Revize b04aeacb

Re #8307 - The children certificate including the whole chain of trust is now also saved to a PFX store

openssl_poc.py

@@ -145 +145 @@
 #
 # the generated certificate will have the Common Name field set to "MyTestCertificate"
 # and will be stored to MyTestCertificate.crt
+# PFX store containing the whole chain of trust will also be generated (can be imported to Adobe Acrobat Reader)
 if __name__ == "__main__":
     # a name of the child certificate to be generated must be passed to the program via arguments
     if len(sys.argv) > 1:
@@ -195 +196 @@
         puts(child_ca, child_ca_file)
 
         # store the generated private key used to generate the child. cert
-        puts(child_key, get_path(f"{cert_name}.key"))
+        child_key_file = get_path(f"{cert_name}.key")
+        puts(child_key, child_key_file)
+
+        # export the whole chain of trust including the generated child certificate to a PKCS store
+        # "pass" passphrase will be used to encrypt the store
+        subprocess.check_output(
+            ["openssl", "pkcs12", "-export", "-out", f"{get_path(cert_name)}.pfx", "-inkey", child_key_file, "-in",
+             child_ca_file, "-certfile", get_path("inter.crt"), "-passout", "pass:pass"],
+            encoding="utf-8")
 
         #####################################
         # TEST SECTION
@@ -239 +248 @@
         assert subprocess.check_output(
             ["openssl", "verify", "-CAfile", get_path("root.crt"), "-untrusted", get_path("inter.crt"), child_ca_file])
 
-        print(f"TESTS PASSED!!! \n{cert_name} certificate created successfully")
+        print(f"""TESTS PASSED!!! \n\n"{cert_name}" certificate created successfully""")
+        print(
+            f"""PFX store with the generated certificate and the whole chain of trust saved to:\n{cert_name}.pfx (protecteed by "pass" passphrase)""")