Acme.sh: PKCS #12

[FernandoMiguel]

how can a PKCS #12 cert be issued with acme.sh ?

[Neilpang]

pkcs12 IS pfx

see: https://github.com/Neilpang/acme.sh/wiki#3-how-to-get-pkcs12pfx-format

[FernandoMiguel]

@Neilpang that documentations seems to be insufficient

$ acme.sh --test --toPkcs -d pfx.imperialus.house
[Fri 9 Dec 2016 12:35:23 GMT] Using stage api:https://acme-staging.api.letsencrypt.org
Error opening input file /Users/fernando/.acme.sh/pfx.imperialus.house/pfx.imperialus.house.cer
/Users/fernando/.acme.sh/pfx.imperialus.house/pfx.imperialus.house.cer: No such file or directory

[FernandoMiguel]

after..... one of these days i'll learn how to read

[FernandoMiguel]

will the pfx be issued once a cert is renewed?
or should i had this to the post hook?

[Neilpang]

@FernandoMiguel
You must issue the cert first.

acme.sh --issue   -d  mydomain.com  ......

Then convert it to pkcs12 format:

acme.sh  --topkcs  -d mydomain.com   ......

Yes, you must convert it in the --post-hook or --renew-hook.

It is suggested that, you write a hook file renew-hook.sh.

You can do anything in that file.

Thanks.