How to generate a new DSA parameter file using OpenSSL "dsaparam" command?

If you need a new DSA paramter file in order to create new DSA keys, you can use the OpenSSL "dsaparam" command as shown below:

C:\Users\fyicenter>\local\openssl\openssl.exe

OpenSSL> dsaparam -out my_dsa_2048.prm 2048
Generating DSA parameters, 2048 bit long prime
This could take some time
.+....+....................+............+...............+.+..............+......
.+.+.............+++++++++++++++++++++++++++++++++++++++++++++++++++*
...+...+.......+..+..+.....+........+..+......+....+.................+......+...
.+..............+.+..............+............+..............+...........+......
....+.+...+.........+...+..+.......+..........+..................+....+...+.+...
+...+.........+..........+.........+....+..........+..+...........+...+.....+...
.....+.+...+...+........+....+..................+...+.................+.........
+..+.............+..............................+.........+..+...........+++++++
++++++++++++++++++++++++++++++++++++++++++++*
OpenSSL> exit

C:\Users\fyicenter>type my_dsa_2048.prm
-----BEGIN DSA PARAMETERS-----
MIICLAKCAQEA09NkEULPGkTsLxKZPNzZfbTUSOiADv6L/552mIjnK+EaDpxmzUuG
0Bscbya3e0AcfvfzkrW6oksTbS9RR/DXICoWel6ZnM/hSVjDKDUtbGljcXz7h51f
f6zfQAUsMvXCMxT/Ma7r9KtCxlHg/RDMUbp5c89X8hfKLulml6OWj2FT/9/BUOOd
ScojFPFevqs5HbQCB4SlWfLxumBp2qMQbQ56u+Xwwrg3ECiziswIi/g/oukoGTlO
nY0c4pU8KbbXobmMPxhIf+nVc8ENF6CXOPoDbHr1wm9GYmmDtdv239FswPxE9k8A
3KzLa8UbYmMfrXn0a/9hn/zyLkHbD4XM4QIhAM1zlYDIDBYRPH9sc4kNwlDKQbkk
0j8LYjTcHuyTseIhAoIBAFn61R63xnxGdoGHC2FwiZ4U0WsTHFx6RUQSLgqX9N4j
9t4IXBHQ8uYtr2XL8M463LnCCmLpC3YJVoELsYUAkpoJ5hfwjKLc4L61jd7LfT/k
o96RhHQNLcB/MOb1XKmQUDq4GSatHCDhvmV9s3NOxCSlJae1xni0/6xkoqx2lbk1
K6vFolWY/GkpGWddDYOJgL6l9QljByd8hXYYndGhdbl8Cpm746BxD6I3AYOzuC7P
4tAhzpLbaGBYh3BBaxjHvnqY2XwQdg3LLGQI57WVe3TyvT7qUZzZshgiFhKexv2K
STYkMQyPjYsA0eSSIolTFGQLUQIZycYpX4TzieJISyA=
-----END DSA PARAMETERS-----

Options used in this command are:

• "-out my_dsa_2048.prm" - Save output (the new DSA key generation parameters) in a file.
• "2048" - The DSA key size in bits.

⇒OpenSSL "gendsa" and "dsa" Commands

⇒⇒OpenSSL Tutorials