From 748d502138a941ddf79accd8dffc398ce84a21a7 Mon Sep 17 00:00:00 2001 From: Ingela Anderton Andin Date: Thu, 8 Mar 2018 16:52:56 +0100 Subject: ssl: Remove interoperability option v2_hello_compatible --- lib/ssl/doc/src/ssl.xml | 6 ------ lib/ssl/doc/src/ssl_app.xml | 3 ++- 2 files changed, 2 insertions(+), 7 deletions(-) (limited to 'lib/ssl/doc/src') diff --git a/lib/ssl/doc/src/ssl.xml b/lib/ssl/doc/src/ssl.xml index 7267083e32..8c1b1541c7 100644 --- a/lib/ssl/doc/src/ssl.xml +++ b/lib/ssl/doc/src/ssl.xml @@ -821,12 +821,6 @@ fun(srp, Username :: string(), UserState :: term()) -> client certificate is requested. For more details see the corresponding client option.

- {v2_hello_compatible, boolean()} - If true, the server accepts clients that send hello messages on SSL-2.0 format but offers - supported SSL/TLS versions. Defaults to false, that is the server will not interoperate with clients that - offers SSL-2.0. - - diff --git a/lib/ssl/doc/src/ssl_app.xml b/lib/ssl/doc/src/ssl_app.xml index 51070bb083..e22d43db0e 100644 --- a/lib/ssl/doc/src/ssl_app.xml +++ b/lib/ssl/doc/src/ssl_app.xml @@ -40,7 +40,8 @@ Supported SSL/TLS/DTLS-versions are SSL-3.0, TLS-1.0, TLS-1.1, TLS-1.2, DTLS-1.0 (based on TLS-1.1), DTLS-1.2 (based on TLS-1.2) - For security reasons SSL-2.0 is not supported. + For security reasons SSL-2.0 is not supported. + Interoperability with SSL-2.0 enabled clients dropped. (OTP 21) For security reasons SSL-3.0 is no longer supported by default, but can be configured. (OTP 19) For security reasons RSA key exchange cipher suites are no longer supported by default, -- cgit v1.2.3