DOC: configuration: clarify ciphersuites usage (V2)
The previous attempt removed the TLSv1.3 version for the
"ciphersuites" keywords. However it looks like the TLSv1.2 support for
SSL_CTX_set_ciphersuites() is a bug, and can have inconsistent behavior.
This patch revert the previous attempt and add explaining about this
problem and clear examples on how to configure TLSv1.2 ciphers + TLSv1.3
ciphersuites.
Revert "DOC: configuration: clarify ciphersuites usage"
This reverts commit e2a44d6c94b08d1bdf6294706c3b64267a13c86f.
This must be backported to all stable branches.
Fixes issue #2459.
(cherry picked from commit 3262c2ddcdbc832d0a60b89257edcd598f20371d)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>
(cherry picked from commit dc4198519eb6fc427589e31be58bf1130c61bdc8)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>
(cherry picked from commit ee8a65ae3f4a2739f3f2f30eeaa7edfe9b2a43a3)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>
(cherry picked from commit 84cbce0cb2973ff3ab1cbc591012e2d1709a10e4)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>
(cherry picked from commit 9465167189d376d3d03b1d7219c0c9e384ac7093)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>
1 file changed