Generating a CSR using an engine in OpenSSL3 - how?

Graham Leggett minfrin at
Sat Sep 3 20:06:11 UTC 2022

Hi all,

When the openssl interactive mode was still possible, you could set up an engine and then use it as follows:

OpenSSL> engine -t dynamic -pre SO_PATH:/usr/lib64/openssl/engines/ -pre ID:pkcs11 -pre LIST_ADD:1 -pre LOAD -pre MODULE_PATH:/usr/lib64/pkcs11/
OpenSSL> req -engine pkcs11 -new
 -key 0:7f72c103216c285f28d0a05bcf87678e25b0f1e2 -keyform engine -out matthew.csr

What is the equivalent of the above in openssl3?


More information about the openssl-users mailing list