Convert PEM private keys and certificates into a cryptlib PKCS#15 keyset for Mystic. Based on amenonsen/pemtrans; its explicit permission is in the C header.

Status: Converter adaptation in development; not qualified for production certificates.

Source and development

Deutsch · English

A small native program for Linux and Windows, supporting old cryptlib 3.4.5 and the newer library through explicitly checked API profiles. Library/keyset formats must not be guessed from filename extensions.

Planned checks include key/certificate matching, chain handling, protected password input and reopening the output with the target library. Existing certificates are not automatically replaced and production services are not restarted. Algorithm support and native Mystic handshakes require separate qualification.

Planned distribution contains one executable and README.txt: ZIP for Windows, tar.gz for Linux. No separate manpage, MSI/DEB or system-wide PATH change.

Project overview

The first preview is published.

• Windows downloads: x86/x64, statically linked OpenSSL.
• Linux downloads: amd64/i386/arm64/armhf, system OpenSSL 3.
• GitHub release, source, checksums and test report.

Each archive contains only the executable and README. Native Windows 10 x86/x64 conversion tests with cryptlib 3.4.5 and Linux amd64 tests with 3.4.5/3.4.9.6 passed, including fullchain, encrypted PKCS#8 input, automatic library discovery and overwrite protection. Other Linux architectures passed startup tests on Debian 12/13 and Ubuntu 24.04/26.04. i386 uses 32-bit libraries on an amd64 kernel for these tests. Full native Mystic handshake qualification remains pending.