This is take straight from http://devsec.org/info/ssl-cert.html. I’m getting it on my blog, as a reference to myself, so I can make a key pair quickly in the future.

1. Openssl Key Generation Without Password Download
2. Openssl Genrsa No Password
3. Openssl Private Key No Password
4. Key Generation Software
5. Openssl Key Generation

While Encrypting a File with a Password from the Command Line using OpenSSL is very useful in its own right, the real power of the OpenSSL library is its ability to support the use of public key cryptograph for encrypting or validating data in an unattended manner (where the password is not required to encrypt) is done with public keys. The Commands to Run Generate a 2048 bit RSA Key.

Make a new ssl private key:

* Generate a new unencrypted rsa private key in PEM format:

openssl genrsa -out privkey.pem 2048

Openssl Key Generation Without Password Download

You can create an encrypted key by adding the -des3 option.

#
To make a self-signed certificate:

Openssl Genrsa No Password

* Create a certificate signing request (CSR) using your rsa private key:

openssl req -new -key privkey.pem -out certreq.csr

( This is also the type of CSR you would create to send to a root CA for them to sign for you. )

Openssl Private Key No Password

* Self-sign your CSR with your own private key:

Key Generation Software

openssl x509 -req -in certreq.csr -signkey privkey.pem -out newcert.pem

Openssl Key Generation

1. The -nodes flag signals to not encrypt the key, thus you do not need a password. You could also use the -passout arg flag. See PASS PHRASE ARGUMENTS in the openssl(1) man page for how to format the arg. Using the -subj flag you can specify the subject (example is above).
2. OpenSSL has a variety of commands that can be used to operate on private key files, some of which are specific to RSA (e.g. Openssl rsa and openssl genrsa) or which have other limitations. Here we always use openssl pkey, openssl genpkey, and openssl pkcs8, regardless of the type of key. The first section describes how to generate private keys.
3. Mar 25, 2016  Generate a Password To actually generate a secure password we use the OpenSSL rand command which generates pseudo-random bytes - the raw material for our new secure password. The rand command allows us to encode the produced random bytes in base64.
4. Sep 12, 2014 This section covers OpenSSL commands that are related to generating CSRs (and private keys, if they do not already exist). CSRs can be used to request SSL certificates from a certificate authority. Keep in mind that you may add the CSR information non-interactively with the -subj option, mentioned in the previous section.
5. In this example, we are generating a private key using RSA and a key size of 2048 bits. $ openssl genpkey -algorithm RSA -pkeyopt rsakeygenbits:2048 -out private-key.pem To generate a password protected private key, the previous command may be slightly amended as follows.