PKI --GEN(1) strongSwan PKI --GEN(1) (NAME) pki --gen - RSA ECDSA (SYNOPSIS) pki --gen [--type type] [--size bits] [--safe-primes] [--shares n] [--threshold l] [--outform encoding] [--debug level] pki --gen --options file pki --gen -h | --help (DESCRIPTION) pki(1) RSA ECDSA . (OPTIONS) -h, --help . -v, --debug level : 1. -+, --options file file. -t, --type type . rsa ecdsa ed25519 ed448 rsa . -s, --size bits . 2048 rsa 384 ecdsa . ecdsa : 256 384 521. -p, --safe-primes (safe primes) RSA. -f, --outform encoding . der (ASN.1 DER) pem (Base64 PEM) der . RSA -n, --shares RSA. -l, --threshold RSA. (PROBLEMS ON HOSTS WITH LOW ENTROPY) gmp RSA /dev/random ( random) . (block) . /dev/random OpenSSL ( openssl ) ( /dev/urandom ). random strongswan.conf(5) . libstrongswan.plugins.random.random /dev/urandom /dev/urandom . . (EXAMPLES) pki --gen --size 3072 > rsa_key.der RSA . pki --gen --type ecdsa --size 256 > ecdsa_key.der ECDSA . (SEE ALSO) pki(1) 6.1.0 2016-12-13 PKI --GEN(1)