Add Key and cert in CURL

https://downey.io/notes/dev/curl-using-mutual-tls/

curl --cert 'abc.com_digicert_sha2_secure_server_ca_.pem' \
--key 'abc.com_digicert_sha2_secure_server_ca_.pkcs8' \
--location --request POST 'https://demo--test.my.salesforce.com:8443/services/oauth2/token' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--header 'Cookie: BrowserId=4jzphkElEeu76TsJSxG4Tw' 

curl --cacert ca.crt \
     --key client.key \
     --cert client.crt \
https://cloud-controller-ng.service.cf.internal:9023/internal/v4/syslog_drain_urls

Exporting CER and KEY file to PFX File - SSL

[rage@az-cvs-li-re-001 ~]$ cd Playground/

[rage@az-cvs-li-re-001 Playground]$ openssl pkcs12 -export -in linux_cert.pem -inkey privateky.key -out output.pfx

Enter Export Password:

Verifying - Enter Export Password:

[rage@az-cvs-li-re-001 Playground]$ ls

linux_cert.pem  output.pfx  privateky.key

[rage@az-cvs-li-re-001 Playground]$

PFX File from CER/PEM(Public) and Key File(Private)

https://support.globalsign.com/ssl/ssl-certificates-installation/install-pfxpkcs12-internet-information-services-iis-7

openssl pkcs12 -export -in linux_cert.pem -inkey privateky.key -out output.pfx

PFX file has a Password - This password is for protecting contents of this container to be visible to others except those who know password

Private Key - While Making a Private Key -We too give a Passphrase for encryption

PrivateKey Passphrase and PFX Container Passphrase are different.

https://stackoverflow.com/a/808742/2413870