The OpenSSL helper function PKCS12_parse only emits a single private key (and its associated certificate), the rest of the certificates appear, but as public-key only.
Similar to #15004, the fix would be to not use the helper function, but to get into the nitty-gritty with PKCS12 primitives.
The OpenSSL helper function
PKCS12_parseonly emits a single private key (and its associated certificate), the rest of the certificates appear, but as public-key only.Similar to #15004, the fix would be to not use the helper function, but to get into the nitty-gritty with PKCS12 primitives.