如何将base64编码的p12转换为tls.Certificate

import (
    "crypto/tls"
    "encoding/base64"
    "encoding/pem"
    "errors"
)

func decodeBase64P12(base64P12 string, password string) (*tls.Certificate, error) {
    // 解码base64编码的p12文件
    p12Data, err := base64.StdEncoding.DecodeString(base64P12)
    if err != nil {
        return nil, err
    }

    // 解析p12文件
    blocks, err := pkcs12.ToPEM(p12Data, password)
    if err != nil {
        return nil, err
    }

    // 提取证书和私钥
    var certPEM, keyPEM []byte
    for _, block := range blocks {
        if block.Type == "CERTIFICATE" {
            certPEM = pem.EncodeToMemory(block)
        } else if block.Type == "PRIVATE KEY" {
            keyPEM = pem.EncodeToMemory(block)
        }
    }

    if certPEM == nil || keyPEM == nil {
        return nil, errors.New("Failed to extract certificate or private key")
    }

    // 创建tls.Certificate对象
    cert, err := tls.X509KeyPair(certPEM, keyPEM)
    if err != nil {
        return nil, err
    }

    return &cert, nil
}