dsaparam error OpenSSL 1.1.1d
openssl-users at dukhovni.org
Mon Nov 11 05:42:59 UTC 2019
On Mon, Nov 11, 2019 at 10:59:52AM +0530, shiva kumar wrote:
> *openssl dsaparam 128 -rand file *
> is taking long time processing the command and not producing any output.
It is waiting for *input* (to decode already generated parameters).
If you want to generate a key you need to provide the "-genkey"
option. And 128 bit primes are way too short for DSA. You should
generally use 2048 bits, and definitely avoid anything less than
1024 bits. The below example generates a 1280-bit key, which is
about as small as I'd be generally willing to go for short to
$ openssl dsaparam -genkey 1280
Generating DSA parameters, 1280 bit long prime
This could take some time
-----BEGIN DSA PARAMETERS-----
-----END DSA PARAMETERS-----
-----BEGIN DSA PRIVATE KEY-----
-----END DSA PRIVATE KEY-----
More information about the openssl-users