1=pod
2{- OpenSSL::safe::output_do_not_edit_headers(); -}
3
4=head1 NAME
5
6openssl-dsaparam - DSA parameter manipulation and generation
7
8=head1 SYNOPSIS
9
10B<openssl dsaparam>
11[B<-help>]
12[B<-inform> B<DER>|B<PEM>]
13[B<-outform> B<DER>|B<PEM>]
14[B<-in> I<filename>]
15[B<-out> I<filename>]
16[B<-noout>]
17[B<-text>]
18[B<-genkey>]
19[B<-verbose>]
20{- $OpenSSL::safe::opt_r_synopsis -}
21{- $OpenSSL::safe::opt_engine_synopsis -}{- $OpenSSL::safe::opt_provider_synopsis -}
22[I<numbits>]
23
24=head1 DESCRIPTION
25
26This command is used to manipulate or generate DSA parameter files.
27
28DSA parameter generation can be a slow process and as a result the same set of
29DSA parameters is often used to generate several distinct keys.
30
31=head1 OPTIONS
32
33=over 4
34
35=item B<-help>
36
37Print out a usage message.
38
39=item B<-inform> B<DER>|B<PEM>
40
41The DSA parameters input format; unspecified by default.
42See L<openssl-format-options(1)> for details.
43
44=item B<-outform> B<DER>|B<PEM>
45
46The DSA parameters output format; the default is B<PEM>.
47See L<openssl-format-options(1)> for details.
48
49Parameters are a sequence of B<ASN.1 INTEGER>s: B<p>, B<q>, and B<g>.
50This is compatible with RFC 2459 B<DSS-Parms> structure.
51
52=item B<-in> I<filename>
53
54This specifies the input filename to read parameters from or standard input if
55this option is not specified. If the I<numbits> parameter is included then
56this option will be ignored.
57
58=item B<-out> I<filename>
59
60This specifies the output filename parameters to. Standard output is used
61if this option is not present. The output filename should B<not> be the same
62as the input filename.
63
64=item B<-noout>
65
66This option inhibits the output of the encoded version of the parameters.
67
68=item B<-text>
69
70This option prints out the DSA parameters in human readable form.
71
72=item B<-genkey>
73
74This option will generate a DSA either using the specified or generated
75parameters.
76
77
78=item B<-verbose>
79
80Print extra details about the operations being performed.
81
82{- $OpenSSL::safe::opt_r_item -}
83
84{- $OpenSSL::safe::opt_engine_item -}
85
86=item I<numbits>
87
88This option specifies that a parameter set should be generated of size
89I<numbits>. It must be the last option. If this option is included then
90the input file (if any) is ignored.
91
92{- $OpenSSL::safe::opt_provider_item -}
93
94=back
95
96=head1 SEE ALSO
97
98L<openssl(1)>,
99L<openssl-pkeyparam(1)>,
100L<openssl-gendsa(1)>,
101L<openssl-dsa(1)>,
102L<openssl-genrsa(1)>,
103L<openssl-rsa(1)>
104
105=head1 HISTORY
106
107The B<-engine> option was deprecated in OpenSSL 3.0.
108
109The B<-C> option was removed in OpenSSL 3.0.
110
111=head1 COPYRIGHT
112
113Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.
114
115Licensed under the Apache License 2.0 (the "License").  You may not use
116this file except in compliance with the License.  You can obtain a copy
117in the file LICENSE in the source distribution or at
118L<https://www.openssl.org/source/license.html>.
119
120=cut
121