Skip to content

Commit 072da1a

Browse files
authored
doc: update OpenSSL default security level to 2
The default OpenSSL security level changed from 1 to 2 in OpenSSL 3.2, which was included in Node.js 24.5. This change enforces stricter cryptographic requirements. Fixes: #59715 PR-URL: #59723 Reviewed-By: Richard Lau <[email protected]> Reviewed-By: Luigi Pinca <[email protected]>
1 parent b4af647 commit 072da1a

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

doc/api/tls.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -454,7 +454,7 @@ are not enabled by default since they offer less security.
454454
The OpenSSL library enforces security levels to control the minimum acceptable
455455
level of security for cryptographic operations. OpenSSL's security levels range
456456
from 0 to 5, with each level imposing stricter security requirements. The default
457-
security level is 1, which is generally suitable for most modern applications.
457+
security level is 2, which is generally suitable for most modern applications.
458458
However, some legacy features and protocols, such as TLSv1, require a lower
459459
security level (`SECLEVEL=0`) to function properly. For more detailed information,
460460
please refer to the [OpenSSL documentation on security levels][].

0 commit comments

Comments
 (0)