From df5280ac94110458381594cbc8dfa3fe31898622 Mon Sep 17 00:00:00 2001 From: Ingela Anderton Andin Date: Thu, 4 Jan 2018 11:52:05 +0100 Subject: ssl: RSA key exchange is considered broken do not support by default --- lib/ssl/doc/src/ssl_app.xml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) (limited to 'lib/ssl/doc') diff --git a/lib/ssl/doc/src/ssl_app.xml b/lib/ssl/doc/src/ssl_app.xml index f317dfded4..e4109dd080 100644 --- a/lib/ssl/doc/src/ssl_app.xml +++ b/lib/ssl/doc/src/ssl_app.xml @@ -42,9 +42,11 @@ TLS-1.1, and TLS-1.2. For security reasons SSL-2.0 is not supported. For security reasons SSL-3.0 is no longer supported by default, - but can be configured. + but can be configured. (OTP 19) + For security reasons RSA key exchange cipher suites are no longer supported by default, + but can be configured. (OTP 21) For security reasons DES cipher suites are no longer supported by default, - but can be configured. + but can be configured. (OTP 20) Renegotiation Indication Extension RFC 5746 is supported Ephemeral Diffie-Hellman cipher suites are supported, -- cgit v1.2.3