OpenSSL man pages for both 1.1.1 and 3.0 omit critical -pkeyopt parameter rsa_oaep_md:.

Without it explicitly specified, OpenSSL encryption cannot be decrypted by other tools (like OpenSC or YKCS11). See Yubico/yubico-piv-tool#309

Proposed resolution: mention rsa_oaep_md in the openssl-pkeyutl man page, and preferably add the allowed values.

Update

People already brought this up two years ago in #10174.