OpenVPN pkcs12 key conversion
Since the latest network-manager-openvpn doens’t support pkcs12 certs, I needed to convert the pkcs12 key into other keys. This is how I managed to do it.
Extract CA cert, client cert and private key to a single PEM file
> openssl pkcs12 -in client.p12 -out client.pem
Extract client cert to client.cer (no private key or CA cert)
> openssl pkcs12 -in client.p12 -out client.crt -clcerts -nokeys
Extract client private key to client.key (no certs)
> openssl pkcs12 -in client.p12 -out client.key -nocerts