Comment #2 on issue 18 by
michal.k...@esacinc.com: Do Windows version of
cert conversion script
http://code.google.com/p/direct-certificate-discovery-tool/issues/detail?id=18
Have you considered enhancing the Test Tool to be able to use PKCS#12 files
instead? The PKCS#12 files that the certGen tool spits out contain only one
certificate, which is already in PEM format (if I remember correctly). It
would require implementing a call to the OpenSSL command line tool
(in 'pkcs12' mode) prior to the existing one in gov.onc.decrypt.Decryptor
in order to extract the cert file from the keystore, but would do away with
the need for the user to convert all of the output of the generator.