diff options
| author | JWWTSL <[email protected]> | 2026-10-16 05:35:07 +0200 |
|---|---|---|
| committer | Tomas Mraz <[email protected]> | 2026-10-23 14:44:46 +0200 |
| commit | 1b02949afd9ddba89ef4f133ecb3c4e9de8c223d (patch) | |
| tree | 7e94885be3003731940217c798eacb01b00f689d | |
| parent | test: clear stale RADIX handshake injection selectors (diff) | |
| download | openssl-1b02949afd9ddba89ef4f133ecb3c4e9de8c223d.tar.gz openssl-1b02949afd9ddba89ef4f133ecb3c4e9de8c223d.zip | |
doc: replace DES-EDE3-CBC with AES-256-CBC in PEM examples
The EXAMPLES section of PEM_read_bio_PrivateKey still showed
EVP_des_ede3_cbc() for encrypting private keys, but 3DES is
deprecated in OpenSSL 3.x. Replace with EVP_aes_256_cbc() to
show a modern cipher, consistent with other man pages.
The DEK-Info header in the file format example is left as-is
since it documents the actual PEM file structure.
Fixes #28665
CLA: trivial
Reviewed-by: Tomas Mraz <[email protected]>
Reviewed-by: Paul Dale <[email protected]>
Reviewed-by: Shane Lontis <[email protected]>
Merge-date: Fri Oct 23 12:44:52 2026
Merged-from: https://github.com/openssl/openssl/pull/33228
| -rw-r--r-- | doc/man3/PEM_read_bio_PrivateKey.pod | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/doc/man3/PEM_read_bio_PrivateKey.pod b/doc/man3/PEM_read_bio_PrivateKey.pod index 88600818732..741d591557e 100644 --- a/doc/man3/PEM_read_bio_PrivateKey.pod +++ b/doc/man3/PEM_read_bio_PrivateKey.pod @@ -444,7 +444,7 @@ the function. The pseudo code to derive the key would look similar to: - EVP_CIPHER* cipher = EVP_des_ede3_cbc(); + EVP_CIPHER* cipher = EVP_aes_256_cbc(); EVP_MD* md = EVP_md5(); unsigned int nkey = EVP_CIPHER_get_key_length(cipher); @@ -517,15 +517,15 @@ Write a certificate to a BIO: /* Error */ Write a private key (using traditional format) to a BIO using -triple DES encryption, the pass phrase is prompted for: +AES-256-CBC encryption, the pass phrase is prompted for: - if (!PEM_write_bio_PrivateKey(bp, key, EVP_des_ede3_cbc(), NULL, 0, 0, NULL)) + if (!PEM_write_bio_PrivateKey(bp, key, EVP_aes_256_cbc(), NULL, 0, 0, NULL)) /* Error */ -Write a private key (using PKCS#8 format) to a BIO using triple -DES encryption, using the pass phrase "hello": +Write a private key (using PKCS#8 format) to a BIO using +AES-256-CBC encryption, using the pass phrase "hello": - if (!PEM_write_bio_PKCS8PrivateKey(bp, key, EVP_des_ede3_cbc(), + if (!PEM_write_bio_PKCS8PrivateKey(bp, key, EVP_aes_256_cbc(), NULL, 0, 0, "hello")) /* Error */ |