This topic is 3 years old by now. Has something changed on OpenSSL key generation since then? Does anybody know? Posted at Nginx Forum: http://forum.nginx.org/read.php?2,229538,257690#msg-257690