Script to convert PFX / PKCS#12 bundle to JSON

convert-p12-to-json.sh

#!/usr/bin/env bash

set -euo pipefail

usage() {
    cat <<EOF
usage: $(basename "$0") bundle.p12 outfile.json
EOF
    exit 0
}

if [ $# -lt 2 ]; then
    usage
fi

p12="$1"
outfile="$2"

echo "Converting ${p12} to ${outfile}..."

key=$(openssl pkcs12 -legacy -in "${p12}" -nocerts -nodes | base64)
cert=$(openssl pkcs12 -legacy -in "${p12}" -clcerts -nokeys | base64)
enddate=$(echo "${cert}" | base64 -d | openssl x509 -noout -enddate | cut -d '=' -f 2)

printf '{"cert":"%s","key":"%s"}' "${cert}" "${key}" >"${outfile}"

printf "JSON saved to %s, certificate expires on %s.\n" "${outfile}" "${enddate}"