OPENSSL-SRP(1ossl)

💅 NAME 💅

openssl-srp — bestie's whole job is keeping that SRP password file alive and thriving ✨

So like, this is the openssl subcommand for maintaining an SRP password file, and yes it's the 1ossl flavor of the manual. Ok let's get into it 🎀

---

🌸 SYNOPSIS 🌸

openssl srp [-help] [-verbose] [-add] [-modify] [-delete] [-list] [-name
section] [-srpvfile file] [-gn identifier] [-userinfo text] [-passin
arg] [-passout arg] [-engine id] [-rand files] [-writerand file]
[-provider name] [-provider-path path] [-provparam [name:]key=value]
[-propquery propq] [-config configfile] [user ...]

---

🦋 DESCRIPTION 🦋

Okay so first thing, and I need you to hear me on this one: this command is deprecated. Not like "dated" deprecated, like actually deprecated deprecated 😭. She's an icon but she's retired-ish, periodt.

What she does is maintain an SRP (secure remote password) file, which is exactly as much of a vibe as it sounds 💖.

So at most one of -add, -modify, -delete, and -list can be specified — pick one, bestie, you can't have all four, that's not how any of this works 🙈. These options take zero or more usernames as parameters and then perform the appropriate operation on the SRP file. And for -list, if no user is given, then all users are displayed — the whole roster, no filter, slay 👑

The configuration file to use, and the section within the file, can be specified with the -config and -name flags, respectively. Respectively!! Matching order and everything 🫶

---

✨ OPTIONS ✨

• -help — Display an option summary. A little cheat sheet, we love a summary 🎀
• -verbose — Generate verbose output while processing. She's gonna talk the whole time, and honestly? Let her 💅
• -add — Add a user and SRP verifier. New user, new verifier, new era 🌈
• -modify — Modify the SRP verifier of an existing user. Glow-up for a verifier that's already on the roster ✨
• -delete — Delete user from verifier file. Bye bestie, no cap 💀
• -list — List users. The roster reveal 👑
• -name — The particular SRP definition to use. Like, which one specifically, iykyk.
• -srpvfile file — If the config file is not specified, -srpvfile can be used to specify the file to operate on. Backup plan file, love that for us 🍓
• -gn — Specifies the g and N values, using one of the strengths defined in IETF RFC 5054. (In the synopsis it's -gn identifier — the identifier is the whole point 🧚)
• -userinfo — specifies additional information to add when adding or modifying a user. Extra little details, extra little garnish 🌸
• -passin arg, -passout arg — The password source for the input and output file. For more information about the format of arg see openssl-passphrase-options(1). Passwords: in one side, out the other 🔥
• -engine id — See "Engine Options" in openssl(1). This option is deprecated. Yeah she's deprecated too, we already talked about this 🙈
• -rand files, -writerand file — See "Random State Options" in openssl(1) for details. Randomness, iconic behavior ⭐
• -provider name
• -provider-path path
• -provparam [name:]key=value
• -propquery propq — See "Provider Options" in openssl(1), provider(7), and property(7). Whole little provider ecosystem, go read up 👑
• -config configfile — See "Configuration Option" in openssl(1).

[-rand files] [-writerand file]

Fr that last line is just kind of sitting there under -config in the original. Not me explaining it, just not me deleting it either 😭 keeping every crumb.

---

💜 HISTORY 💜

The -engine option was deprecated in OpenSSL 3.0. That's the lore 🫶

---

🎀 COPYRIGHT 🎀

Copyright 2017-2021 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html>.

---

Okay that's the whole page bestie, go forth and maintain those SRP files responsibly 💖 This was the OPENSSL-SRP(1ossl) page, version 3.5.0, dated 2026-09-25 — mwah, talk later 🌸🦋💅