Sep 11, 2018  You can use Java key tool or some other tool, but we will be working with OpenSSL. To generate a public and private key with a certificate signing request (CSR), run the following OpenSSL command. When prompted, enter the passphrase to. I am using the following command in order to generate a CSR together with a private key by using OpenSSL: openssl req -new -subj '/CN=sample.myhost.com' -out newcsr.csr -nodes -sha512. Jan 31, 2010  How to create a self signed ssl cert with no passphrase for your test server. Generate your key with openssl. Openssl genrsa -out server.key 1024 Output: Generating RSA private key, 1024 bit long modulus. We have a set of public and private keys and certificates on the server. The problem is that while public encryption works fine, the passphrase for the.key file got lost. So, when trying to execute the following command: openssl rsa -in the.key It will obviously ask for the passphrase. Is it possible to get the lost passphrase somehow? Omitting -des3 as in the answer by @MadHatter is not enough in this case to create a private key without passphrase. It is enough for this purpose in the openssl rsa ('convert a private key') command referred to by @MadHatter and the openssl genrsa ('create a private key') command.

1. Openssl Rsa Key Pair
2. Private Key Definition

First, you have to generate parameters from which to generate the key then to generate the key itself. Openssl dsaparam -out dsaparam.pem 2048 openssl gendsa -des3 -out privkey.pem dsaparam.pem. Again like RSA, 2048 is the size of the key, in bits with anything smaller than 2048 being insecure in todays standards. Common OpenSSL Commands with Keys and Certificates. Generate RSA private key with certificate in a single command openssl req -x509 -newkey rsa:4096 -sha256 -keyout example.key -out example.crt -subj '/CN=example.com' -days 3650 -passout pass:foobar Generate Certificate Signing Request (CSR) from private key with passphrase.

Solution

In some circumstances there may be a need to have the certificate private key unencrypted.
To remove the private key password follow this procedure:

Openssl Rsa Key Pair

Private Key Definition

1. Copy the private key file into your OpenSSL directory (or you can specify the path in the command line).
   
2. Run this command using OpenSSL:

   
   Enter the passphrase and [file2.key] is now the unprotected private key.

   The output file: [file2.key] should be unencrypted. To verify this open the file using a text editor (such as MS Notepad) and view the headers.
   Encrypted headers look like this:
   -----BEGIN RSA PRIVATE KEY-----
   Proc-Type: 4,ENCRYPTED DEK-Info: DES-EDE3-CBC,

   
   6AC307785DD187EF...
   -----END RSA PRIVATE KEY-----

   
   Unencrypted headers look like this:
   -----BEGIN RSA PRIVATE KEY-----
   6AC307785DD187EF...
   -----END RSA PRIVATE KEY-----

   WARNING: Be aware that having an unencrypted private key adds a security risk by making it easier to obtain your private key if the private key file is stolen.
   For more information on OpenSSL please visit: www.openssl.org