Question

I want to extract x509 cert and private key from pkcs12 file using a C lib. I found lot of .net utils to do this, but did not find any C libraries. My code will run in WinPE environment, so .net will not work.

Answer 1

You can use OpenSSL to do this. The function d2i_PKCS12_fp() can be used to load a PKCS#12 file into a PKCS12 object, and the function PKCS12_parse() can be used to parse the resulting object to extract the certificate and private key:

PKCS12 *d2i_PKCS12_fp(FILE *fp, PKCS12 **p12);

int PKCS12_parse(PKCS12 *p12, const char *pass, EVP_PKEY **pkey, X509 **cert, STACK_OF(X509) **ca);

See the PKCS12_parse() man page for more details.