Do not use this in production. YYMV.
]$ echo -n 'this is the plaintext' | openssl aes-256-cbc -e -salt -pbkdf2 -iter 10000 -out ciphertext.enc -p
]$ cat ciphertext.enc|openssl enc -base64
]$ openssl aes-256-cbc -d -salt -pbkdf2 -iter 10000 -in ciphertext.enc -p