openssl reminded me of gpg, wow, this one is horrible, and manuals don't help at all.