% gpgsm --gen-key # needs gpgsm 2.1
key+cert.pem: cert + unencryped private
- % gpsm --import test.crt
+ % gpgsm --import test.crt
% gpgsm --export-private-key-p12 -out foo.p12 (no passphrase)
% openssl pkcs12 -in ns.p12 -clcerts -nodes > key+cert.pem
+
+ca.crt: from https://tools.ietf.org/id/draft-dkg-lamps-samples-01.html#name-certificate-authority-certi