title: How to generate certificate if private key is in HSM?
body: <p>I often use <code>openssl</code> to generate RSA key and certificate. But now i encounter a problem. <code>openssl x509 -req</code> require private key as input. But now we're using HSM to protect private key and I'll never be able to touch the private key. In this way how do i suppose to generate a x509 certificate?</p>