OpenSSL `genpkey`#

genpkey is the recommended modern command to generate private keys.

Examples#

Generate RSA key:

openssl genpkey -algorithm RSA -out rsa_key.pem -pkeyopt rsa_keygen_bits:2048

Generate EC key:

openssl genpkey -algorithm EC -out ec_key.pem -pkeyopt ec_paramgen_curve:P-256

Generate DH key (requires params):

openssl genpkey -paramfile dhparam.pem -out dhkey.pem