WIP PKCS12 generation.

.gitignore

@@ -7,3 +7,4 @@ keys/*
 openssl.cnf
 CA.key
 CA.crt
+CA.p12

README.rst

@@ -86,4 +86,4 @@ at: https://www.shore.co.il/cgit/.
 TODO
 ----
 
-Nothing to see here.
+- PKCS12 file for browser import (also tests).

ssl-ca

@@ -62,6 +62,12 @@ init () {
         -keyout CA.key \
         -extensions v3_ca \
         -out CA.crt
+    openssl pkcs12 \
+        -export \
+        -in CA.crt \
+        -inkey CA.key \
+        -out CA.p12 \
+        -passout pass:
 }
 
 sign_key () {