Add NEWS entry about deprecation of command line public tools

Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/10977)
3 years ago · 663247bf11
parent 1ddf2594e1
commit 663247bf11
1 changed files with 3 additions and 0 deletions
--- a/3
+++ b/3
@ -7,6 +7,9 @@

  Major changes between OpenSSL 1.1.1 and OpenSSL 3.0.0 [under development]

+      o The algorithm specific public key command line applications have
+        been deprecated.  These include dhparam, gendsa and others.  The pkey
+        alternatives should be used intead: pkey, pkeyparam and genpkey.
      o X509 certificates signed using SHA1 are no longer allowed at security
        level 1 or higher. The default security level for TLS is 1, so
        certificates signed using SHA1 are by default no longer trusted to