summaryrefslogtreecommitdiff
path: root/NEWS
diff options
context:
space:
mode:
authorPauli <paul.dale@oracle.com>2020-02-10 10:23:57 +1000
committerPauli <paul.dale@oracle.com>2020-02-12 08:52:42 +1000
commit663247bf1181043d168a542b0d0d56cc0318e2f7 (patch)
treec6f660dcadd485ab022373e98421fe41af0e0c44 /NEWS
parent1ddf2594e18137aeb7ce861e54f46824db76e36f (diff)
downloadopenssl-new-663247bf1181043d168a542b0d0d56cc0318e2f7.tar.gz
Add NEWS entry about deprecation of command line public tools
Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/10977)
Diffstat (limited to 'NEWS')
-rw-r--r--NEWS3
1 files changed, 3 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index 4d7f0d01c6..ac3372dca5 100644
--- a/NEWS
+++ b/NEWS
@@ -7,6 +7,9 @@
Major changes between OpenSSL 1.1.1 and OpenSSL 3.0.0 [under development]
+ o The algorithm specific public key command line applications have
+ been deprecated. These include dhparam, gendsa and others. The pkey
+ alternatives should be used intead: pkey, pkeyparam and genpkey.
o X509 certificates signed using SHA1 are no longer allowed at security
level 1 or higher. The default security level for TLS is 1, so
certificates signed using SHA1 are by default no longer trusted to