From: Norbert Pocs <norbertp@openssl.org>
Date: Thu, 22 May 2025 10:23:56 +0000 (+0200)
Subject: Update documentation on EVP_PKEY_ASN1_METHOD deprecation
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=23de79343f04eba2389b2c8ff7691dfa13e58627;p=thirdparty%2Fopenssl.git

Update documentation on EVP_PKEY_ASN1_METHOD deprecation

Signed-off-by: Norbert Pocs <norbertp@openssl.org>

Reviewed-by: Saša Nedvědický <sashan@openssl.org>
Reviewed-by: Neil Horman <nhorman@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27727)
---

diff --git a/doc/man3/EVP_PKEY_ASN1_METHOD.pod b/doc/man3/EVP_PKEY_ASN1_METHOD.pod
index 41f058fe54e..da17c568f2f 100644
--- a/doc/man3/EVP_PKEY_ASN1_METHOD.pod
+++ b/doc/man3/EVP_PKEY_ASN1_METHOD.pod
@@ -28,6 +28,10 @@ EVP_PKEY_get0_asn1
 
 =head1 SYNOPSIS
 
+The following functions have been deprecated since OpenSSL 3.6, and can be
+hidden entirely by defining B<OPENSSL_API_COMPAT> with a suitable version value,
+see L<openssl_user_macros(7)>; use the provider API instead.
+
  #include <openssl/evp.h>
 
  typedef struct evp_pkey_asn1_method_st EVP_PKEY_ASN1_METHOD;
@@ -437,6 +441,8 @@ The signature of the I<pub_decode> functional argument of
 EVP_PKEY_asn1_set_public() has changed in OpenSSL 3.0 so its I<pub>
 parameter is now constified.
 
+All of these functions were deprecated in OpenSSL 3.6.
+
 =head1 COPYRIGHT
 
 Copyright 2017-2024 The OpenSSL Project Authors. All Rights Reserved.
diff --git a/doc/man3/EVP_PKEY_asn1_get_count.pod b/doc/man3/EVP_PKEY_asn1_get_count.pod
index 19d1e36454b..fdd2166ef2e 100644
--- a/doc/man3/EVP_PKEY_asn1_get_count.pod
+++ b/doc/man3/EVP_PKEY_asn1_get_count.pod
@@ -11,6 +11,10 @@ EVP_PKEY_asn1_get0_info
 
 =head1 SYNOPSIS
 
+The following functions have been deprecated since OpenSSL 3.6, and can be
+hidden entirely by defining B<OPENSSL_API_COMPAT> with a suitable version value,
+see L<openssl_user_macros(7)>; use the provider API instead.
+
  #include <openssl/evp.h>
 
  int EVP_PKEY_asn1_get_count(void);
@@ -68,6 +72,10 @@ EVP_PKEY_asn1_get0_info() returns 0 on failure, 1 on success.
 
 L<EVP_PKEY_asn1_new(3)>, L<EVP_PKEY_asn1_add0(3)>
 
+=head1 HISTORY
+
+These functions were deprecated in OpenSSL 3.6.
+
 =head1 COPYRIGHT
 
 Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
diff --git a/doc/man7/ossl-guide-migration.pod b/doc/man7/ossl-guide-migration.pod
index aa60c129baa..41b0f90ffe9 100644
--- a/doc/man7/ossl-guide-migration.pod
+++ b/doc/man7/ossl-guide-migration.pod
@@ -17,6 +17,14 @@ L<https://github.com/openssl/openssl/blob/master/CHANGES.md>.
 For an overview of some of the key concepts introduced in OpenSSL 3.0 see
 L<crypto(7)>.
 
+=head1 OPENSSL 3.6
+
+=head2 Main Changes from OpenSSL 3.5
+
+The functions EVP_PKEY_asn1_*() and L<EVP_PKEY_get0_asn1(3)> were deprecated in
+favour of the provider API. EVP_PKEY_assign_[DSA|SIPHASH]() were also deprecated.
+Please use the new high level and provider API.
+
 =head1 OPENSSL 3.1
 
 =head2 Main Changes from OpenSSL 3.0