Index: net/data/ssl/scripts/client_authentication/generate-client-certificates.sh |
diff --git a/net/data/ssl/scripts/client_authentication/generate-client-certificates.sh b/net/data/ssl/scripts/client_authentication/generate-client-certificates.sh |
index 03373890740adb88a99cbe55a193867954a8063b..f6daddfef80c03795948d73b0cfb789c32db5c63 100755 |
--- a/net/data/ssl/scripts/client_authentication/generate-client-certificates.sh |
+++ b/net/data/ssl/scripts/client_authentication/generate-client-certificates.sh |
@@ -68,4 +68,12 @@ do |
-keyfile out/root_$id.key \ |
-out out/client_$id.pem \ |
-config client_authentication.cnf |
+ |
+ # Package the client cert and private key into a pkcs12 file. |
+ try openssl pkcs12 \ |
+ -inkey out/client_$id.key \ |
+ -in out/client_$id.pem \ |
+ -out out/client_$id.p12 \ |
+ -export \ |
+ -passout pass: |
done |