doing openssl pkcs12 -export -out shows Signature : ecdsa-with-SHA256 on the certs but this isn't mentioned in Windows cert viewer.
I need to get rid of the Elliptic Curve. Does the cert need reissuing or am I reencrypting the container pfx wrong?


openssl pkcs12 -export -keypbe PBE-SHA1-3DES
to convert it to a pfx works but doing openssl pkcs12 -export -out shows Signature : ecdsa-with-SHA256 on the certs but this isn't mentioned in Windows cert viewer.
I need to get rid of the Elliptic Curve. Does the cert need reissuing or am I reencrypting the container pfx wrong?