Apache Guacamole SSH Key Generation

Apache Guacamole is a RDP/VNC/SSH Client for your web browser.

SSH keys created by ssh-keygen contains an unsupported header:
-----BEGIN OPENSSH PRIVATE KEY-----

The existing discussions on the web don't show how to add a passphrase to the key generated with openssl so this is how you do it:

KEYFILE=~/.ssh/id_guacamole
PASSWORD=<SSH KEY PASSWORD>

openssl genrsa -passout pass:${PASSWORD} -out ${KEYFILE} 4096
ssh-keygen -y -f ${KEYFILE} > ${KEYFILE}.pub

References: