OPENSSL-SRP(1ossl)

🌸 OPENSSL-SRP — it's giving "maintain your SRP password file" energy 💅

okay so bestie, this is the openssl-srp page from the OpenSSL manual collection (that's the 1ossl manual, section 1, OpenSSL fam 🔥). buckle up, because this one comes with a big warning — she's deprecated, and we're gonna talk about it.

---

✨ NAME ✨

openssl-srp — maintain SRP password file

---

🎀 SYNOPSIS 🎀

openssl srp [-help] [-verbose] [-add] [-modify] [-delete] [-list] [-name
section] [-srpvfile file] [-gn identifier] [-userinfo text] [-passin
arg] [-passout arg] [-engine id] [-rand files] [-writerand file]
[-provider name] [-provider-path path] [-provparam [name:]key=value]
[-propquery propq] [-config configfile] [user ...]

---

🦋 DESCRIPTION 🦋

⚠️ bestie. listen. This command is deprecated. like, deprecated deprecated. it's still here, but she's not the moment anymore. 💀

so what does she actually do? she's used to maintain an SRP (secure remote password) file. that's the vibe.

here's the rule: at most one of the -add, -modify, -delete, and -list options can be specified. pick one, girl, you can't have all four. ✋

these options take zero or more usernames as parameters (the trailing user ... guys up there in the synopsis) and then perform the appropriate operation on the SRP file. lowkey elegant ngl.

and for -list specifically — if no user is given, then all users are displayed. everyone shows up to the party. 🎉

the configuration file to use, and the section within that file, can be specified with the -config and -name flags, respectively. matching set, we love to see it. 🫶

---

💖 OPTIONS 💖

• -help — display an option summary. the "what are my choices" moment. ✨
• -verbose — generate verbose output while processing. she talks more. she tells you things. 🗣️
• -add — add a user and SRP verifier. new bestie incoming. 👑
• -modify — modify the SRP verifier of an existing user. glow-up, but for a verifier. 💅
• -delete — delete user from verifier file. bye bestie 😭 (no cap, they're gone)
• -list — list users. and remember: no user given = all users displayed. 🌈
• -name — the particular SRP definition to use. which one? that one. 🎯
• -srpvfile file — if the config file is not specified, -srpvfile can be used to specify the file to operate on. the backup plan that absolutely eats. 🔥
• -gn — specifies the g and N values, using one of the strengths defined in IETF RFC 5054. (yes, the values are literally called g and N, we don't make the rules) 🧚
• -userinfo — specifies additional information to add when adding or modifying a user. a little extra ✨spice✨ on the profile.
• -passin arg, -passout arg — the password source for the input and output file. for more information about the format of arg, see openssl-passphrase-options(1). 🔐
• -engine id — see "Engine Options" in openssl(1). > and heads up: this option is deprecated. she's retired, we still respect her 💀
• -rand files, -writerand file — see "Random State Options" in openssl(1) for details. 🎲
• -provider name
• -provider-path path
• -provparam [name:]key=value
• -propquery propq — see "Provider Options" in openssl(1), provider(7), and property(7). the whole provider friend group, all together 🫶
• -config configfile — see "Configuration Option" in openssl(1).

and then, just kind of vibing there underneath it in the original, there's this repeat of a couple synopsis bits:

[-rand files] [-writerand file]

yeah it's just chillin' there. leaving it exactly where we found it. 🙈

---

⭐ HISTORY ⭐

the -engine option was deprecated in OpenSSL 3.0. that's the lore. 📖

---

👑 COPYRIGHT 👑

copyright 2017-2021 The OpenSSL Project Authors. All Rights Reserved.

licensed under the Apache License 2.0 (the "License"). you may not use this file except in compliance with the License. you can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html>.

---

okay that's the whole page bestie, you ate that 🍓✨ — this one's from 3.5.9, dated 2026-09-29, and it's the OPENSSL-SRP(1ossl) page. mwah 💜🦋🎀