Skip to content

Commit 02d62bb

Browse files
Add refinement to the note of deprecated ciphers (#1968)
1 parent 2ee086c commit 02d62bb

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

modules/ROOT/pages/security/ssl-framework.adoc

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1084,14 +1084,14 @@ One can set up a Neo4j configuration by specifying the list of cipher suites tha
10841084
Valid values depend on the current JRE and SSL provider.
10851085
For Oracle JRE here is the list of supported ones - https://docs.oracle.com/en/java/javase/17/docs/specs/security/standard-names.html#jsse-cipher-suite-names.
10861086

1087+
[role=label--deprecated-5.26]
10871088
[IMPORTANT]
10881089
====
1089-
label:deprecated[Deprecated in 5.26]
10901090
10911091
CBC (cipher block chaining) ciphers, as used in TLS v1.2 network encryption, have several security vulnerabilities that make them less secure than alternative methods.
1092-
The Internet Engineering Task Force (IETF) doesn't recommend using CBC-based ciphers (RFC 8447), and these ciphers were removed from the TLS standard with the development of TLS v1.3.
1092+
The Internet Engineering Task Force (IETF) does not recommend using CBC-based ciphers (RFC 8447), and these ciphers were removed from the TLS standard with the development of TLS v1.3.
10931093
1094-
Note that the use of the following CBC-based ciphers has been deprecated in Neo4j 5.26:
1094+
Note that the use of the following CBC-based ciphers are deprecated from Neo4j 5.26:
10951095
10961096
* TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
10971097
* TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

0 commit comments

Comments
 (0)