openssl-pkeyparam.1ossl - Man Page

public key algorithm parameter processing command

Synopsis

openssl pkeyparam [-help] [-in filename] [-out filename] [-text] [-noout] [-check] [-engine id] [-provider name] [-provider-path path] [-provparam [name:]key=value] [-propquery propq]

Description

This command processes public key algorithm parameters. They can be checked for correctness and their components printed out.

Options

-help

Print out a usage message.

-in filename

This specifies the input file to read parameters from or standard input if this option is not specified.

-out filename

This specifies the output filename to write parameters to or standard output if this option is not specified. The output filename can be the same as the input filename, which leads to replacing the file contents. Note that file I/O is not atomic. The output file is truncated and then written.

-text

Prints out the parameters in plain text in addition to the encoded version.

-noout

Do not output the encoded version of the parameters.

-check

This option checks the correctness of parameters.

-engine id

See "Engine Options" in openssl(1). This option is deprecated.

-provider name
-provider-path path
-provparam [name:]key=value
-propquery propq

See "Provider Options" in openssl(1), provider(7), and property(7).

Examples

Print out text version of parameters:

 openssl pkeyparam -in param.pem -text

Notes

There are no -inform or -outform options for this command because only PEM format is supported because the key type is determined by the PEM headers.

See Also

openssl(1), openssl-genpkey(1), openssl-rsa(1), openssl-pkcs8(1), openssl-dsa(1), openssl-genrsa(1), openssl-gendsa(1)

History

The -engine option was deprecated in OpenSSL 3.0.

Referenced By

openssl.1ossl(1), openssl-cmds.1ossl(1), openssl-dhparam.1ossl(1), openssl-dsaparam.1ossl(1), openssl-ecparam.1ossl(1).

2025-04-15 3.5.0 OpenSSL