Is it possible to generate a new CSR with the same RSA pair?

[sgonsalv]

Hi Giles,

In the event a certificate needs to be renewed, is it possible to generate a new CSR using the same RSA key pairs?

From the testing i've been doing, it appears that a new CSR can only be obtained when the RSA key pair is regenerated.

thanks,

Sheldon

[Gilles Dufour]

with openssl you can generate a new CSR w/ an existing key pair.

The command is

openssl req -pubkey -key -new

Regards,

Gilles.

[sgonsalv]

Thanks...i should have been more specific to say is this possible on the SSL Module. From my testing it doesn't appear that this can be done on the module?

thanks,

Sheldon

[Gilles Dufour · Accepted solution]

unfortunately I don't know if this is possible or not.

If not possible, you can export your key and certificate and use openssl.

I personally prefer to play with openssl than relying on the SSLM tools - not that they are not good but because openssl is a standard and therefore can be used for any plaform.

Gilles.