I need to gerenate a Certificate Signing Request (CSR) so I can obtain a wildcard certificate to upload to Cloudflare so I can enforce modern TLS(1.2+).
I'm using AWS for my application and and putting Cloudflare in front of this for extra security. My app in AWS uses certificates from AWS certificate manager which can't be exported. So I bought an SSL from a provider.
Can I generate the a CSR on my local laptop and use that to obtain the cert to upload to Cloudflare or do I need to generate the cert on my AWS loadbalancer? Can I just generate the CSR on my laptop?
The load balancers are likely to be refreshed regularly as they are part of an auto sclaing group so I don't know how I can manage this? I also don't know why it matters where I generate the CSR as I'm going to upload to Cloudflare which is independent of my infrastructure.