doc: clarify -hex option behavior in openssl prime

The -hex option description was ambiguous about its exact behavior.
Clarify that:
- With -generate: outputs the prime in hex instead of decimal
- When checking: interprets input as hex instead of decimal
- Output when checking is always hex regardless of this option

Fixes #19208

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Eugene Syromiatnikov <esyr@openssl.org>
MergeDate: Wed Apr 15 12:33:18 2026
(Merged from https://github.com/openssl/openssl/pull/29913)

diff --git a/doc/man1/openssl-prime.pod.in b/doc/man1/openssl-prime.pod.in
index e128e4c0b0d2acb80aaedb14f5dea1cc18f31dd8..f5b65fd7b245d9f98e3084baaa581beec74d1ae8 100644 (file)
--- a/doc/man1/openssl-prime.pod.in
+++ b/doc/man1/openssl-prime.pod.in
@@ -36,7 +36,11 @@ Display an option summary.
 
 =item B<-hex>
 
-Enable hex format for output from prime generation or input to primality checking.
+When used with B<-generate>, output the generated prime in hexadecimal
+format instead of decimal. When checking primality, interpret the input
+numbers as hexadecimal instead of decimal. Note that the output in
+hexadecimal is always present when checking primality, regardless of
+this option.
 
 =item B<-in>