[openssl-users] What is the format for a parameter file (-paramfile option)?

[Dr. Stephen Henson]

On Tue, Mar 17, 2015, Michael Stickles wrote:

> I am attempting to generate keys using genpkey, with the RSA options 
> specified in a parameter file:
> 
> 
> openssl genpkey -paramfile keygen.params -out ftest.key -outform PEM
> 
> 
> However, I'm constantly getting the following error:
> 
> 
> Error reading parameter file keygen.params
> 
> 
> I can't find any documentation or examples on what format the parameter 
> file should be in. Can someone either provide an example of what the 
> parameter file should look like, or point to me to one online? I'm not 
> having any trouble getting it to work with the parameters specified on the 
> command line, but for various reasons would like to have them in a file.
> 

The parameter file is a set of parameters associated with the algorithm and is
typically generated using the -genparam command line option.

For RSA there is no associated parameter file which is why you get errors.

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org