Skip to content

Commit ce58c2c

Browse files
Shigeki Ohtsurvagg
Shigeki Ohtsu
authored andcommitted
doc: remove SSLv2 descriptions
Doc descriptions related to SSLv2 are no longer needed. Fixes: #5529 PR-URL: #5541 Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
1 parent 1ab6653 commit ce58c2c

File tree

2 files changed

+7
-12
lines changed

2 files changed

+7
-12
lines changed

doc/api/tls.markdown

+7-9
Original file line numberDiff line numberDiff line change
@@ -40,24 +40,22 @@ To create .pfx or .p12, do this:
4040

4141
## Protocol support
4242

43-
Node.js is compiled with SSLv2 and SSLv3 protocol support by default, but these
43+
Node.js is compiled with SSLv3 protocol support by default, but these
4444
protocols are **disabled**. They are considered insecure and could be easily
4545
compromised as was shown by [CVE-2014-3566][]. However, in some situations, it
4646
may cause problems with legacy clients/servers (such as Internet Explorer 6).
47-
If you wish to enable SSLv2 or SSLv3, run node with the `--enable-ssl2` or
48-
`--enable-ssl3` flag respectively. In future versions of Node.js SSLv2 and
49-
SSLv3 will not be compiled in by default.
47+
If you wish to enable SSLv3, run node with the `--enable-ssl3` flag. In future
48+
versions of Node.js SSLv3 will not be compiled in by default.
5049

51-
There is a way to force node into using SSLv3 or SSLv2 only mode by explicitly
52-
specifying `secureProtocol` to `'SSLv3_method'` or `'SSLv2_method'`.
50+
There is a way to force node into using SSLv3 only mode by explicitly
51+
specifying `secureProtocol` to `'SSLv3_method'`.
5352

5453
The default protocol method Node.js uses is `SSLv23_method` which would be more
5554
accurately named `AutoNegotiate_method`. This method will try and negotiate
5655
from the highest level down to whatever the client supports. To provide a
5756
secure default, Node.js (since v0.10.33) explicitly disables the use of SSLv3
58-
and SSLv2 by setting the `secureOptions` to be
59-
`SSL_OP_NO_SSLv3|SSL_OP_NO_SSLv2` (again, unless you have passed
60-
`--enable-ssl3`, or `--enable-ssl2`, or `SSLv3_method` as `secureProtocol`).
57+
by setting the `secureOptions` to be `SSL_OP_NO_SSLv3` (again, unless you have
58+
passed `--enable-ssl3`, or `SSLv3_method` as `secureProtocol`).
6159

6260
If you have set `secureOptions` to anything, we will not override your
6361
options.

doc/node.1

-3
Original file line numberDiff line numberDiff line change
@@ -62,9 +62,6 @@ and servers.
6262

6363
--max-stack-size=val set max v8 stack size (bytes)
6464

65-
--enable-ssl2 enable ssl2 in crypto, tls, and https
66-
modules
67-
6865
--enable-ssl3 enable ssl3 in crypto, tls, and https
6966
modules
7067

0 commit comments

Comments
 (0)