create pkcs12 export

Makefile

@@ -1,4 +1,4 @@
-all : gpgsm-params cert.der cert.pem cert.openssl-text
+all : gpgsm-params cert.der cert.pem cert.openssl-text key-cert.p12
 
 gpgsm-params : gpgsm-params-template subject-keygrip.hex issuer-keygrip.hex expiry-datetime
 	./prepare-gpgsm-params --template gpgsm-params-template \
@@ -16,8 +16,13 @@ cert.pem : cert.der
 cert.openssl-text : cert.pem
 	openssl x509 -in $^ -text -noout > $@
 
+key-cert.p12 : cert.der subject-keygrip.hex
+	gpgsm --import cert.der
+	gpgsm --out $@ --export-secret-key-p12 '&$(shell cat subject-keygrip.hex)'
+
 clean :
 	-trash gpgsm-params
 	-trash cert.der
 	-trash cert.pem
 	-trash cert.openssl-text
+	-shred key-cert.p12 && rm key-cert.p12

gpgsm-params-template

@@ -3,7 +3,7 @@ Key-Type: RSA
 Key-Grip: {subject-keygrip}
 Key-Usage: sign
 Serial: random
-Name-DN: CN=client,C=AT
+Name-DN: CN=test client,C=AT
 Hash-Algo: SHA256
 Issuer-DN: CN=Fabian Peter Hammerle,C=AT
 Not-After: {not-after}