RSASSA-PSS/openssl

signing requests and certificates can be signed with rsa-pss with the parameters -sigopt rsa_padding_mode:pss and -sigopt rsa_pss_saltlen:xxx. Note that if you want to pass a saltlen-parameter, you have to pass the rsa_padding_mode-parameter before that.

http://marc.info/?l=openssl-users&m=127427657122954&w=2