Skip to content

OpenSSL default security level changed to 2 in Node.js 24.5 but docs still say it's 1 #59715

@carey

Description

@carey

Affected URL(s)

https://nodejs.org/docs/latest/api/tls.html#openssl-security-level

Description of the problem

Although the OpenSSL documentation does not mention it, the default security level was changed in OpenSSL 3.2 from 1 to 2; see openssl/openssl@b3a33da. This change was included in Node.js 24.5, but the Node.js "OpenSSL security levels" documentation was not updated.

This was an undocumented breaking change for me, though that's my responsibility for using the Current version. It should be clearly documented if the LTS version is upgraded to OpenSSL 3.5, though, or that version be forced to stay at security level 1.

Metadata

Metadata

Assignees

No one assigned

    Labels

    docIssues and PRs related to the documentations.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions