Extract your private key for GSISSH (and Globus)

openssl pkcs12 -in eSciCA.cert.p12 -nocerts \
                                    -out userkey.pem

• Enter Import Password: (enter p/w used for "backup" file).
• MAC verified ok.
• Enter PEM pass phrase: Enter a passphrase to protect your private key (at least 16 characters).
• Verifying - Enter PEM pass phrase: [same again]
• userkey.pem:

      Bag Attributes
          friendlyName: joe bloggs's eScienceCA ID
          localKeyID: 87 .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. EE
      Key Attributes: <No Attributes>
      -----BEGIN RSA PRIVATE KEY-----
      Proc-Type: 4,ENCRYPTED
      DEK-Info: DES-...
  
      hYPbKo...
      .
      .