Command-line renewal of certs

Hi all:

 

I manage quite a few F5s for different customers as part of my job. One of the main things that I do for them is generate CSRs for new certs or renewals and send them to the customers so they can get them signed and back to me to import. I'm sure you can imagine that it's rather time consuming to point and click when I can and have written a script that will do everything but send the request off for me. I have to use a jump host to access all of my customers' F5s, so it'd be really nice to be able to do renewals from the jump host that I have to use with a few keystrokes like I do with new requests. I'm aware of the gencert utiility, which I use for new requests, but I need to be able to generate CSRs command-line using an existing key like you can through the WebUI. I've done some research and searching around and the OpenSSL utility *appears* to be the one that I should use for this, but I haven't been able to find anything that specifically says "for command-line cert renewal (using an existing key), run utility x with these options." The fact that I haven't found something like this is probably due to a PEBKAC error, so I figured I would just ask rather than continuing to beat my head against the wall as I'm pretty sure that someone here has already asked this question.

 

Thanks in advance,

 

Lucky