summaryrefslogtreecommitdiffstats
path: root/doc/man7
diff options
context:
space:
mode:
authorDmitry Belyavskiy <beldmit@gmail.com>2021-07-30 16:03:55 +0200
committerPauli <pauli@openssl.org>2021-08-05 10:03:42 +1000
commit6da0f274834d60c2ad84109e00430f9e4f7ffb85 (patch)
tree39f7379a010876d6d7da9c89e855e2b326f4b506 /doc/man7
parent6b9d3b7c5ee63757c7bfb6f3761fb9ea35ac64a5 (diff)
Document necessary error code processing
Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Ben Kaduk <kaduk@mit.edu> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/16187)
Diffstat (limited to 'doc/man7')
-rw-r--r--doc/man7/migration_guide.pod12
1 files changed, 12 insertions, 0 deletions
diff --git a/doc/man7/migration_guide.pod b/doc/man7/migration_guide.pod
index 462ef9f122..8cc017dfa6 100644
--- a/doc/man7/migration_guide.pod
+++ b/doc/man7/migration_guide.pod
@@ -469,6 +469,18 @@ Remove your usage of the low level APIs. In this case you will need to rewrite y
=back
+=head3 Error code changes
+
+As OpenSSL 3.0 provides a brand new Encoder/Decoder mechanism for working with
+widely used file formats, application code that checks for particular error
+reason codes on key loading failures might need an update.
+
+Password-protected keys may deserve special attention. If only some errors
+are treated as an indicator that the user should be asked about the password again,
+it's worth testing these scenarios and processing the newly relevant codes.
+
+There may be more cases to treat specially, depending on the calling application code.
+
=head2 Upgrading from OpenSSL 1.0.2
Upgrading to OpenSSL 3.0 from OpenSSL 1.0.2 is likely to be significantly more