The sorry state of OpenSSL usability

Say you want to generate an RSA key, so you Google it, and find a couple of official-looking pages, and Every OpenSSL command has two documentation pages, one under “docs” and one on their wiki. , yet they fail to give the blindly, blisteringly obvious answer to their question: all the keys are weak because weak keys are the default in OpenSSL, and you’d never know otherwise from any output or documentation. When you use a file in the deprecated SSLeay format, the tool could tell you, “Note: you’re using a private key in the SSLeay format; you should convert it to PKCS#8 with: ”.

Source: jameshfisher.com