fix TOC; add 'Extract certs from p7b'

trimstray · trimstray · commit 56a63a702fac · 2020-06-09T10:24:38.000+02:00
- signed-off-by: trimstray &lt;trimstray@gmail.com&gt;
diff --git a/README.md b/README.md
@@ -398,6 +398,9 @@
     * [Generate certificate with 4096 bit private key](doc/HELPERS.md#generate-certificate-with-4096-bit-private-key)
     * [Generate DH public parameters](doc/HELPERS.md#generate-dh-public-parameters)
     * [Display DH public parameters](doc/HELPERS.md#display-dh-public-parameters)
+    * [Extract private key from pfx](doc/HELPERS.md#extract-private-key-from-pfx)
+    * [Extract private key and certs from pfx](doc/HELPERS.md#extract-private-key-and-certs-from-pfx)
+    * [Extract certs from p7b](doc/HELPERS.md#extract-certs-from-p7b)
     * [Convert DER to PEM](doc/HELPERS.md#convert-der-to-pem)
     * [Convert PEM to DER](doc/HELPERS.md#convert-pem-to-der)
     * [Verification of the certificate's supported purposes](doc/HELPERS.md#verification-of-the-certificates-supported-purposes)
@@ -1085,6 +1088,7 @@ Existing chapters:
     - [x] _Generate certificate with 4096 bit private key_
     - [x] _Generate DH public parameters_
     - [x] _Display DH public parameters_
+    - [x] _Extract certs from p7b_
     - [x] _Convert DER to PEM_
     - [x] _Convert PEM to DER_
     - [x] _Verification of the certificate's supported purposes_
diff --git a/doc/HELPERS.md b/doc/HELPERS.md
@@ -165,6 +165,9 @@ Go back to the **[Table of Contents](https://github.com/trimstray/nginx-admins-h
     * [Generate certificate with 4096 bit private key](#generate-certificate-with-4096-bit-private-key)
     * [Generate DH public parameters](#generate-dh-public-parameters)
     * [Display DH public parameters](#display-dh-public-parameters)
+    * [Extract private key from pfx](#extract-private-key-from-pfx)
+    * [Extract private key and certs from pfx](#extract-private-key-and-certs-from-pfx)
+    * [Extract certs from p7b](#extract-certs-from-p7b)
     * [Convert DER to PEM](#convert-der-to-pem)
     * [Convert PEM to DER](#convert-pem-to-der)
     * [Verification of the certificate's supported purposes](#verification-of-the-certificates-supported-purposes)
@@ -7627,6 +7630,16 @@ openssl pkcs12 -in ${_fd_pfx} -nocerts -nodes -out ${_fd_key} )
 openssl pkcs12 -in ${_fd_pfx} -nodes -out ${_fd_pem} )
 ```
 
+###### Extract certs from p7b
+
+```bash
+# PKCS#7 file doesn't include private keys.
+( _fd_p7b="cert.p7b" ; _fd_pem="cert.pem" ; \
+openssl pkcs7 -inform DER -outform PEM -in ${_fd_p7b} -print_certs > ${_fd_pem})
+# or:
+openssl pkcs7 -print_certs -in -in ${_fd_p7b} -out ${_fd_pem})
+```
+
 ###### Convert DER to PEM
 
 ```bash
