openssl-list1ssl

Usage

Overview

This command is used to generate list of algorithms or disabled features.

Options

-help

Display a usage message.

-verbose

Displays extra information. The options below where verbosity applies say a bit more about what that means.

-select name

Only list algorithms that match this name.

-1

List the commands, digest-commands, or cipher-commands in a single column. If used, this option must be given first.

-all-algorithms

Display lists of all algorithms. These include:

Asymmetric ciphers

Decoders

Digests

Encoders

Key derivation algorithms (KDF)

Key encapsulation methods (KEM)

Key exchange algorithms (KEX)

Key managers

Symmetric key managers

Message authentication code algorithms (MAC)

Random number generators (RNG, DRBG)

Signature algorithms

Store loaders

Symmetric ciphers

-commands

Display a list of standard commands.

-standard-commands

List of standard commands.

-digest-commands

This option is deprecated. Use digest-algorithms instead.

Display a list of message digest commands, which are typically used as input to the openssl-dgst(1) or openssl-speed(1) commands.

-cipher-commands

This option is deprecated. Use cipher-algorithms instead.

Display a list of cipher commands, which are typically used as input to the openssl-enc(1) or openssl-speed(1) commands.

-cipher-algorithms, -digest-algorithms, -kdf-algorithms, -mac-algorithms,

Display a list of symmetric cipher, digest, kdf and mac algorithms. See "Display of algorithm names" for a description of how names are displayed.

In verbose mode, the algorithms provided by a provider will get additional information on what parameters each implementation supports.

-random-instances

List the primary, public and private random number generator details.

-random-generators

Display a list of random number generators. See "Display of algorithm names" for a description of how names are displayed.

-encoders

Display a list of encoders. See "Display of algorithm names" for a description of how names are displayed.

In verbose mode, the algorithms provided by a provider will get additional information on what parameters each implementation supports.

-decoders

Display a list of decoders. See "Display of algorithm names" for a description of how names are displayed.

In verbose mode, the algorithms provided by a provider will get additional information on what parameters each implementation supports.

-public-key-algorithms

Display a list of public key algorithms, with each algorithm as a block of multiple lines, all but the first are indented. The options key-exchange-algorithms, kem-algorithms, signature-algorithms, and asymcipher-algorithms will display similar info.

-public-key-methods

Display a list of public key methods.

-key-managers

Display a list of key managers.

-skey-managers

Display a list of symmetric key managers.

-key-exchange-algorithms

Display a list of key exchange algorithms.

-kem-algorithms

Display a list of key encapsulation algorithms.

-tls-groups

Display a list of the IANA names of all available (implemented) TLS groups. By default the listed groups are those compatible with TLS 1.3.

-all-tls-groups

Display a list of the names of all available (implemented) TLS groups, including any aliases. Some groups are known under multiple names, for example, secp256r1 is also known as P-256. By default the listed groups are those compatible with TLS 1.3.

-tls1_2

When listing TLS groups, list those compatible with TLS 1.2

-tls1_3

When listing TLS groups, output those compatible with TLS 1.3. TLS 1.3 is the current default protocol version, but the default version is subject to change, so best to specify the version explicitly.

-signature-algorithms

Display a list of signature algorithms.

-tls-signature-algorithms

Display the list of signature algorithms available for TLS handshakes made available by all currently active providers. The output format is colon delimited in a form directly usable in SSL_CONF_cmd(3) specifying SignatureAlgorithms.

-asymcipher-algorithms

Display a list of asymmetric cipher algorithms.

-store-loaders

Display a list of store loaders.

-providers

Display a list of all loaded providers with their names, version and status.

In verbose mode, the full version and all provider parameters will additionally be displayed.

-engines

This option is deprecated.

Display a list of loaded engines.

-disabled

Display a list of disabled features, those that were compiled out of the installation.

-objects

Display a list of built in objects, i.e. OIDs with names. They're listed in the format described in "ASN1 Object Configuration Module" in config(5).

-options command

Output a two-column list of the options accepted by the specified command. The first is the option name, and the second is a one-character indication of what type of parameter it takes, if any. This is an internal option, used for checking that the documentation is complete.

-provider name

-provider-path path

-provparam [name:]key=value

-propquery propq

See "Provider Options" in openssl(1), provider(7), and property(7).