I had generated the CSR with OpenSSL. Do I need to regenerate a new CSR with no vulnerability due to OpenSSL in order to obtain a new certificate from a CA?

  • Yes. Otherwise you're using the same key, which defeats the purpose. – tylerl Apr 12 '14 at 18:44

There is no problem with CSR's generated with a vulnerable version of OpenSSL.

This doesn't mean your keys were not compromised via an actively running server, but it sounds like you understand that.

| improve this answer | |

Not the answer you're looking for? Browse other questions tagged or ask your own question.