What iteration counts are used in OpenSSL PKCS #12?
By default, both iteration counts are set to 2048. If you use the -nomaciter option the MAC iteration count is also set to 1. Some software such as MSIE4 need this option because they do not support mac iteration counts. If you use the -noiter option the iteration count is set to 1; since this makes dictionary attacks on the password easier. This is not recommended.