It's fairly straight-forward to use. This isn't tested, but should work:

# load OpenSSL.crypto
from OpenSSL import crypto

# open it, using password. Supply/read your own from stdin.
p12 = crypto.load_pkcs12(open("/path/to/cert.p12", 'rb').read(), passwd)

# get various properties of said file.
# note these are PyOpenSSL objects, not strings although you
# can convert them to PEM-encoded strings.
p12.get_certificate()     # (signed) certificate object
p12.get_privatekey()      # private key.
p12.get_ca_certificates() # ca chain.

For more examples, have a look through the unit test code of pyopenssl. Pretty much every way you might want to use the library is there

See also here or without adverts here.

For people not using openssl who have this problem (missing sign method) there is another solution.

Check the import section on the top of your code, you need to have this import :

from Crypto.Signature import PKCS1_v1_5

and not the Crypto.Cipher implementation:

from Crypto.Cipher import PKCS1_v1_5

This class doesn't have the sign method: https://www.dlitz.net/software/pycrypto/api/2.6/Crypto.Cipher.PKCS1_v1_5.PKCS115_Cipher-class.html

The Crypto.Signature PKCS1_v1_5 class has the sign method :https://www.dlitz.net/software/pycrypto/api/2.6/Crypto.Signature.PKCS1_v1_5.PKCS115_SigScheme-class.html

Use cryptography.hazmat.primitives.serialization.pkcs12.load_key_and_certificates.

Example:

Copyfrom cryptography.hazmat.primitives.serialization import pkcs12

with open("cert.pfx", "rb") as f:
    private_key, certificate, additional_certificates = pkcs12.load_key_and_certificates(f.read(), b"1234")
print(certificate.not_valid_after)