On Fri, Nov 08, 2013, Serhat Sevki Dincer wrote: > Hi, > On windows 7 with OpenSSL 1.0.1e, I get the following output: > > $ openssl.exe genpkey -out priv.pem -aes128 -algorithm EC -pkeyopt > ec_paramgen_curve:secp224r1 > > parameter setting error 3512:error:06089094:digital envelope > routines:EVP_PKEY_CTX_ctrl:invalid operation:.\crypto\evp\pmeth_lib.c:404 > > Is this a bug? what's the correct commandline? >
It's more a missing feature than a bug. For OpenSSL 1.0.1 and below you have to "generate" parameters for EC in the same way as DSA/DH. For exampple: openssl genpkey -genparam -algorithm EC -pkeyopt ec_paramgen_curve:secp224r1 -out ecp.pem openssl genpkey -paramfile ecp.pem Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
