openssl-pkeyparam(1ssl)

Usage

openssl pkeyparam [-help] [-in filename] [-out filename] [-text] [-noout] [-check] [-engine id] [-provider name] [-provider-path path] [-provparam [name:] key=value] [-propquery propq]

Overview

This command processes public key algorithm parameters. They can be checked for correctness and their components printed out.

Options

-help: Print out a usage message.

-in filename: This specifies the input file to read parameters from or standard input if this option is not specified.

-out filename: This specifies the output filename to write parameters to or standard output if this option is not specified. The output filename can be the same as the input filename, which leads to replacing the file contents. Note that file I/O is not atomic. The output file is truncated and then written.

-text: Prints out the parameters in plain text in addition to the encoded version.

-noout: Do not output the encoded version of the parameters.

-check: This option checks the correctness of parameters.

-engine id: See "Engine Options" in openssl(1). This option is deprecated.

-provider name

-provider-path path

-provparam [name:]key=value

-propquery propq: See "Provider Options" in openssl(1), provider(7), and property(7).

Examples

Print out text version of parameters:

 openssl pkeyparam -in param.pem -text

Notes

There are no -inform or -outform options for this command because only PEM format is supported because the key type is determined by the PEM headers.

Releases

6 releases since Debian 9 (Stretch); the text changed 5 times.

9
10
11
12
13
Arch

-check since Debian 10 (Buster); -propquery since Debian 12 (Bookworm); -provider since Debian 12 (Bookworm); -provider-path since Debian 12 (Bookworm); -provparam since Debian 13 (Trixie).