Skip to content

Commit cb677d7

Browse files
Update the note on the removed ciphers
1 parent 36bf927 commit cb677d7

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

modules/ROOT/pages/security/ssl-framework.adoc

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1068,14 +1068,14 @@ One can set up a Neo4j configuration by specifying the list of cipher suites tha
10681068
Valid values depend on the current JRE and SSL provider.
10691069
For Oracle JRE here is the list of supported ones - https://docs.oracle.com/en/java/javase/17/docs/specs/security/standard-names.html#jsse-cipher-suite-names.
10701070

1071-
[role=label--deprecated-5.26]
1071+
[role=label--removed-2025.01]
10721072
[IMPORTANT]
10731073
====
10741074
10751075
CBC (cipher block chaining) ciphers, as used in TLS v1.2 network encryption, have several security vulnerabilities that make them less secure than alternative methods.
10761076
The Internet Engineering Task Force (IETF) does not recommend using CBC-based ciphers (RFC 8447), and these ciphers were removed from the TLS standard with the development of TLS v1.3.
10771077
1078-
Note that the use of the following CBC-based ciphers are deprecated from Neo4j 5.26:
1078+
Note that the use of the following CBC-based ciphers are not supported from Neo4j 2025.01:
10791079
10801080
* TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
10811081
* TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

0 commit comments

Comments
 (0)