googling internet about using certificate and keys from PKCS12 file lead to convert it to PEM. it requires some additional utilities (openssl not default windows application) and manual steps to convert.
this patch allow using PKCS12 directly from stunnel. example configuration: cert = /home/dab/.certs/my.p12
PKCS12-files detected by file extension (.p12 or .pfx, no case sensetive) and load specially. password prompted if needed, empty password also supported.
code based on examples from: https://groups.google.com/forum/#!topic/mailing.openssl.users/iuBmSqwsIG4 http://openssl-users.openssl.narkive.com/J0bR3cMA/ssl-ctx-use-privatekey-fil...
patch tested on stunnel working on linux (gentoo: from our overlay http://bbgentoo.ilb.ru/repos/bbgentoo/bbgentoo_overlay/branches/drafts/net-m... ) and windows.
I hereby release my patches to stunnel for support of PKCS12 files into the public domain.
---------- Forwarded message ---------- From: Dmitry Bakshaev dab1818@gmail.com Date: 2016-05-18 20:26 GMT+04:00 Subject: PKCS12 support patch To: stunnel-users@stunnel.org
googling internet about using certificate and keys from PKCS12 file lead to convert it to PEM. it requires some additional utilities (openssl not default windows application) and manual steps to convert.
this patch allow using PKCS12 directly from stunnel. example configuration: cert = /home/dab/.certs/my.p12
PKCS12-files detected by file extension (.p12 or .pfx, no case sensetive) and load specially. password prompted if needed, empty password also supported.
code based on examples from: https://groups.google.com/forum/#!topic/mailing.openssl.users/iuBmSqwsIG4 http://openssl-users.openssl.narkive.com/J0bR3cMA/ssl-ctx-use-privatekey-fil...
patch tested on stunnel working on linux (gentoo: from our overlay http://bbgentoo.ilb.ru/repos/bbgentoo/bbgentoo_overlay/branches/drafts/net-m... ) and windows.
-
Dmitry Bakshaev