What openssl command will generate a private RSA key of 2048 bits and passphrase?
A.
openssl genrsa des3 out privkey.pem 2048
B.
openssl genrsa out privkey.pem 2048
C.
openssl genrsapass out privkey.pem 2048
D.
openssl genrsapass des3 out privkey.pem 2048
(SPOILER)
I’m not sure the answer labelled as correct is the right one. The question explicitly requests for a passphrase, and OpenSSL manpage clearly states that a switch like “-des3” is needed otherwise the outputed key will NOT be ciphered.
Therefore, I consider A to be the correct answer, and B a wrong one.
A. is the correct asnwer,
openssl genrsa -des3 -out privkey.pem 2048