HPE7-A02 · Question #36
You are using OpenSSL to obtain a certificate signed by a Certification Authority (CA). You have entered this command: openssl req -new -out file1.pem -newkey rsa:3072 -keyout file2.pem Enter PEM…
The correct answer is C. You should submit file1.pem, but not file2.pem, to the desired CA to sign. When using OpenSSL to obtain a certificate signed by a Certification Authority (CA), you should submit the Certificate Signing Request (CSR) file, which is file1.pem, to the CA. The CSR contains the information about the entity requesting the certificate and the public key, but…
Question
You are using OpenSSL to obtain a certificate signed by a Certification Authority (CA). You have entered this command:
openssl req -new -out file1.pem -newkey rsa:3072 -keyout file2.pem Enter PEM pass phrase:
********** Verifying - Enter PEM pass phrase: ********** Country Name (2 letter code) [AU]:US State or Province Name (full name) [Some-State]:California Locality Name (eg, city) []:Sunnyvale Organization Name (eg, company) [Internet Widgits Pty Ltd]:example.com Organizational Unit Name (eg, section) []:Infrastructure Common Name (e.g. server FQDN or YOUR name) []:radius.example.com What is one guideline for continuing to obtain a certificate?
Options
- AYou should use a third-party tool to encrypt file2.pem before sending it and file1.pem to the CA.
- BYou should concatenate file1.pem and file2.pem into a single file, and submit that to the desired
- CYou should submit file1.pem, but not file2.pem, to the desired CA to sign.
- DYou should submit file2.pem, but not file1.pem, to the desired CA to sign.
How the community answered
(43 responses)- A9% (4)
- B2% (1)
- C84% (36)
- D5% (2)
Explanation
When using OpenSSL to obtain a certificate signed by a Certification Authority (CA), you should submit the Certificate Signing Request (CSR) file, which is file1.pem, to the CA. The CSR contains the information about the entity requesting the certificate and the public key, but not the private key, which is in file2.pem. The CA uses the information in the CSR to create and sign the 1. CSR Submission: The CSR (file1.pem) includes the public key and the entity information required by the CA to issue a certificate. 2. Private Key Security: The private key (file2.pem) should never be sent to the CA or shared; it remains securely stored on the requestor's server. 3. Certificate Issuance: After the CA signs the CSR, the resulting certificate can be used with the private key to establish secure communications.
Topics
Community Discussion
No community discussion yet for this question.