关于keytoll和openssl生成ssl

[root@localhost bin]# openssl ca -in test.csr -out demo.crt -cert root.crt -keyfile root.key -notext -config openssl.cnf
Using configuration from openssl.cnf
Enter pass phrase for root.key:
unable to load CA private key
13732:error:06065064:digital envelope routines:EVP_DecryptFinal:bad decrypt:evp_enc.c:438:
13732:error:0906A065EM routinesEM_do_header:bad decrypt:pem_lib.c:421:



请教一下,这边给root.key生成识别码为什么会出这个错？