A DESCRIPTION OF THE PROBLEM :
Creating PKCS#12 key stores that are readable by macOS requires downgrading the algorithms in use. Unfortunately, whilst there is an API to do this for the individual entries by specifying the protection parameters, there's no API to do this for the key store MAC except by setting/resetting global security properties, which is not thread safe.