Greetings,
When using 'genpkey' command to generate DH keys, the 'recommended
private key size' is not honored when it is present in
the DH Parameters file. I found this problem in 1.0.1c.
Consider the attached parameter file, openssl_dh_params.pem
$ openssl dhparam -in openssl_dh_params.pem
To go along with the fix for #2957, please consider the following
enhancement.
It adds support for the option to genpkey:
-pkeyopt dh_paramgen_private_len:${S_BITS}
for DH Parameter generation. It also sets the size to 160 in the
absence of this parameter. The genpkey pod file is updated
