- Support for ML-DSA keys for post-quantum cryptography (PQC) when built
against OpenSSL 3.5 or later
- Support for EC-DSA keys for elliptic curves
- RSA certificate authority is now created with a minimum key strength
of 4096 bits
- Improved --help output
- Deprecated support for generating custom DH parameters
- Stopped producing the DH parameter file by default (it may be
requested explicitly with the --dhparams-file argument)
- Minimum OpenSSL version is now 3.0
- Drop upstreamed patches
Resolves: RHEL-123675
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
Support for OpenSSL 3.0
Support for outputting named Diffie-Hellman parameter groups
Support for CentOS Stream 9
Resolves: rhbz#1984468
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>