aboutsummaryrefslogtreecommitdiffstats
path: root/lib/ssl/doc/src
diff options
context:
space:
mode:
authorIngela Anderton Andin <[email protected]>2016-02-05 15:56:47 +0100
committerIngela Anderton Andin <[email protected]>2016-02-18 17:13:05 +0100
commit3db7370a556d0dd064f005fd745bdbf50840eda1 (patch)
tree5761184421cbcd8f5c36be3e8fa2dccd1aeb26ba /lib/ssl/doc/src
parent1dd90c64e8933892ba2741365782517bff0692a5 (diff)
downloadotp-3db7370a556d0dd064f005fd745bdbf50840eda1.tar.gz
otp-3db7370a556d0dd064f005fd745bdbf50840eda1.tar.bz2
otp-3db7370a556d0dd064f005fd745bdbf50840eda1.zip
ssl: Remove DES ciphers from default configuration
DES is not considered secure. Also correct 'Server Name Indication' support description.
Diffstat (limited to 'lib/ssl/doc/src')
-rw-r--r--lib/ssl/doc/src/ssl_app.xml6
1 files changed, 4 insertions, 2 deletions
diff --git a/lib/ssl/doc/src/ssl_app.xml b/lib/ssl/doc/src/ssl_app.xml
index 6c82e32a74..d05ece3971 100644
--- a/lib/ssl/doc/src/ssl_app.xml
+++ b/lib/ssl/doc/src/ssl_app.xml
@@ -43,6 +43,8 @@
<item>For security reasons SSL-2.0 is not supported.</item>
<item>For security reasons SSL-3.0 is no longer supported by default,
but can be configured.</item>
+ <item>For security reasons DES cipher suites are no longer supported by default,
+ but can be configured.</item>
<item>Ephemeral Diffie-Hellman cipher suites are supported,
but not Diffie Hellman Certificates cipher suites.</item>
<item>Elliptic Curve cipher suites are supported if the Crypto
@@ -55,8 +57,8 @@
motivated to implement them.</item>
<item>CRL validation is supported.</item>
<item>Policy certificate extensions are not supported.</item>
- <item>'Server Name Indication' extension client side
- (RFC 6066, Section 3) is supported.</item>
+ <item>'Server Name Indication' extension
+ (<url href="http://www.ietf.org/rfc/rfc6066.txt">RFC 6066</url>) is supported.</item>
</list>
</description>