Module: kamailio Branch: master Commit: 1fd57e57255cb7f6d76326a255a3a91d107cba89 URL: https://github.com/kamailio/kamailio/commit/1fd57e57255cb7f6d76326a255a3a91d...

Author: Florian Floimair f.floimair@commend.com Committer: Henning Westerholt hw@gilawa.com Date: 2023-05-12T17:26:03+02:00

tls: update documentation (TLS v1.0 & 1.1 deprecation)

---

Modified: src/modules/tls/doc/params.xml

---

Diff: https://github.com/kamailio/kamailio/commit/1fd57e57255cb7f6d76326a255a3a91d... Patch: https://github.com/kamailio/kamailio/commit/1fd57e57255cb7f6d76326a255a3a91d...

---

diff --git a/src/modules/tls/doc/params.xml b/src/modules/tls/doc/params.xml index b51e5ce99a0..1e8ca7f3e94 100644 --- a/src/modules/tls/doc/params.xml +++ b/src/modules/tls/doc/params.xml @@ -105,9 +105,10 @@ <para> If RFC 3261 conformance is desired, at least TLSv1 must be used. For compatibility with older clients SSLv23 is the option, but again, be aware - of security concerns, SSLv2/3 being considered very insecure by 2014. + of security concerns, SSLv2/3 as well as TLS v1.0 and v1.1 are being considered very insecure + and are therefore deprecated since March 2021 (RFC 8996). For current information about what's considered secure, please consult, - IETF BCP 195, currently RFC 7525 - "Recommendations for Secure Use of + IETF BCP 195, currently RFC 9325 - "Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)" </para> <example>