<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
On 09/21/2017 03:30 AM, Le Van Gong, Hubert wrote:<br>
<blockquote type="cite"
cite="mid:1802ef53-4984-ed88-48c2-f1d20c58cf96@levangong.org">Hi
there,
<br>
<br>
I'm trying to run opensslin server modeand leverage non-default DH
params with the following command:
<br>
sudo openssl s_server -cert server_cert.pem -dhparam dhparam_2.pem
-tls1_3 -accept 443
<br>
<br>
Where the dhparam_2.pem file contains the 2 DH params I want to
use.
<br>
However, I keep getting the following error message: Error with
command: "-dhparam dhparam_2.pem"
<br>
<br>
I'm using OpenSSL 1.1.1-dev and see the same behaviour on macOS or
linux.
<br>
<br>
Any idea as to what it is I am missing?
<br>
</blockquote>
<br>
It seems that what is missing is actual support in the code,<br>
<br>
diff --git a/apps/s_server.c b/apps/s_server.c<br>
index c45256a..d54909a 100644<br>
--- a/apps/s_server.c<br>
+++ b/apps/s_server.c<br>
@@ -795,6 +795,7 @@ const OPTIONS s_server_options[] = {<br>
{"pass", OPT_PASS, 's', "Private key file pass phrase source"},<br>
{"dcert", OPT_DCERT, '<',<br>
"Second certificate file to use (usually for DSA)"},<br>
+ {"dhparam", OPT_DHPARAM, '<', "DH parameters file to use"},<br>
{"dcertform", OPT_DCERTFORM, 'F',<br>
"Second certificate format (PEM or DER) PEM default"},<br>
{"dkey", OPT_DKEY, '<',<br>
<br>
<br>
-Ben<br>
</body>
</html>