Generate PKCS#8 private key with openssl [closed]

Question

Is it possible to use openssl to generate a PKCS#8 private key directly, or do I have to first generate a PKCS#1 key with genrsa and then convert it?

Answer 1

You can do this directly:

$ openssl genpkey -out rsakey.pem -algorithm RSA -pkeyopt rsa_keygen_bits:2048

See the man page here:

https://www.openssl.org/docs/man1.1.1/man1/openssl-genpkey.html