157429Smarkm=pod 257432Smarkm 357432Smarkm=head1 NAME 457429Smarkm 557429Smarkmopenssl-dsaparam, 660576Skrisdsaparam - DSA parameter manipulation and generation 757429Smarkm 857429Smarkm=head1 SYNOPSIS 957493Speter 1060678SkrisB<openssl dsaparam> 1157429Smarkm[B<-inform DER|PEM>] 1265022Skris[B<-outform DER|PEM>] 1357429Smarkm[B<-in filename>] 1457432Smarkm[B<-out filename>] 1557432Smarkm[B<-noout>] 1657432Smarkm[B<-text>] 1757429Smarkm[B<-C>] 1857429Smarkm[B<-rand file(s)>] 1957429Smarkm[B<-genkey>] 2057429Smarkm[B<-engine id>] 2157429Smarkm[B<numbits>] 2265357Skris 2357429Smarkm=head1 DESCRIPTION 2457429Smarkm 2557429SmarkmThis command is used to manipulate or generate DSA parameter files. 2657429Smarkm 2757429Smarkm=head1 OPTIONS 2857429Smarkm 2957429Smarkm=over 4 3057429Smarkm 3157429Smarkm=item B<-inform DER|PEM> 3257429Smarkm 3357429SmarkmThis specifies the input format. The B<DER> option uses an ASN1 DER encoded 3457429Smarkmform compatible with RFC2459 (PKIX) DSS-Parms that is a SEQUENCE consisting 3557429Smarkmof p, q and g respectively. The PEM form is the default format: it consists 3657429Smarkmof the B<DER> format base64 encoded with additional header and footer lines. 3757429Smarkm 3857429Smarkm=item B<-outform DER|PEM> 3957429Smarkm 4057429SmarkmThis specifies the output format, the options have the same meaning as the 4157429SmarkmB<-inform> option. 4257429Smarkm 4357429Smarkm=item B<-in filename> 4457429Smarkm 4557429SmarkmThis specifies the input filename to read parameters from or standard input if 4657429Smarkmthis option is not specified. If the B<numbits> parameter is included then 4757429Smarkmthis option will be ignored. 4857429Smarkm 4957429Smarkm=item B<-out filename> 5057429Smarkm 5157429SmarkmThis specifies the output filename parameters to. Standard output is used 5257429Smarkmif this option is not present. The output filename should B<not> be the same 5357429Smarkmas the input filename. 5460813Sache 5557429Smarkm=item B<-noout> 5665674Skris 5765674Skristhis option inhibits the output of the encoded version of the parameters. 5865674Skris 5965674Skris=item B<-text> 60 61this option prints out the DSA parameters in human readable form. 62 63=item B<-C> 64 65this option converts the parameters into C code. The parameters can then 66be loaded by calling the B<get_dsaXXX()> function. 67 68=item B<-genkey> 69 70this option will generate a DSA either using the specified or generated 71parameters. 72 73=item B<-rand file(s)> 74 75a file or files containing random data used to seed the random number 76generator, or an EGD socket (see L<RAND_egd(3)|RAND_egd(3)>). 77Multiple files can be specified separated by a OS-dependent character. 78The separator is B<;> for MS-Windows, B<,> for OpenVMS, and B<:> for 79all others. 80 81=item B<numbits> 82 83this option specifies that a parameter set should be generated of size 84B<numbits>. It must be the last option. If this option is included then 85the input file (if any) is ignored. 86 87=item B<-engine id> 88 89specifying an engine (by its unique B<id> string) will cause B<dsaparam> 90to attempt to obtain a functional reference to the specified engine, 91thus initialising it if needed. The engine will then be set as the default 92for all available algorithms. 93 94=back 95 96=head1 NOTES 97 98PEM format DSA parameters use the header and footer lines: 99 100 -----BEGIN DSA PARAMETERS----- 101 -----END DSA PARAMETERS----- 102 103DSA parameter generation is a slow process and as a result the same set of 104DSA parameters is often used to generate several distinct keys. 105 106=head1 SEE ALSO 107 108L<gendsa(1)|gendsa(1)>, L<dsa(1)|dsa(1)>, L<genrsa(1)|genrsa(1)>, 109L<rsa(1)|rsa(1)> 110 111=cut 112