From: olszomal <Malgorzata.Olszowka@stunnel.org>
Date: Tue, 26 May 2026 07:01:57 +0000 (+0200)
Subject: doc: fix rsa_oaep_md default digest documentation
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=178f835eaff839b314164da488772f37c23c907a;p=thirdparty%2Fopenssl.git

doc: fix rsa_oaep_md default digest documentation

Document that rsa_oaep_md defaults to SHA1, matching the current
implementation.

Note: SoftHSM currently supports only SHA1/MGF1-SHA1 with RSA-OAEP
encryption.

Reviewed-by: Jakub Zelenka <jakub.zelenka@openssl.foundation>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Eugene Syromiatnikov <esyr@openssl.org>
MergeDate: Wed Jul 29 16:46:32 2026
(Merged from https://github.com/openssl/openssl/pull/31295)
---

diff --git a/doc/man1/openssl-pkeyutl.pod.in b/doc/man1/openssl-pkeyutl.pod.in
index 590bfe3a6d7..63727ed8c90 100644
--- a/doc/man1/openssl-pkeyutl.pod.in
+++ b/doc/man1/openssl-pkeyutl.pod.in
@@ -373,7 +373,7 @@ explicitly set in PSS mode then the signing digest is used.
 =item B<rsa_oaep_md:>I<digest>
 
 Sets the digest used for the OAEP hash function. If not explicitly set then
-SHA256 is used.
+SHA1 is used.
 
 =item B<rsa_pkcs1_implicit_rejection:>I<flag>