Use OpenSSL::PKey.generate_pkey instead of OpenSSL::PKey::Algo

This is the recommended way to generate private keys.

lib/puppet/provider/ssl_pkey/openssl.rb

@@ -9,20 +9,25 @@ def self.dirname(resource)
     resource[:path].dirname
   end
 
-  def self.generate_key(resource)
+  # @see man openssl genpkey
+  def self.generate_key_params(resource)
     case resource[:authentication]
     when :dsa
-      OpenSSL::PKey::DSA.new(resource[:size])
+      OpenSSL::PKey.generate_parameters('DSA', 'dsa_paramgen_bits' => resource[:size])
     when :rsa
-      OpenSSL::PKey::RSA.new(resource[:size])
+      OpenSSL::PKey.generate_parameters('RSA', 'rsa_keygen_bits' => resource[:size])
     when :ec
-      OpenSSL::PKey::EC.new(resource[:curve]).generate_key
+      OpenSSL::PKey.generate_parameters('EC', 'ec_paramgen_curve' => resource[:curve])
     else
       raise Puppet::Error,
-            "Unknown authentication type '#{resource[:authentication]}'"
+        "Unknown authentication type '#{resource[:authentication]}'"
     end
   end
 
+  def self.generate_key(resource)
+    OpenSSL::PKey.generate_key(generate_key_params(resource))
+  end
+
   def self.to_pem(resource, key)
     if resource[:password]
       cipher = OpenSSL::Cipher.new('des3')