DH_NEW_BY_NID(3ossl)
π DH_NEW_BY_NID π
okay bestie, we're doing a whole page from the OpenSSL manual set β this one is DH_new_by_nid(3ossl), and it's about named DH parameters. yes, Diffie-Hellman, we love her, we respect her, and honestly? she's lowkey deprecated now. let's get into it π«Ά
β¨ NAME β¨
DH_new_by_nid, DH_get_nid β create or get DH named parameters πΈ
β¨ SYNOPSIS β¨
#include <openssl/dh.h>
okay so heads up: the following functions have been deprecated since OpenSSL 3.0, and you can hide them entirely by defining OPENSSL_API_COMPAT with a suitable version value β go peek at openssl_user_macros(7) for the deets π
DH *DH_new_by_nid(int nid);
int DH_get_nid(const DH *dh);
β¨ DESCRIPTION β¨
π¦ DH_new_by_nid()
she creates and returns a DH structure containing named parameters nid. that's it, that's the job π
currently nid must be one of these, no substitutions, no vibes-based guessing:
NID_ffdhe2048NID_ffdhe3072NID_ffdhe4096NID_ffdhe6144NID_ffdhe8192NID_modp_1536NID_modp_2048NID_modp_3072NID_modp_4096NID_modp_6144NID_modp_8192
like, that's the whole guest list, bestie π
π¦ DH_get_nid()
this one looks at the parameters sitting inside dh and is like "hmm, do I know you?" β she determines if they match any named safe prime group π
she returns the NID corresponding to the matching parameters, or NID_undef if there's no match. simple as that β¨
π¨ and yes, this function is deprecated. saying it again so it sticks π
β¨ RETURN VALUES β¨
DH_new_by_nid()returns a set of DH parameters, orNULLif an error occurred πDH_get_nid()returns theNIDof the matching set of parameters forpandgand optionallyq, otherwise it returnsNID_undefif there is no match π
β¨ HISTORY β¨
all of these functions were deprecated in OpenSSL 3.0. the way that the entire page is basically a farewell tour ππ
β¨ COPYRIGHT β¨
Copyright 2017-2020 The OpenSSL Project Authors. All Rights Reserved. π
Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html> π
and that's the whole page, bestie!! this was DH_NEW_BY_NID(3ossl) from the OpenSSL docs β version 3.5.9, dated 2026-09-29 β¨ go forth and use named parameters responsibly, ily, mwah π
ππ¦
π¦ where this page comes from
- fedora 43: openssl-devel 1:3.5.9-1.fc43 Β· Apache-2.0
- fedora 43: openssl-devel 1:3.5.9-1.fc43 Β· Apache-2.0
- fedora 44: openssl-devel 1:3.5.9-1.fc44 Β· Apache-2.0
- fedora 44: openssl-devel 1:3.5.9-1.fc44 Β· Apache-2.0
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms