#!/bin/bash

#------------------------------------------------------------------------------#
#
# entpackt eine PFX-Datei zu einer PEM-Datei im DER-Format
#
#------------------------------------------------------------------------------#

# openssl pkcs12 -in www.domain.de.pfx -out www.domain.de.pem -nodes
# openssl x509   -in www.domain.de.pem -noout -text
# openssl x509   -in www.domain.de.pem -out server-cert.pem
# openssl rsa    -in www.domain.de.pem -out server-key.pem

if [ -r "${1}" ] ; then
        PFXDATEI="${1}"
        PEM_NAME="${1%.*}"

        openssl pkcs12 -in ${PFXDATEI} -out ${PEM_NAME}.pem -nodes && openssl x509 -in ${PEM_NAME}.pem -noout -text

        if [ -s ${PEM_NAME}.pem ] ; then
                openssl x509 -in ${PEM_NAME}.pem -out server-cert.pem
                openssl rsa -in ${PEM_NAME}.pem -out server-key.pem

                ls -rtlha *.pem
        else
                echo "PEM-Datei konnte nicht erstellt werden."
        fi
else
        echo "${0} www.domain.de.pfx"
fi