From nobody Tue Jan 11 23:19:19 2022 X-Original-To: dev-commits-doc-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 16F1C195923D for ; Tue, 11 Jan 2022 23:19:20 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4JYRTz30z1z3CqD; Tue, 11 Jan 2022 23:19:19 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 370B02247E; Tue, 11 Jan 2022 23:19:19 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.16.1/8.16.1) with ESMTP id 20BNJJum030071; Tue, 11 Jan 2022 23:19:19 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.16.1/8.16.1/Submit) id 20BNJJRe030070; Tue, 11 Jan 2022 23:19:19 GMT (envelope-from git) Date: Tue, 11 Jan 2022 23:19:19 GMT Message-Id: <202201112319.20BNJJRe030070@gitrepo.freebsd.org> To: doc-committers@FreeBSD.org, dev-commits-doc-all@FreeBSD.org From: Sergey Kandaurov Subject: git: 4c034ed7c9 - main - Update supported SSL/TLS versions in the base system. List-Id: Commit messages for all branches of the doc repository List-Archive: https://lists.freebsd.org/archives/dev-commits-doc-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-doc-all@freebsd.org X-BeenThere: dev-commits-doc-all@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: pluknet X-Git-Repository: doc X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 4c034ed7c97d58b648686902003e379059d47695 Auto-Submitted: auto-generated ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1641943159; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=YFkl0sEWrFRlxLjkQDZ8hpTx0x9w8s+X05SiK5mwFIk=; b=yD8PTxrD2PfckmY/DWIXvzHYApUI3NhJK8ys428dNfcJeF2hQGxhhGvqnvpNg1LkP8vtZ5 8FTokXGzW3/8YIpC9nX3dpSIr/3LtgO8sZFw8K32MtwQ2sGNxf35df5Aaz37FFV0vEHdwr r4DYAb0BeD7hx31nGyQfGMjuga5UuokZ38SbfyGMvV2mBqOHPUTaVT21IIwSIFCxkbj8TN K1D3/GqUxfpAs4ZY6rUic6OS2RB8uFsB0AaGBdvVNbGNfukMaEbI9JzsYJSQlqLNlV2kzU GwNz48C4WOKutMR2+Cnvt/WcHHcdGpHSYK7VxivTv2+7q1htQpGZapt9hyYzKA== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1641943159; a=rsa-sha256; cv=none; b=h2WQ0BU9PGyVJsm5yxa1c+fHH1A8rxNbT8mZtBc0o4P5vD2/dvqDLeZsCsUo/uwNYHiLHC yB1X9Ebb37DwuwdY3aFcl4CYhkzwkY+8YV2nGB799CVmB/DfoUAofNBqfKhGLf1lpZySeC JNxBRL5e81xkau1E9jAdnFF21LxBhrmb5Ewug2XfaYExRdG0BQ1olOoOOk5hN39FiNqzBt GYNj2zxA8Y5IGLB6Q1eFpmWolJoiKmjpch3yk/PnBU7AG0tFZDHUc5I40A19xyqiaMVr/7 s4Sx6wgL/N/oTNzizwA8MgBfWUvRexxB0bGVYcDn+KLGWwlwQ1vPHPey46YyKA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none X-ThisMailContainsUnwantedMimeParts: N The branch main has been updated by pluknet: URL: https://cgit.FreeBSD.org/doc/commit/?id=4c034ed7c97d58b648686902003e379059d47695 commit 4c034ed7c97d58b648686902003e379059d47695 Author: Sergey Kandaurov AuthorDate: 2022-01-11 23:16:45 +0000 Commit: Sergey Kandaurov CommitDate: 2022-01-11 23:16:45 +0000 Update supported SSL/TLS versions in the base system. --- documentation/content/en/books/handbook/security/_index.adoc | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/documentation/content/en/books/handbook/security/_index.adoc b/documentation/content/en/books/handbook/security/_index.adoc index 50fab4dbf2..371ddf908e 100644 --- a/documentation/content/en/books/handbook/security/_index.adoc +++ b/documentation/content/en/books/handbook/security/_index.adoc @@ -1095,8 +1095,7 @@ File system integrity checking tools like package:security/tripwire[] can allevi OpenSSL is an open source implementation of the SSL and TLS protocols. It provides an encryption transport layer on top of the normal communications layer, allowing it to be intertwined with many network applications and services. -The version of OpenSSL included in FreeBSD supports the Secure Sockets Layer 3.0 (SSLv3) and Transport Layer Security 1.0/1.1/1.2 (TLSv1/TLSv1.1/TLSv1.2) network security protocols and can be used as a general cryptographic library. -In FreeBSD 12.0-RELEASE and above, OpenSSL also supports Transport Layer Security 1.3 (TLSv1.3). +The version of OpenSSL included in FreeBSD supports Transport Layer Security 1.0/1.1/1.2/1.3 (TLSv1/TLSv1.1/TLSv1.2/TLSv1.3) network security protocols and can be used as a general cryptographic library. OpenSSL is often used to encrypt authentication of mail clients and to secure web based transactions such as credit card payments. Some ports, such as package:www/apache24[] and package:databases/postgresql11-server[], include a compile option for building with OpenSSL.