PKCS#12 Restoration: Reject Legacy Ciphers or Restore and Re-Encrypt
OpenSSL 3.x offers the pkcs12 command for exporting and importing certificates and private keys into a single encrypted archive. During restoration, the command performs MAC verification to confirm the archive has not been tampered with, but it does not verify the key's usability or enforce a minimum encryption strength, accepting whatever algorithm was used
openssl