[openssl-users] What is the format for a parameter file (-paramfile option)?

Dr. Stephen Henson steve at openssl.org
Tue Mar 17 14:29:31 UTC 2015

On Tue, Mar 17, 2015, Michael Stickles wrote:

> I am attempting to generate keys using genpkey, with the RSA options 
> specified in a parameter file:
> openssl genpkey -paramfile keygen.params -out ftest.key -outform PEM
> However, I'm constantly getting the following error:
> Error reading parameter file keygen.params
> I can't find any documentation or examples on what format the parameter 
> file should be in. Can someone either provide an example of what the 
> parameter file should look like, or point to me to one online? I'm not 
> having any trouble getting it to work with the parameters specified on the 
> command line, but for various reasons would like to have them in a file.

The parameter file is a set of parameters associated with the algorithm and is
typically generated using the -genparam command line option.

For RSA there is no associated parameter file which is why you get errors.

Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org

More information about the openssl-users mailing list