Thank you, was scratching my head with this one.In case anyone else is looking for the same solution for Catalyst 9K / IOS-XE, this applies to IOS-XE as well.
I managed to solve the issue adding the -legacy flag to the openssl command, this was my full syntax:openssl pkcs12 -export -out testcert.pfx -inkey privatekey.key -in cert.crt -certfile ca.crt -macalg sha1 -legacy
Hello Guillermo, how did you solve this error? I also created a PKCS file with -macalg SHA1 due to the message digest algorithms not supported issue and am also now stuck on the invalid encoding format for input data issue.