The -aes128 option is used when encrypting private keys read from a PKCS#12 file, not when generating such a file.
git describe