Skip to content
This repository was archived by the owner on Apr 22, 2023. It is now read-only.

Commit fe1f975

Browse files
committed
doc: document why SSL2/SSL3 is disabled
1 parent 8730aca commit fe1f975

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

doc/api/tls.markdown

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -38,6 +38,14 @@ To create .pfx or .p12, do this:
3838
- `certfile`: all CA certs concatenated in one file like
3939
`cat ca1-cert.pem ca2-cert.pem > ca-cert.pem`
4040

41+
## Protocol support
42+
43+
Node.js is compiled without SSL2/SSL3 protocol support by default. It was
44+
shown by many security specialists that both of these algorithms are insecure
45+
and could be easily compromised. However, in some situations, it may cause
46+
problems with legacy clients/servers (such as Internet Explorer 6). If you do
47+
really wish to use them, please rebuild node.js with `./configure --with-ssl3`.
48+
4149

4250
## Client-initiated renegotiation attack mitigation
4351

0 commit comments

Comments
 (0)