From ab3cffc9c24ec5b54456d2128a07a09bee2e69d6 Mon Sep 17 00:00:00 2001 From: Ingela Anderton Andin Date: Fri, 17 Jun 2016 11:12:40 +0200 Subject: ssl: Extend list of supported features Note these where supported before ssl-8.0 --- lib/ssl/doc/src/ssl_app.xml | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'lib/ssl/doc/src') diff --git a/lib/ssl/doc/src/ssl_app.xml b/lib/ssl/doc/src/ssl_app.xml index 0b3fa9a8a9..a66e947bc1 100644 --- a/lib/ssl/doc/src/ssl_app.xml +++ b/lib/ssl/doc/src/ssl_app.xml @@ -45,6 +45,8 @@ but can be configured. For security reasons DES cipher suites are no longer supported by default, but can be configured. + Renegotiation Indication Extension RFC 5746 is supported + Ephemeral Diffie-Hellman cipher suites are supported, but not Diffie Hellman Certificates cipher suites. Elliptic Curve cipher suites are supported if the Crypto @@ -55,10 +57,16 @@ IDEA cipher suites are not supported as they have become deprecated by the latest TLS specification so it is not motivated to implement them. + Compression is not supported. CRL validation is supported. Policy certificate extensions are not supported. 'Server Name Indication' extension (RFC 6066) is supported. + Application Layer Protocol Negotiation (ALPN) and its successor Next Protocol Negotiation (NPN) + are supported. + It is possible to use Pre-Shared Key (PSK) and Secure Remote Password (SRP) + cipher suites, but they are not enabled by default. + -- cgit v1.2.3