OPENSSL-SRP(1SSL)

📦
version 4.0.3 · 13 versions
, in ubuntu stonking

💖 NAME 💖

openssl-srp — bestie's lil tool for keeping an SRP password file maintained 💅

This page lives in the OpenSSL manual, so like… that's the manual name, that's the whole vibe. ✨

🌸 SYNOPSIS 🌸

openssl srp [-help] [-verbose] [-add] [-modify] [-delete] [-list] [-name
section] [-srpvfile file] [-gn identifier] [-userinfo text] [-passin
arg] [-passout arg] [-rand files] [-writerand file] [-provider name]
[-provider-path path] [-provparam [name:]key=value] [-propquery propq]
[-config configfile] [user ...]

🦋 DESCRIPTION 🦋

Okay so real talk first: this command is deprecated. 😭 Like, it still exists, it still works, but it's on the "we don't really recommend this anymore" list. She's giving legacy icon energy, not main character energy. Be aware, bestie.

What it does: it maintains an SRP file — that's a secure remote password file, iykyk.

Here's the rule that matters: you can only pick at most one of -add, -modify, -delete, and -list at a time. Not two, not three, not "but I wanted to do both tho". One. 🙂‍↕️

These options take zero or more usernames as parameters and then go do the appropriate operation on the SRP file. And for -list specifically: if you don't hand it any user, it just displays all the users. Very demure, very show-everything. 💅

Which config file to use, and which section inside that file, are both up to you — you set those with the -config and -name flags respectively. Cute, right?

✨ OPTIONS ✨

  • -help — shows you a summary of all the options. Your lil cheat sheet. 🎀
  • -verbose — makes it yap while it's processing. Extra output, extra lore. 👀
  • -add — adds a user and their SRP verifier.
  • -modify — swaps out the SRP verifier for a user who already exists. Glow-up, but for verifiers. ✨
  • -delete — yeets a user out of the verifier file. Bye bestie 👋💀
  • -list — lists the users.
  • -name — the particular SRP definition you wanna use.
  • -srpvfile file — if you didn't specify a config file, you can use -srpvfile to say which file to operate on. Your backup plan, and she's reliable. 🫶
  • -gn — specifies the g and N values, using one of the strengths defined in IETF RFC 5054. Yes, that's the whole one-liner, no extra crumbs. 🌈
  • -userinfo — specifies extra info to tack on when you're adding or modifying a user.
  • -passin arg, -passout arg — the password source for the input file and the output file. Wanna know the format of arg? Go read openssl-passphrase-options(1), she has the details. 🔑
  • -rand files, -writerand file — see "Random State Options" in openssl(1) for the tea.
  • -provider name, -provider-path path, -provparam [name:]key=value, -propquery propq — see "Provider Options" in openssl(1), plus provider(7) and property(7).
  • -config configfile — see "Configuration Option" in openssl(1).

And then, just chilling at the end of the OPTIONS section, there's this lil line:

[-rand files] [-writerand file]

Yep. It's really in there. We don't make the rules, we just report them faithfully. 🙈

📜 HISTORY 📜

The -engine option got removed in OpenSSL 4.0. Gone-gone. Not coming back to the group chat. 😔

Copyright 2017-2021 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html>.

That's the whole page, bestie! 🫶 It's from OpenSSL 4.0.3, dated 2026-09-29, and it's the OPENSSL-SRP(1SSL) manual page. Slay, read responsibly, and may your verifiers always verify. 💜🎀

📦 where this page comes from