CURRENT IMPLEMENTATION pki-* scripts are scripts that manages the engine specific CA artifacts. these scripts are used to manage the internal CA. the pki-pkcs12-extract.sh is an exception it is a utility script that wraps openssl utility, it is used only for setup and has no value outside of the setup scope. NEW IMPLEMENTATION remove the pki-pkcs12-extract.sh script from our cli interface, add similar functionality as pki module (or any other) of setup-common python module. this python module can execute openssl the same manner that is used within the script. having this within setup will also enable the usage of openssl wrapper within other components which runs outside of engine scope. Thanks!
Closing old RFEs. Please reopen if relevant.