{"uid":"cap_Srw-yMNf8xLRrG_jrJ9XV","slug":"halowerk-sicherwerk-openssl-dh-group-check-ec29fca7","name":"HALOWERK sicherwerk OpenSSL DH Group Check","description":"Runs the pinned OpenSSL build's parameter checks over a supplied finite-field Diffie-Hellman group and reports whether it passes, along with the detail output that says why. The point is to catch parameters that are syntactically fine but cryptographically unsafe before they reach a handshake: a non-prime modulus, a generator of small order, a group below the build's security level.","url":"https://sicher.halowerk.com/v1/oss-openssl-dh-group-check?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"parameters_pem":{"type":"string","maxLength":262144,"minLength":1}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_8ljLcZaQlIG-IIWue2_96","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Validates a finite-field Diffie-Hellman group in PEM format using a pinned OpenSSL build, reporting whether the parameters are cryptographically safe (prime modulus, generator order, security level).","exampleAgentPrompt":"Can you check whether these Diffie-Hellman parameters are cryptographically safe? Here's the PEM: -----BEGIN DH PARAMETERS-----...-----END DH PARAMETERS----- — I want to know if the modulus is prime, the generator is sound, and it passes OpenSSL's security level before I use it in a handshake.","exampleUseCases":[{"title":"Pre-deployment TLS DH parameter audit","prompt":"Before I deploy this server config, can you validate these DH parameters PEM to make sure the group is cryptographically safe and passes OpenSSL's checks? Here it is: -----BEGIN DH PARAMETERS-----MIIBCAKCAQEAy...-----END DH PARAMETERS-----"},{"title":"Detecting a weak legacy DH group","prompt":"I found this old DH parameters file in our codebase — can you run it through OpenSSL's parameter checks and tell me if the modulus is actually prime and the generator is safe, or if it's cryptographically broken?"},{"title":"CI pipeline cryptographic parameter gate","prompt":"As part of our automated security pipeline, check this DH parameters PEM and confirm it passes OpenSSL's finite-field DH group validation before we allow it to be merged: -----BEGIN DH PARAMETERS-----MIIB...-----END DH PARAMETERS-----"}],"resultDescription":"A pass/fail verdict on the supplied DH group along with the full OpenSSL diagnostic output explaining why — identifying issues such as a non-prime modulus, a generator of small order, or a group that falls below the build's configured security level.","failureModes":["Invalid or malformed PEM input returns an error without a cryptographic result","Parameters that are syntactically unparseable by OpenSSL yield a parsing error","Oversized PEM exceeding 262144 bytes is rejected","Network or payment failure (x402) returns a 402 Payment Required response","OpenSSL internal error on edge-case parameter shapes may return an opaque failure message"],"whenToPreferThis":"Use this endpoint when you need a deterministic, reproducible cryptographic verdict on finite-field DH group parameters using a pinned OpenSSL version — especially when you want the exact OpenSSL diagnostic text rather than a reimplemented check. Ideal for CI/CD pipelines, pre-deployment audits, or compliance workflows where provenance of the validation tool matters. Prefer over generic crypto libraries when you need OpenSSL-specific security level enforcement and authoritative diagnostic output.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-29T00:33:14.739Z","isFirstParty":false,"canonicalSlug":"halowerk-sicherwerk-openssl-dh-group-check-ec29fca7"}