Home Original page

doc: update OpenSSL default security level to 2 · nodejs/node@583b1b2

Original file line numberDiff line numberDiff line change

@@ -454,7 +454,7 @@ are not enabled by default since they offer less security.

454454

The OpenSSL library enforces security levels to control the minimum acceptable

455455

level of security for cryptographic operations. OpenSSL's security levels range

456456

from 0 to 5, with each level imposing stricter security requirements. The default

457-

security level is 1, which is generally suitable for most modern applications.

457+

security level is 2, which is generally suitable for most modern applications.

458458

However, some legacy features and protocols, such as TLSv1, require a lower

459459

security level (`SECLEVEL=0`) to function properly. For more detailed information,

460460

please refer to the [OpenSSL documentation on security levels][].