Commit 583b1b2
doc: update OpenSSL default security level to 2
The default OpenSSL security level changed from 1 to 2 in OpenSSL 3.2,
which was included in Node.js 24.5. This change enforces stricter
cryptographic requirements.
Fixes: #59715
PR-URL: #59723
Reviewed-By: Richard Lau <richard.lau@ibm.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>1 parent b2e8f40 commit 583b1b2
1 file changed
Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -454,7 +454,7 @@ are not enabled by default since they offer less security. | |||
| 454 | 454 | The OpenSSL library enforces security levels to control the minimum acceptable | |
| 455 | 455 | level of security for cryptographic operations. OpenSSL's security levels range | |
| 456 | 456 | from 0 to 5, with each level imposing stricter security requirements. The default | |
| 457 | - security level is 1, which is generally suitable for most modern applications. | ||
| 457 | + security level is 2, which is generally suitable for most modern applications. | ||
| 458 | 458 | However, some legacy features and protocols, such as TLSv1, require a lower | |
| 459 | 459 | security level (`SECLEVEL=0`) to function properly. For more detailed information, | |
| 460 | 460 | please refer to the [OpenSSL documentation on security levels][]. | |
0 commit comments