Skip to content

Commit 2ecd70e

Browse files
authored
DOC-1707: Update cloud-encryption.adoc (#454)
1 parent fa6b05b commit 2ecd70e

File tree

1 file changed

+10
-8
lines changed

1 file changed

+10
-8
lines changed

modules/security/pages/cloud-encryption.adoc

Lines changed: 10 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -33,23 +33,25 @@ the public certificate transparency log.
3333
The following protocols and cipher suites are supported and accepted by Redpanda
3434
services such as Schema Registry, HTTP Proxy, and Kafka API.
3535

36+
NOTE: Cipher suites marked ** are deprecated.
37+
3638
```bash
3739
Supported Server Cipher(s):
3840
Preferred TLSv1.3 128 bits TLS_AES_128_GCM_SHA256 Curve 25519 DHE 253
3941
Accepted TLSv1.3 256 bits TLS_AES_256_GCM_SHA384 Curve 25519 DHE 253
4042
Accepted TLSv1.3 256 bits TLS_CHACHA20_POLY1305_SHA256 Curve 25519 DHE 253
4143
Accepted TLSv1.3 128 bits TLS_AES_128_CCM_SHA256 Curve 25519 DHE 253
4244
Preferred TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve 25519 DHE 253
43-
Accepted TLSv1.2 128 bits AES128-GCM-SHA256
45+
Accepted TLSv1.2 128 bits AES128-GCM-SHA256 **
4446
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve 25519 DHE 253
45-
Accepted TLSv1.2 256 bits AES256-GCM-SHA384
47+
Accepted TLSv1.2 256 bits AES256-GCM-SHA384 **
4648
Accepted TLSv1.2 256 bits ECDHE-RSA-CHACHA20-POLY1305 Curve 25519 DHE 253
47-
Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve 25519 DHE 253
48-
Accepted TLSv1.2 128 bits AES128-SHA
49-
Accepted TLSv1.2 128 bits AES128-CCM
50-
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve 25519 DHE 253
51-
Accepted TLSv1.2 256 bits AES256-SHA
52-
Accepted TLSv1.2 256 bits AES256-CCM
49+
Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA ** Curve 25519 DHE 253
50+
Accepted TLSv1.2 128 bits AES128-SHA **
51+
Accepted TLSv1.2 128 bits AES128-CCM **
52+
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA ** Curve 25519 DHE 253
53+
Accepted TLSv1.2 256 bits AES256-SHA **
54+
Accepted TLSv1.2 256 bits AES256-CCM **
5355

5456
Server Key Exchange Group(s):
5557
TLSv1.3 128 bits secp256r1 (NIST P-256)

0 commit comments

Comments
 (0)