Commit 71bac70
doc: ref OpenSSL legacy provider from crypto docs
This adds a link to the --openssl-legacy-provider flag to the
"Support for weak or compromised algorithms" section.
PR-URL: #40593
Refs: #40478
Reviewed-By: Richard Lau <rlau@redhat.com>
Reviewed-By: Voltrex <mohammadkeyvanzade94@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Beth Griggs <bgriggs@redhat.com>1 parent 8f41022 commit 71bac70
1 file changed
Lines changed: 5 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -5378,6 +5378,10 @@ Based on the recommendations of [NIST SP 800-131A][]: | |||
| 5378 | 5378 | ||
| 5379 | 5379 | See the reference for other recommendations and details. | |
| 5380 | 5380 | ||
| 5381 | + Some algorithms that have known weaknesses and are of little relevance in | ||
| 5382 | + practice are only available through the [legacy provider][], which is not | ||
| 5383 | + enabled by default. | ||
| 5384 | + | ||
| 5381 | 5385 | ### CCM mode | |
| 5382 | 5386 | ||
| 5383 | 5387 | CCM is one of the supported [AEAD algorithms][]. Applications which use this | |
@@ -5912,6 +5916,7 @@ See the [list of SSL OP Flags][] for details. | |||
| 5912 | 5916 | [certificate object]: tls.md#certificate-object | |
| 5913 | 5917 | [encoding]: buffer.md#buffers-and-character-encodings | |
| 5914 | 5918 | [initialization vector]: https://en.wikipedia.org/wiki/Initialization_vector | |
| 5919 | + [legacy provider]: cli.md#--openssl-legacy-provider | ||
| 5915 | 5920 | [list of SSL OP Flags]: https://wiki.openssl.org/index.php/List_of_SSL_OP_Flags#Table_of_Options | |
| 5916 | 5921 | [modulo bias]: https://en.wikipedia.org/wiki/Fisher%E2%80%93Yates_shuffle#Modulo_bias | |
| 5917 | 5922 | [safe integers]: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Number/isSafeInteger | |
0 commit comments