diff options
| author | Ingela Anderton Andin <[email protected]> | 2015-01-13 15:16:20 +0100 |
|---|---|---|
| committer | Ingela Anderton Andin <[email protected]> | 2015-01-23 11:34:18 +0100 |
| commit | 519b07bca04bdd8585b48f2de6b7124ca6455358 (patch) | |
| tree | 71dcbdfd4b32ff7784bb91d35f0cc3eecccb0c64 /lib/ssl/doc/src | |
| parent | 69de799fdce1c4cc5a582df6f2a86ccd3e62c3a9 (diff) | |
| download | otp-519b07bca04bdd8585b48f2de6b7124ca6455358.tar.gz otp-519b07bca04bdd8585b48f2de6b7124ca6455358.tar.bz2 otp-519b07bca04bdd8585b48f2de6b7124ca6455358.zip | |
ssl: Reenable padding check for TLS-1.0 and provide backwards compatible
disable option
Diffstat (limited to 'lib/ssl/doc/src')
| -rw-r--r-- | lib/ssl/doc/src/ssl.xml | 18 |
1 files changed, 15 insertions, 3 deletions
diff --git a/lib/ssl/doc/src/ssl.xml b/lib/ssl/doc/src/ssl.xml index bd2cb70e3f..d77c6440b0 100644 --- a/lib/ssl/doc/src/ssl.xml +++ b/lib/ssl/doc/src/ssl.xml @@ -350,11 +350,23 @@ fun(srp, Username :: string(), UserState :: term()) -> </p> </item> + <tag>{padding_check, boolean()}</tag> + <item> + <p> This option only affects TLS-1.0 connections. + If set to false it disables the block cipher padding check + to be able to interoperate with legacy software. + </p> + + <warning><p> Using this option makes TLS vulnerable to + the Poodle attack</p></warning> + + </item> + </taglist> - + </section> - - <section> + + <section> <title>SSL OPTION DESCRIPTIONS - CLIENT SIDE</title> <p>Options described here are client specific or has a slightly different |