dsaparam(1ssl)dsaparam(1ssl)NAMEdsaparam - DSA parameter manipulation and generation
SYNOPSIS
openssl dsaparam [-inform DER | PEM] [-outform DER | PEM] [-in file‐
name] [-out filename] [-noout] [-text] [-C] [-rand filename] [-genkey]
[numbits]
OPTIONS
Specifies the input format. The DER option uses an ASN1 DER encoded
form compatible with RFC2459 (PKIX) DSS-Parms that is a SEQUENCE con‐
sisting of p, q and g respectively. The PEM form is the default format.
It consists of the DER format base64 encoded with additional header and
footer lines. Specifies the output format, the options have the same
meaning as the -inform option. Specifies the input filename to read
parameters from or standard input if this option is not specified. If
the numbits parameter is included then this option will be ignored.
Specifies the output filename parameters to. Standard output is used if
this option is not present. The output filename should not be the same
as the input filename. Inhibits the output of the encoded version of
the parameters. Prints out the DSA parameters in human readable form.
Converts the parameters into C code. The parameters can then be loaded
by calling the get_dsaXXX() function. Generates a DSA either using the
specified or generated parameters. A file or files containing random
data used to seed the random number generator, or an EGD socket. (See
RAND_egd(3).) Multiple files can be specified separated by an OS-depen‐
dent character. The separator is a semicolon (;) for MS-Windows, a
comma (,) for OpenVMS, and a colon (:) for all others. Specifies that
a parameter set should be generated of size numbits. It must be the
last option. If this option is included then the input file (if any) is
ignored.
DESCRIPTION
This command is used to manipulate or generate DSA parameter files.
NOTES
PEM format DSA parameters use the following header and footer lines:
-----BEGIN DSA PARAMETERS-----
-----END DSA PARAMETERS-----
DSA parameter generation is a slow process, and as a result the same
set of DSA parameters is often used to generate several distinct keys.
SEE ALSO
Commands: gendsa(1ssl), dsa(1ssl), genrsa(1ssl), rsa(1ssl)dsaparam(1ssl)