Commit b32aa8e6 authored by Emilia Kasper's avatar Emilia Kasper
Browse files

dhparam: fix documentation 



The default bitlength is now 2048. Also clarify that either the number
of bits or the generator must be present:

$ openssl dhparam -2
and
$ openssl dhparam 2048
generate parameters but
$ openssl dhparam
does not.

Reviewed-by: default avatarMatt Caswell <matt@openssl.org>
parent 82697bc2

doc/apps/dhparam.pod

+8 −5
Original line number Original line Diff line number Diff line
@@ -71,8 +71,10 @@ check if the parameters are valid primes and generator. 




=item B<-2>, B<-5>

=item B<-2>, B<-5>





The generator to use, either 2 or 5. 2 is the default. If present then the

The generator to use, either 2 or 5. If present then the

input file is ignored and parameters are generated instead.

input file is ignored and parameters are generated instead. If not

present but B<numbits> is present, parameters are generated with the

default generator 2.





=item B<-rand> I<file(s)>

=item B<-rand> I<file(s)>
@@ -85,9 +87,10 @@ all others. 
=item I<numbits>

=item I<numbits>





this option specifies that a parameter set should be generated of size

this option specifies that a parameter set should be generated of size

I<numbits>. It must be the last option. If not present then a value of 512

I<numbits>. It must be the last option. If this option is present then

is used. If this option is present then the input file is ignored and 

the input file is ignored and parameters are generated instead. If

parameters are generated instead.

this option is not present but a generator (B<-2> or B<-5>) is

present, parameters are generated with a default length of 2048 bits.





=item B<-noout>

=item B<-noout>