I've been using the openssl
pkcs12 command to pack my certs/keys up for Windows 8,
openssl pkcs12 -export \ -in win8client-cert.pem \ -inkey win8client-key.pem \ -certfile ca-cert.pem \ -out win8client.p12
However, I'm not entirely clear what it does. If I'm feeding it the
-certfile why is that the certfile must also be manually installed on the host machine (a Windows 8 box)? When I take the
.p12 and extract the cacert (using the Certificates MMC on Windows) I can install it on the host box and everything works fine.
Why can't it just get the CA cert form the
.p12 (which is just a packing format by my understanding).