Skip to content

Commit 71bac70

Browse files
tniessentargos
authored andcommitted
doc: ref OpenSSL legacy provider from crypto docs
This adds a link to the --openssl-legacy-provider flag to the "Support for weak or compromised algorithms" section. PR-URL: #40593 Refs: #40478 Reviewed-By: Richard Lau <[email protected]> Reviewed-By: Voltrex <[email protected]> Reviewed-By: Luigi Pinca <[email protected]> Reviewed-By: Beth Griggs <[email protected]>
1 parent 8f41022 commit 71bac70

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

doc/api/crypto.md

+5
Original file line numberDiff line numberDiff line change
@@ -5378,6 +5378,10 @@ Based on the recommendations of [NIST SP 800-131A][]:
53785378

53795379
See the reference for other recommendations and details.
53805380

5381+
Some algorithms that have known weaknesses and are of little relevance in
5382+
practice are only available through the [legacy provider][], which is not
5383+
enabled by default.
5384+
53815385
### CCM mode
53825386

53835387
CCM is one of the supported [AEAD algorithms][]. Applications which use this
@@ -5912,6 +5916,7 @@ See the [list of SSL OP Flags][] for details.
59125916
[certificate object]: tls.md#certificate-object
59135917
[encoding]: buffer.md#buffers-and-character-encodings
59145918
[initialization vector]: https://en.wikipedia.org/wiki/Initialization_vector
5919+
[legacy provider]: cli.md#--openssl-legacy-provider
59155920
[list of SSL OP Flags]: https://wiki.openssl.org/index.php/List_of_SSL_OP_Flags#Table_of_Options
59165921
[modulo bias]: https://en.wikipedia.org/wiki/Fisher%E2%80%93Yates_shuffle#Modulo_bias
59175922
[safe integers]: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Number/isSafeInteger

0 commit comments

Comments
 (0)