Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Issue command:

openssl genrsa -out rsaprivatekey-nake.pem  -des3 1024

If not providing a passphrase(just press enter when requested), it keeps saying:

Enter pass phrase for rsaprivatekey-nake.pem:
3073726088:error:28069065:lib(40):UI_set_result:result too small:ui_lib.c:869:You must type in 4 to 8191 characters

Can anybody tell me why?

Env: openSUSE 11.4, openssl 1.0.0c

enter image description here

share|improve this question
up vote 10 down vote accepted

Because you are asking it to encrypt the private key by giving the -des3 option.

If you don't want your key to be protected by a password, remove the -des3 option from the command line.

share|improve this answer
note that -des3 can be the implicit default option -des3 encrypt private keys with triple DES (default)... so keep calm if you have the same prompt without asking openssl explicitly... same option to disable of course -nodes (read no DES) – Julien Mar 29 at 9:39
my version of openssl genrsa doesn't have a -nodes option. Just leave off the -des3 or any other encryption option in that case. From [link] If none of these options is specified no encryption is used – Brad Dre Apr 22 at 17:17

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.