Network Security with OpenSSL

Name

dsaparam

Synopsis

The dsaparam command is used to generate new DSA parameters. It can also be used to examine previously generated parameters.

Options

-in filename

Specify the name of a file from which existing DSA parameters will be read. If no file is specified, stdin is used.

-inform DER|PEM

Specify the format, DER or PEM, of the parameters that are read as input. If this option is omitted, the default format is PEM.

-out filename

Specify the name of a file to which the output from this command will be written. If this option is omitted, stdout will be used.

-outform DER|PEM

Specify the format, DER or PEM, of the parameters that are generated. If this option is omitted, PEM is the default.

-rand filename

Specify the name of a file or files to be used to seed the PRNG. This option follows the format outlined in Chapter 2.

-genkey

Cause a private key to be generated using the generated parameters or the parameters read from the input source. The private key will not be encrypted.

-noout

Cause the output of the parameters in DER or PEM format to be suppressed.

-text

Cause the parameters to be output in a human-readable form.

-C

Cause the parameters to be output in C code form.

Notes

The length of the parameters to be generated is specified as the last argument to the command. If the length is specified, the input source is ignored, and new parameters are generated.