Question

A web administrator needs to renew the TLS certificate for an internal application. Company policy requires reusing the existing 2048-bit private key stored at /etc/pki/tls/private/app.key rather than generating a new one. Which command produces a certificate signing request (CSR) to submit to the internal CA using that existing key?

Accepted Answer

openssl req -new -key /etc/pki/tls/private/app.key -out /etc/pki/tls/app.csr

Answer

openssl req -new -newkey rsa:2048 -nodes -keyout /etc/pki/tls/private/app.key -out /etc/pki/tls/app.csr

Answer

openssl x509 -req -in /etc/pki/tls/private/app.key -out /etc/pki/tls/app.csr

Answer

openssl genrsa -out /etc/pki/tls/app.csr 2048