-openssl ecparam -genkey -name secp521r1 -noout -out $d1/server.priv
-openssl ecparam -genkey -name secp521r1 -noout -out $d1/client.priv
-yes '' | openssl req -new -pubkey -key $d1/server.priv -noout -out $d1/server.pub
-echo
-yes '' | openssl req -new -pubkey -key $d1/client.priv -noout -out $d1/client.pub
-echo