[openssl] OpenSSL_1_1_1-stable update

Matt Caswell matt at openssl.org
Tue Mar 19 11:42:11 UTC 2019


The branch OpenSSL_1_1_1-stable has been updated
       via  1913df42336ab90e2f6d6c21de186f64c409e8e5 (commit)
      from  a7e1cb8cbbefda0f31489566ad08055239ee216e (commit)


- Log -----------------------------------------------------------------
commit 1913df42336ab90e2f6d6c21de186f64c409e8e5
Author: Matt Caswell <matt at openssl.org>
Date:   Thu Mar 7 14:02:56 2019 +0000

    Update pkeyutl documentation about the digest option
    
    DSA can accept other digests other than SHA1. EC ignores the digest option
    altogether.
    
    Fixes #8425
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/8432)
    
    (cherry picked from commit 6a6d9ecd1dff669c162e8ab940dac5db2e82679d)

-----------------------------------------------------------------------

Summary of changes:
 doc/man1/pkeyutl.pod | 11 +++++------
 1 file changed, 5 insertions(+), 6 deletions(-)

diff --git a/doc/man1/pkeyutl.pod b/doc/man1/pkeyutl.pod
index 664dbef..64d7912 100644
--- a/doc/man1/pkeyutl.pod
+++ b/doc/man1/pkeyutl.pod
@@ -272,20 +272,19 @@ value less than the minimum restriction.
 =head1 DSA ALGORITHM
 
 The DSA algorithm supports signing and verification operations only. Currently
-there are no additional options other than B<digest>. Only the SHA1
-digest can be used and this digest is assumed by default.
+there are no additional B<-pkeyopt> options other than B<digest>. The SHA1
+digest is assumed by default.
 
 =head1 DH ALGORITHM
 
 The DH algorithm only supports the derivation operation and no additional
-options.
+B<-pkeyopt> options.
 
 =head1 EC ALGORITHM
 
 The EC algorithm supports sign, verify and derive operations. The sign and
-verify operations use ECDSA and derive uses ECDH. Currently there are no
-additional options other than B<digest>. Only the SHA1 digest can be used and
-this digest is assumed by default.
+verify operations use ECDSA and derive uses ECDH. SHA1 is assumed by default for
+the B<-pkeyopt> B<digest> option.
 
 =head1 X25519 and X448 ALGORITHMS
 


More information about the openssl-commits mailing list