On Tue, Sep 03, 2013, Viktor Dukhovni wrote: > > To the specific point in your reply, does OpenSSL actually support > DSA-style groups (with p, g and q) where DH groups are expected? > For example can such groups be returned from the temp DH callback? > Certainly the dhparam(1) command does not seem to support groups > with "q" values. >
Support in OpenSSL 1.0.2 and later for X9.42 DH parameters (which include q) will be more complete. For previous versions the length parameter in the PKCS#3 DH parameter structure can be set by converting DSA parameters to DH using (for example) the -dsaparam option to the dhparam utility. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [email protected]
