I just fixed a firewall misconfiguration, so the above should actually work, now.
GnuTLS-compiled libneon appears to be able to decrypt pkcs12, at least, so I suppose libcurl should really be able to do the same. Let me know if I should move on to bugging them about it instead.
signature.asc
Description: Digital signature