OPENSSL-SRP(1ossl)

📦
version 15.1 · 2 versions
, in freebsd 15.1

💅 OPENSSL-SRP(1ossl) ✨

okay so bestie, welcome to the openssl-srp page — it lives in the OpenSSL manual, and it's all about keeping an SRP password file in check. let's get into it 🎀

✨ SYNOPSIS ✨

openssl srp [-help] [-verbose] [-add] [-modify] [-delete] [-list] [-name
section] [-srpvfile file] [-gn identifier] [-userinfo text] [-passin
arg] [-passout arg] [-engine id] [-rand files] [-writerand file]
[-provider name] [-provider-path path] [-provparam [name:]key=value]
[-propquery propq] [-config configfile] [user ...]

like, that's the whole shape of it 🦋

🌸 DESCRIPTION 🌸

okay so first thing's first, and i need you to hear me: this command is deprecated. like, it's still here, but it's giving "still in the group chat but never reads messages" 💀. it's used to maintain an SRP (secure remote password) file.

you can pick at most one of -add, -modify, -delete, and -list — no doubling up, bestie, the vibes do not allow it. these options take zero or more usernames as parameters and then do the appropriate operation on the SRP file. and for -list: if no user is given, then all users get displayed. icon behavior honestly 👑

the configuration file to use, and the section within the file, can be specified with the -config and -name flags, respectively. slay.

🎀 OPTIONS 🎀

  • -help — shows you an option summary. the little recap before the exam, y'know?
  • -verbose — generate verbose output while processing. she's chatty, she's thorough 💖
  • -add — add a user and SRP verifier.
  • -modify — modify the SRP verifier of an existing user.
  • -delete — delete user from verifier file.
  • -list — list users.
  • -name — the particular SRP definition to use.
  • -srpvfile file — if the config file is not specified, -srpvfile can be used to specify the file to operate on.
  • -gn — specifies the g and N values, using one of the strengths defined in IETF RFC 5054. lowkey the main character of the math here 🧚
  • -userinfo — specifies additional information to add when adding or modifying a user.
  • -passin arg, -passout arg — the password source for the input and output file. for more info about the format of arg, see openssl-passphrase-options(1).
  • -engine id — see "Engine Options" in openssl(1). heads up though: this option is deprecated.
  • -rand files, -writerand file — see "Random State Options" in openssl(1) for details.
  • -provider name
  • -provider-path path
  • -provparam [name:]key=value
  • -propquery propq — see "Provider Options" in openssl(1), provider(7), and property(7).
  • -config configfile — see "Configuration Option" in openssl(1).

and then, just kinda sitting there at the end of the -config description, the original literally has this hanging out:

[-rand files] [-writerand file]

no cap, it's just there. we keep it. periodt 💅

🦋 HISTORY 🦋

the -engine option was deprecated in OpenSSL 3.0. she's retired, but we still respect her 💜

Copyright 2017-2021 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html>.

ngl, if you got this far you're literally the bestie of all time. this one's from OpenSSL 3.5.6, dated 2026-04-07 — mwah, catch you in the next manpage 🫶🌸💖
📦 where this page comes from