# openssl genrsa -out priv.pem -des3 2048
Generating RSA private key, 2048 bit long modulus
............................................+++
.....................+++
e is 65537 (0x10001)
Enter pass phrase for priv.pem:
Verifying - Enter pass phrase for priv.pem:

# openssl req -new -key priv.pem -out csr.pem
Enter pass phrase for priv.pem:   (it asks for password here)
.....


If using -passout:
# openssl genrsa -out priv.pem -passout pass:passwd 2048
Generating RSA private key, 2048 bit long modulus
..........+++
.............................................................................................................+++
e is 65537 (0x10001)

# openssl req -new -key priv.pem -out csr.pem
You are about to be asked to enter information that will be incorporated
into your certificate request.
( no prompt to enter password here )
.....