@@ -33,23 +33,25 @@ the public certificate transparency log.
3333The following protocols and cipher suites are supported and accepted by Redpanda
3434services such as Schema Registry, HTTP Proxy, and Kafka API.
3535
36+ NOTE: Cipher suites marked ** are deprecated.
37+
3638```bash
3739Supported Server Cipher(s):
3840Preferred TLSv1.3 128 bits TLS_AES_128_GCM_SHA256 Curve 25519 DHE 253
3941Accepted TLSv1.3 256 bits TLS_AES_256_GCM_SHA384 Curve 25519 DHE 253
4042Accepted TLSv1.3 256 bits TLS_CHACHA20_POLY1305_SHA256 Curve 25519 DHE 253
4143Accepted TLSv1.3 128 bits TLS_AES_128_CCM_SHA256 Curve 25519 DHE 253
4244Preferred TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve 25519 DHE 253
43- Accepted TLSv1.2 128 bits AES128-GCM-SHA256
45+ Accepted TLSv1.2 128 bits AES128-GCM-SHA256 **
4446Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve 25519 DHE 253
45- Accepted TLSv1.2 256 bits AES256-GCM-SHA384
47+ Accepted TLSv1.2 256 bits AES256-GCM-SHA384 **
4648Accepted TLSv1.2 256 bits ECDHE-RSA-CHACHA20-POLY1305 Curve 25519 DHE 253
47- Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve 25519 DHE 253
48- Accepted TLSv1.2 128 bits AES128-SHA
49- Accepted TLSv1.2 128 bits AES128-CCM
50- Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve 25519 DHE 253
51- Accepted TLSv1.2 256 bits AES256-SHA
52- Accepted TLSv1.2 256 bits AES256-CCM
49+ Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA ** Curve 25519 DHE 253
50+ Accepted TLSv1.2 128 bits AES128-SHA **
51+ Accepted TLSv1.2 128 bits AES128-CCM **
52+ Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA ** Curve 25519 DHE 253
53+ Accepted TLSv1.2 256 bits AES256-SHA **
54+ Accepted TLSv1.2 256 bits AES256-CCM **
5355
5456Server Key Exchange Group(s):
5557TLSv1.3 128 bits secp256r1 (NIST P-256)
0 commit comments