[openssl] OpenSSL_1_1_1-stable update
Matt Caswell
matt at openssl.org
Tue Mar 19 11:42:11 UTC 2019
The branch OpenSSL_1_1_1-stable has been updated
via 1913df42336ab90e2f6d6c21de186f64c409e8e5 (commit)
from a7e1cb8cbbefda0f31489566ad08055239ee216e (commit)
- Log -----------------------------------------------------------------
commit 1913df42336ab90e2f6d6c21de186f64c409e8e5
Author: Matt Caswell <matt at openssl.org>
Date: Thu Mar 7 14:02:56 2019 +0000
Update pkeyutl documentation about the digest option
DSA can accept other digests other than SHA1. EC ignores the digest option
altogether.
Fixes #8425
Reviewed-by: Richard Levitte <levitte at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/8432)
(cherry picked from commit 6a6d9ecd1dff669c162e8ab940dac5db2e82679d)
-----------------------------------------------------------------------
Summary of changes:
doc/man1/pkeyutl.pod | 11 +++++------
1 file changed, 5 insertions(+), 6 deletions(-)
diff --git a/doc/man1/pkeyutl.pod b/doc/man1/pkeyutl.pod
index 664dbef..64d7912 100644
--- a/doc/man1/pkeyutl.pod
+++ b/doc/man1/pkeyutl.pod
@@ -272,20 +272,19 @@ value less than the minimum restriction.
=head1 DSA ALGORITHM
The DSA algorithm supports signing and verification operations only. Currently
-there are no additional options other than B<digest>. Only the SHA1
-digest can be used and this digest is assumed by default.
+there are no additional B<-pkeyopt> options other than B<digest>. The SHA1
+digest is assumed by default.
=head1 DH ALGORITHM
The DH algorithm only supports the derivation operation and no additional
-options.
+B<-pkeyopt> options.
=head1 EC ALGORITHM
The EC algorithm supports sign, verify and derive operations. The sign and
-verify operations use ECDSA and derive uses ECDH. Currently there are no
-additional options other than B<digest>. Only the SHA1 digest can be used and
-this digest is assumed by default.
+verify operations use ECDSA and derive uses ECDH. SHA1 is assumed by default for
+the B<-pkeyopt> B<digest> option.
=head1 X25519 and X448 ALGORITHMS
More information about the openssl-commits
mailing list