How to generate .key and .crt from .p12 file

[JACKHAHA363]

In the ipsec/manual, I can find one user.p12 file but I don't see user.key or user.crt. I realize that the latter two files are generated by user.p12 so I tried

openssl pkcs12 -in <user>.p12 -out <user>.key

But it asks for Enter Import Password and Enter PEM pass phrase. I am not sure what these two passwords are.

[JACKHAHA363]

after installation you can see

  "    \"#        The p12 and SSH keys password for new users is XXXXXX       #\"\n",

Then you do

openssl pkcs12 -in path.p12 -out newfile.crt.pem -clcerts -nokeys -passin 'pass:XXXXXX'
openssl pkcs12 -in path.p12 -out newfile.key.pem -nocerts -nodes -passin 'pass:XXXXXX'