X509_REQ_sign
if (!X509_REQ_sign(ret, pkey, md))
int X509_REQ_sign(X509_REQ *x, EVP_PKEY *pkey, const EVP_MD *md);