Skip to content

Commit 583b1b2

Browse files
JeetuSuthartargos
authored andcommitted
doc: update OpenSSL default security level to 2
The default OpenSSL security level changed from 1 to 2 in OpenSSL 3.2, which was included in Node.js 24.5. This change enforces stricter cryptographic requirements. Fixes: #59715 PR-URL: #59723 Reviewed-By: Richard Lau <richard.lau@ibm.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
1 parent b2e8f40 commit 583b1b2

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

doc/api/tls.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -454,7 +454,7 @@ are not enabled by default since they offer less security.
454454
The OpenSSL library enforces security levels to control the minimum acceptable
455455
level of security for cryptographic operations. OpenSSL's security levels range
456456
from 0 to 5, with each level imposing stricter security requirements. The default
457-
security level is 1, which is generally suitable for most modern applications.
457+
security level is 2, which is generally suitable for most modern applications.
458458
However, some legacy features and protocols, such as TLSv1, require a lower
459459
security level (`SECLEVEL=0`) to function properly. For more detailed information,
460460
please refer to the [OpenSSL documentation on security levels][].

0 commit comments

Comments
 (0)