Lines Matching +full:sub +full:- +full:engines
4 {- join("\n", @autowarntext) -}
10 openssl-genpkey - generate a private key
15 [B<-help>]
16 [B<-out> I<filename>]
17 [B<-outform> B<DER>|B<PEM>]
18 [B<-quiet>]
19 [B<-pass> I<arg>]
20 [B<-I<cipher>>]
21 [B<-paramfile> I<file>]
22 [B<-algorithm> I<alg>]
23 [B<-pkeyopt> I<opt>:I<value>]
24 [B<-genparam>]
25 [B<-text>]
26 {- $OpenSSL::safe::opt_engine_synopsis -}{- $OpenSSL::safe::opt_provider_synopsis -}
27 {- $OpenSSL::safe::opt_config_synopsis -}
37 =item B<-help>
41 =item B<-out> I<filename>
46 =item B<-outform> B<DER>|B<PEM>
48 The output format, except when B<-genparam> is given; the default is B<PEM>.
49 See L<openssl-format-options(1)> for details.
51 When B<-genparam> is given, B<-outform> is ignored.
53 =item B<-quiet>
57 =item B<-pass> I<arg>
60 see L<openssl-passphrase-options(1)>.
62 =item B<-I<cipher>>
67 =item B<-algorithm> I<alg>
70 precede any B<-pkeyopt> options. The options B<-paramfile> and B<-algorithm>
71 are mutually exclusive. Engines may add algorithms in addition to the standard
72 built-in ones.
74 Valid built-in algorithm names for private key generation are RSA, RSA-PSS, EC,
77 Valid built-in algorithm names for parameter generation (see the B<-genparam>
83 =item B<-pkeyopt> I<opt>:I<value>
90 =item B<-genparam>
93 precede any B<-algorithm>, B<-paramfile> or B<-pkeyopt> options.
95 =item B<-paramfile> I<filename>
100 precede any B<-pkeyopt> options. The options B<-paramfile> and B<-algorithm>
103 =item B<-text>
108 {- $OpenSSL::safe::opt_engine_item -}
110 {- $OpenSSL::safe::opt_provider_item -}
112 {- $OpenSSL::safe::opt_config_item -}
142 =head2 RSA-PSS Key Generation Options
144 Note: by default an B<RSA-PSS> key has no parameter restrictions.
176 The EC curve to use. OpenSSL supports NIST curve names such as "P-256".
235 The type of generation to use. Set this to 1 to use legacy FIPS186-2 parameter
236 generation. The default of 0 uses FIPS186-4 parameter generation.
244 If this value is not set then g is not verifiable. The default value is -1.
295 The number of bits in the sub prime parameter I<q>. The default is 224.
299 =item B<safeprime-generator>:I<value>
319 FIPS186-4 parameter generation.
324 FIPS186-4 parameter generation.
369 If this value is not set then g is not verifiable. The default value is -1.
397 openssl genpkey -algorithm RSA -out key.pem
401 openssl genpkey -algorithm RSA -out key.pem -aes-128-cbc -pass pass:hello
405 openssl genpkey -algorithm RSA -out key.pem \
406 -pkeyopt rsa_keygen_bits:2048 -pkeyopt rsa_keygen_pubexp:3
412 openssl genpkey -genparam -algorithm DSA -out dsap.pem -pkeyopt pbits:2048 \
413 -pkeyopt qbits:224 -pkeyopt digest:SHA256 -pkeyopt gindex:1 -text
417 openssl genpkey -paramfile dsap.pem -out dsakey.pem
421 openssl genpkey -algorithm DH -out dhkey.pem -pkeyopt group:ffdhe4096
425 openssl genpkey -algorithm DHX -out dhkey.pem -pkeyopt dh_rfc5114:3
429 openssl genpkey -paramfile dhp.pem -out dhkey.pem
433 openssl genpkey -genparam -algorithm DH -out dhp.pem -pkeyopt group:ffdhe2048
437 openssl genpkey -genparam -algorithm DHX -out dhp.pem -pkeyopt dh_rfc5114:2
439 Output 2048 bit X9.42 DH parameters with 224 bit subgroup using FIP186-4 keygen:
441 openssl genpkey -genparam -algorithm DHX -out dhp.pem -text \
442 -pkeyopt pbits:2048 -pkeyopt qbits:224 -pkeyopt digest:SHA256 \
443 -pkeyopt gindex:1 -pkeyopt dh_paramgen_type:2
445 Output 1024 bit X9.42 DH parameters with 160 bit subgroup using FIP186-2 keygen:
447 openssl genpkey -genparam -algorithm DHX -out dhp.pem -text \
448 -pkeyopt pbits:1024 -pkeyopt qbits:160 -pkeyopt digest:SHA1 \
449 -pkeyopt gindex:1 -pkeyopt dh_paramgen_type:1
453 openssl genpkey -genparam -algorithm DH -out dhp.pem \
454 -pkeyopt dh_paramgen_prime_len:2048
458 openssl genpkey -genparam -algorithm DH -out dhpx.pem \
459 -pkeyopt dh_paramgen_prime_len:2048 \
460 -pkeyopt dh_paramgen_type:1
464 openssl genpkey -genparam -algorithm EC -out ecp.pem \
465 -pkeyopt ec_paramgen_curve:secp384r1 \
466 -pkeyopt ec_param_enc:named_curve
470 openssl genpkey -paramfile ecp.pem -out eckey.pem
474 openssl genpkey -algorithm EC -out eckey.pem \
475 -pkeyopt ec_paramgen_curve:P-384 \
476 -pkeyopt ec_param_enc:named_curve
480 openssl genpkey -algorithm X25519 -out xkey.pem
484 openssl genpkey -algorithm ED448 -out xkey.pem
493 The B<-engine> option was deprecated in OpenSSL 3.0.
497 Copyright 2006-2023 The OpenSSL Project Authors. All Rights Reserved.