[Openvpn-users] Generate encrypted private keys

[hdf s. <ani...@ma...>]

I have been using the build-key-pass and build-ca-pass scripts with windows to generate my keys. Everything works except I don't want to use the default encryption algorithm: 

-----BEGIN RSA PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: DES-EDE3-CBC,9A1FF7797E58B860

I want to use AES-256-CBC.  I've tried changing the key generation syntax with every possible enc and -e combination I could think of, though nothing has worked for me yet.  

This is my build-key-pass.bat, what should I add?:

@echo off
cd %HOME%
openssl req -days 1097 -new -sha1 -keyout F:\\OpenVPN\\easy-rsa\\keys\\%1.key -out F:\\OpenVPN\\easy-rsa\\keys\\%1.csr -config %KEY_CONFIG%
openssl ca -days 1097 -md sha1 -out F:\\OpenVPN\\easy-rsa\\keys\\%1.crt -in F:\\OpenVPN\\easy-rsa\\keys\\%1.csr -config %KEY_CONFIG%

Thanks

-- 
Be Yourself @ mail.com!
Choose From 200+ Email Addresses
Get a Free Account at www.mail.com