Creating a Password-protected Key Pair

# ./usr/local/ssl/bin/openssl genrsa des3 -rand file1:file2:file3 \    -out www.example.com.key 1024

In this case, the des3 option indicates that the private key should be encrypted and protected by a pass phrase, and you will be asked to provide it. You will be asked for it whenever you want to start the server as shown in the SSLPassPhraseDialog section.