1=pod 2{- OpenSSL::safe::output_do_not_edit_headers(); -} 3 4=head1 NAME 5 6openssl-dsaparam - DSA parameter manipulation and generation 7 8=head1 SYNOPSIS 9 10B<openssl dsaparam> 11[B<-help>] 12[B<-inform> B<DER>|B<PEM>] 13[B<-outform> B<DER>|B<PEM>] 14[B<-in> I<filename>] 15[B<-out> I<filename>] 16[B<-noout>] 17[B<-text>] 18[B<-genkey>] 19[B<-verbose>] 20{- $OpenSSL::safe::opt_r_synopsis -} 21{- $OpenSSL::safe::opt_engine_synopsis -}{- $OpenSSL::safe::opt_provider_synopsis -} 22[I<numbits>] 23 24=head1 DESCRIPTION 25 26This command is used to manipulate or generate DSA parameter files. 27 28DSA parameter generation can be a slow process and as a result the same set of 29DSA parameters is often used to generate several distinct keys. 30 31=head1 OPTIONS 32 33=over 4 34 35=item B<-help> 36 37Print out a usage message. 38 39=item B<-inform> B<DER>|B<PEM> 40 41The DSA parameters input format; unspecified by default. 42See L<openssl-format-options(1)> for details. 43 44=item B<-outform> B<DER>|B<PEM> 45 46The DSA parameters output format; the default is B<PEM>. 47See L<openssl-format-options(1)> for details. 48 49Parameters are a sequence of B<ASN.1 INTEGER>s: B<p>, B<q>, and B<g>. 50This is compatible with RFC 2459 B<DSS-Parms> structure. 51 52=item B<-in> I<filename> 53 54This specifies the input filename to read parameters from or standard input if 55this option is not specified. If the I<numbits> parameter is included then 56this option will be ignored. 57 58=item B<-out> I<filename> 59 60This specifies the output filename parameters to. Standard output is used 61if this option is not present. The output filename should B<not> be the same 62as the input filename. 63 64=item B<-noout> 65 66This option inhibits the output of the encoded version of the parameters. 67 68=item B<-text> 69 70This option prints out the DSA parameters in human readable form. 71 72=item B<-genkey> 73 74This option will generate a DSA either using the specified or generated 75parameters. 76 77 78=item B<-verbose> 79 80Print extra details about the operations being performed. 81 82{- $OpenSSL::safe::opt_r_item -} 83 84{- $OpenSSL::safe::opt_engine_item -} 85 86=item I<numbits> 87 88This option specifies that a parameter set should be generated of size 89I<numbits>. It must be the last option. If this option is included then 90the input file (if any) is ignored. 91 92{- $OpenSSL::safe::opt_provider_item -} 93 94=back 95 96=head1 SEE ALSO 97 98L<openssl(1)>, 99L<openssl-pkeyparam(1)>, 100L<openssl-gendsa(1)>, 101L<openssl-dsa(1)>, 102L<openssl-genrsa(1)>, 103L<openssl-rsa(1)> 104 105=head1 HISTORY 106 107The B<-engine> option was deprecated in OpenSSL 3.0. 108 109The B<-C> option was removed in OpenSSL 3.0. 110 111=head1 COPYRIGHT 112 113Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved. 114 115Licensed under the Apache License 2.0 (the "License"). You may not use 116this file except in compliance with the License. You can obtain a copy 117in the file LICENSE in the source distribution or at 118L<https://www.openssl.org/source/license.html>. 119 120=cut 121