Deprecate the low level Diffie-Hellman functions.

[oweals/openssl.git] / doc / man3 / DSA_dup_DH.pod

diff --git a/doc/man3/DSA_dup_DH.pod b/doc/man3/DSA_dup_DH.pod
index baaca6de2ee11e2fa26e4a217ac656ad6b379f04..897d9a1e419b079d729f69f9a33b73c54e1f70e0 100644 (file)
--- a/doc/man3/DSA_dup_DH.pod
+++ b/doc/man3/DSA_dup_DH.pod
@@ -8,10 +8,18 @@ DSA_dup_DH - create a DH structure out of DSA structure
 
  #include <openssl/dsa.h>
 
+Deprecated since OpenSSL 3.0, can be hidden entirely by defining
+B<OPENSSL_API_COMPAT> with a suitable version value, see
+L<openssl_user_macros(7)>:
+
  DH *DSA_dup_DH(const DSA *r);
 
 =head1 DESCRIPTION
 
+The function described on this page is deprecated. There is no direct
+replacement, applications should use the EVP_PKEY APIs for Diffie-Hellman
+operations.
+
 DSA_dup_DH() duplicates DSA parameters/keys as DH parameters/keys. q
 is lost during that conversion, but the resulting DH parameters
 contain its length.
@@ -29,6 +37,10 @@ Be careful to avoid small subgroup attacks when using this.
 
 L<DH_new(3)>, L<DSA_new(3)>, L<ERR_get_error(3)>
 
+=head1 HISTORY
+
+This function was deprecated in OpenSSL 3.0.
+
 =head1 COPYRIGHT
 
 Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.