Skip to content

Commit 4028e64

Browse files
jbudzeedugon
andauthored
[kibana] Remove default OpenSSL legacy provider (#649)
Related to elastic/kibana#213123 This default configuration is being removed in 9.0+. For production, preferably no changes should be made and this section is no longer needed. Co-authored-by: Edu González de la Herrán <[email protected]>
1 parent 23ad810 commit 4028e64

File tree

1 file changed

+0
-6
lines changed

1 file changed

+0
-6
lines changed

deploy-manage/production-guidance/kibana-in-production-environments.md

Lines changed: 0 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -106,9 +106,3 @@ The option accepts a limit in MB:
106106
```js
107107
--max-old-space-size=2048
108108
```
109-
110-
111-
## OpenSSL Legacy Provider [openssl-legacy-provider]
112-
113-
Starting in 8.10.0, {{kib}} has upgraded its runtime environment, Node.js, from version 16 to version 18 and with it the underlying version of OpenSSL to version 3. Algorithms deemed legacy by OpenSSL 3 have been re-enabled to avoid potential breaking changes in a minor version release of {{kib}}. If SSL certificates configured for {{kib}} are not using any of the legacy algorithms mentioned in the [OpenSSL legacy provider documentation](https://www.openssl.org/docs/man3.0/man7/OSSL_PROVIDER-legacy.md), we recommend disabling this setting by removing `--openssl-legacy-provider` in the `node.options` config file.
114-

0 commit comments

Comments
 (0)