doc: fix rsa_oaep_md default digest documentation

Document that rsa_oaep_md defaults to SHA1, matching the current
implementation.

Note: SoftHSM currently supports only SHA1/MGF1-SHA1 with RSA-OAEP
encryption.

Reviewed-by: Jakub Zelenka <jakub.zelenka@openssl.foundation>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Eugene Syromiatnikov <esyr@openssl.org>
MergeDate: Wed Jul 29 16:46:32 2026
(Merged from https://github.com/openssl/openssl/pull/31295)

diff --git a/doc/man1/openssl-pkeyutl.pod.in b/doc/man1/openssl-pkeyutl.pod.in
index 590bfe3a6d7c395e358b057c5a2fabac58e081d9..63727ed8c904d02cc44d91a459d593a96fb25516 100644 (file)
--- a/doc/man1/openssl-pkeyutl.pod.in
+++ b/doc/man1/openssl-pkeyutl.pod.in
@@ -373,7 +373,7 @@ explicitly set in PSS mode then the signing digest is used.
 =item B<rsa_oaep_md:>I<digest>
 
 Sets the digest used for the OAEP hash function. If not explicitly set then
-SHA256 is used.
+SHA1 is used.
 
 =item B<rsa_pkcs1_implicit_rejection:>I<flag>