Skip to content

Commit e60ba45

Browse files
Add RHEL 8 crypto policy limitation for certificate key sizes
- Document that FUTURE crypto policy rejects certificates with keys < 3072 bits - Explain impact on users with custom 2048-bit certificates - Provide guidance to change policy from FUTURE to DEFAULT - Include reference to Red Hat crypto policy documentation Addresses DOC-1629
1 parent d3d6b26 commit e60ba45

File tree

1 file changed

+7
-1
lines changed

1 file changed

+7
-1
lines changed

content/embeds/supported-platforms-embed.md

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -76,7 +76,13 @@ The RHEL-compatible distributions CentOS, CentOS Stream, Alma Linux, Rocky Linux
7676

7777
### TLS 1.0 and TLS 1.1
7878

79-
Redis Enterprise Software version 6.2.8 removed support for TLS 1.0 and TLS 1.1 on Red Hat Enterprise Linux 8 (RHEL 8) because that operating system [does not enable support](https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/security_hardening/using-the-system-wide-cryptographic-policies_security-hardening) for these versions by default.
79+
Redis Enterprise Software version 6.2.8 removed support for TLS 1.0 and TLS 1.1 on Red Hat Enterprise Linux 8 (RHEL 8) because that operating system [does not enable support](https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/security_hardening/using-the-system-wide-cryptographic-policies_security-hardening) for these versions by default.
80+
81+
### RHEL 8 crypto policy and certificate key size
82+
83+
In RHEL 8, if the crypto policy is set to `FUTURE`, the system will not accept certificates with private key sizes smaller than 3072 bits. This affects users who use custom certificates with smaller keys (such as 2048-bit keys).
84+
85+
If you want to continue using certificates with smaller key sizes, you need to change the crypto policy from `FUTURE` to `DEFAULT`. For more information about crypto policies, see the [Red Hat documentation on system-wide cryptographic policies](https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/security_hardening/using-the-system-wide-cryptographic-policies_security-hardening).
8086

8187
### Ubuntu 20 rejects SHA1 certificates
8288

0 commit comments

Comments
 (0)