On 09/09/2015 05:12 AM, Alice Wonder wrote: > If I need to script some management of text files with PEM content, > are there already some tools that exist that do this safely? "openssl" provides commands that should be able to process the PEM components in-place. For instance, if you want to extract the certificate, only, from a PEM file, you can: openssl x509 -in somecert.pem -out cert-only.pem ...and for the private key: openssl rsa -in somecert.pem -out key-only.pem