Is it possible to generate RSA key without pass phrase?
If you are generating a self signed cert, you can do both the key and cert in one command like so: openssl req -nodes -new -x509 -keyout server.key -out server.cert Oh, and what @MadHatter said in his answer about omitting the -des3 flag.