Document that DH and DHX key types cannot be used together in KEX

Reviewed-by: Paul Dale <[email protected]> Reviewed-by: Neil Horman <[email protected]> Reviewed-by: Kurt Roeckx <[email protected]> (Merged from openssl#24819) (cherry picked from commit 45611a8)
quictls · Jul 17, 2024 · 9b17832 · 9b17832
1 parent 79ab705
commit 9b17832
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/doc/man7/EVP_KEYEXCH-DH.pod b/doc/man7/EVP_KEYEXCH-DH.pod
@@ -7,9 +7,14 @@ EVP_KEYEXCH-DH
 
 =head1 DESCRIPTION
 
-Key exchange support for the B<DH> key type.
+Key exchange support for the B<DH> and B<DHX> key types.
 
-=head2 DH key exchange parameters
+Please note that although both key types support the same key exchange
+operations, they cannot be used together in a single key exchange. It
+is not possible to use a private key of the B<DH> type in key exchange
+with the public key of B<DHX> type and vice versa.
+
+=head2 DH and DHX key exchange parameters
 
 =over 4