keygen should either print the requirements on passphrases before prompting or reprompt if it is too short.
Don't blame us - this check happens in openssl :)
Mass change of RESOLVED bugs to CLOSED