openssl-srp(1ssl)

openssl-srp1ssl

Maintain srp password file

Usage

openssl srp [-help] [-verbose] [-add] [-modify] [-delete] [-list] [-name section] [-srpvfile file] [-gn identifier] [-userinfo text] [-passin arg] [-passout arg] [-engine id] [-rand files] [-writerand file] [-provider name] [-provider-path path] [-provparam [name:] key=value] [-propquery propq] [-config configfile] [user ...]

Overview

This command is deprecated. It is used to maintain an SRP (secure remote password) file. At most one of the -add, -modify, -delete, and -list options can be specified. These options take zero or more usernames as parameters and perform the appropriate operation on the SRP file. For -list, if no user is given then all users are displayed.

The configuration file to use, and the section within the file, can be specified with the -config and -name flags, respectively.

Options

-help

Display an option summary.

-verbose

Generate verbose output while processing.

-add

Add a user and SRP verifier.

-modify

Modify the SRP verifier of an existing user.

-delete

Delete user from verifier file.

-list

List users.

-name

The particular SRP definition to use.

-srpvfile file

If the config file is not specified, -srpvfile can be used to specify the file to operate on.

-gn

Specifies the g and N values, using one of the strengths defined in IETF RFC 5054.

-userinfo

specifies additional information to add when adding or modifying a user.

-passin arg, -passout arg

The password source for the input and output file. For more information about the format of arg see openssl-passphrase-options(1).

-engine id

See "Engine Options" in openssl(1). This option is deprecated.

-rand files, -writerand file

See "Random State Options" in openssl(1) for details.

-provider name
-provider-path path
-provparam [name:]key=value
-propquery propq

See "Provider Options" in openssl(1), provider(7), and property(7).

-config configfile

See "Configuration Option" in openssl(1).

[-rand files] [-writerand file]

Releases

5 releases since Debian 10 (Buster); the text changed 4 times.

  1. 10
  2. 11
  3. 12
  4. 13
  5. Arch

-add since Debian 12 (Bookworm); -config since Debian 12 (Bookworm); -delete since Debian 12 (Bookworm); -engine since Debian 12 (Bookworm); -gn since Debian 12 (Bookworm); -help since Debian 12 (Bookworm); -list since Debian 12 (Bookworm); -modify since Debian 12 (Bookworm); -name since Debian 12 (Bookworm); -passin since Debian 12 (Bookworm); -passout since Debian 12 (Bookworm); -propquery since Debian 12 (Bookworm); -provider since Debian 12 (Bookworm); -provider-path since Debian 12 (Bookworm); -provparam since Debian 13 (Trixie); -rand since Debian 12 (Bookworm); -srpvfile since Debian 12 (Bookworm); -userinfo since Debian 12 (Bookworm); -verbose since Debian 12 (Bookworm); -writerand since Debian 12 (Bookworm).

History

The -engine option was deprecated in OpenSSL 3.0.

From openssl 3.6.5-1 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.