X-Git-Url: http://git.ipfire.org/?p=thirdparty%2Fopenssl.git;a=blobdiff_plain;f=doc%2Finternal%2Fman3%2Fevp_pkey_make_provided.pod;fp=doc%2Finternal%2Fman3%2Fevp_pkey_make_provided.pod;h=3eb17e707bc8cc5124a51ba68a0fcee8ac4aba09;hp=12cbe0c365b9fe281dfa63e996fa49b2e914919e;hb=3f7ce7f1029c01c2c4d00e14ffc9630d26f485a4;hpb=8e90e3d53665854d76d6d46491b38f0e2a802428

diff --git a/doc/internal/man3/evp_pkey_make_provided.pod b/doc/internal/man3/evp_pkey_make_provided.pod
index 12cbe0c365..3eb17e707b 100644
--- a/doc/internal/man3/evp_pkey_make_provided.pod
+++ b/doc/internal/man3/evp_pkey_make_provided.pod
@@ -24,6 +24,14 @@ fetch an B<EVP_KEYMGMT> implicitly, using I<propquery> as property query string.
 As output from this function, I<*keymgmt> will be assigned the B<EVP_KEYMGMT>
 that was used, if the export was successful, otherwise it will be assigned NULL.
 
+If I<pk> has an assigned legacy key, a check is done to see if any of
+its key material has changed since last export, by comparing the
+result of the legacy key's dirty_cnt() method with a copy of that
+result from last time evp_pkey_make_provided() was run with this
+B<EVP_PKEY>.
+If it has, the cache of already exported keys is cleared, and a new
+export is made with the new legacy key material.
+
 =head1 RETURN VALUES
 
 evp_pkey_make_provided() returns the provider key data that was exported if