Am Montag, 3. November 2008 08:12:26 schrieb shivakumar Balur:
> HI All,
>
>     when i tried to generate DH parameters using : openssl genpkey
> -genparam -algorithm DH -out dhp.pem -pkeyopt dh_paramgen_prime_len:1024
>
> ERROR:
> error: openssl:Error: 'genpkey' is an invalid command.
>
> Can any one help me in this or any other commands to generate DH parameter
> n DH Key.

Hi,

you can generate the DH prime with the command:
openssl dhparam -out  <filename> -outform <DER|PEM> -rand 
<randomnumberseedfile> (-2 | -5) -text -c <dhlength in bits>

<randomnumberseed file>: a file to seed openssl's PRNG 
(-2|-5)                                          : the dh generator (see DH 
algorithem). 2 is default.
-text                                    : extra text output on stdout
-c                                               : extra c-variable output on 
stdout.

For example: 
openssl dhparam -out dh1024.pem 1024
This will generate a dh prime with generator 2 and a length of 1024 bit in  
dh1024.pem .

Greetings,
Lars


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to