Openssl gendsa命令

openssl gendsa [-out filename] [-passout out] [-rand file(s)] [-engine id] [paramfile] [-des] [-des3] [-idea]

 -out file - output the key to ‘file‘
 -des      - encrypt the generated key with DES in cbc mode
 -des3     - encrypt the generated key with DES in ede cbc mode (168 bit key)
 -idea     - encrypt the generated key with IDEA in cbc mode
 -seed
                 encrypt PEM output with cbc seed
 -aes128, -aes192, -aes256
                 encrypt PEM output with cbc aes
 -camellia128, -camellia192, -camellia256
                 encrypt PEM output with cbc camellia
 -engine e - use engine e, possibly a hardware device.
 -rand file:file:...
           - load the file (or the files in the directory) into
             the random number generator
 dsaparam-file
           - a DSA parameter file as generated by the dsaparam command

openssl gendsa -des3 -out encdsa.pem dsaparam.pem

参考：http://blog.csdn.net/as3luyuan123/article/details/14498289