LX0-104 · Question #424
What openssl command will generate a certificate signing request (CSR) using the private key file privkey.pem?
The correct answer is B. openssl req new key privkey.pem out cert.csr. To generate a Certificate Signing Request (CSR) with OpenSSL, the openssl req command with the new option is used, specifying the private key file.
Question
Options
- Aopenssl req key privkey.pem out cert.csr
- Bopenssl req new key privkey.pem out cert.csr
- Copenssl gencsr key privkey.pem out cert.csr
- Dopenssl gencsr new key privkey.pem out cert.csr
How the community answered
(31 responses)- A3% (1)
- B94% (29)
- D3% (1)
Why each option
To generate a Certificate Signing Request (CSR) with OpenSSL, the openssl req command with the new option is used, specifying the private key file.
The new option is essential when creating a new CSR; omitting it would typically imply signing an existing request or performing a different operation.
The openssl req command is used for Certificate Signing Request (CSR) management. The new option indicates that a new CSR is to be created, and key privkey.pem specifies the private key to be used for signing the request, with out cert.csr defining the output file.
gencsr is not a standard or recognized subcommand for openssl to generate a CSR.
This option uses the non-existent gencsr subcommand.
Concept tested: OpenSSL Certificate Signing Request generation
Source: https://www.openssl.org/docs/manmaster/man1/openssl-req.html
Topics
Community Discussion
No community discussion yet for this question.