Chan Shih-Ping wrote:
>
> Why is gendsa not linked by default into ssleay and
>
> why no gendsa binary?
>
The older gendsa source didn't work. This is fixed in OpenSSL 0.9.2 and
there is now a gendsa utility.
In older versions of SSLeay there is an undocumented -genkey flag to
dsaparam which will generate a DSA private key:
dsaparam -in param1024.pem -out key.pem -genkey
You can also include the -noout argument if you just want the private
key to be output and not the parameters as well. The private key will
not be encrypted so you should use the 'dsa' utility to encrypt it.
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]