Tak isto tam bola pridana podpora pre
"Add the ability to add custom attributes to PKCS12 files. Add a new API PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows for a user specified callback and optional argument. Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be added to the existing STACK_OF attrs.".
Co vlastne znamena ze pre vytvarane keystoru v PKCS#12 pre javu nie je potrebne pouzivat keytools ale je mozne pouzit openssl len je potrebne pouzit parameter
-jdktrust wid nova man page https://www.openssl.org/docs/man3.2/man1/openssl-pkcs12.html