Skip to content

Commit e5bc25d

Browse files
authored
Removing obsolete encryption arguments (#907) (#912)
Cherry-picked from #907
1 parent d9310c2 commit e5bc25d

File tree

1 file changed

+0
-10
lines changed

1 file changed

+0
-10
lines changed

modules/ROOT/pages/security/ssl-framework.adoc

Lines changed: 0 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -169,26 +169,16 @@ openssl pkcs8 -topk8 -v2 aes-256-cbc -v2prf hmacWithSHA512 -in pkcs1or8.key -out
169169
----
170170

171171
.Supported encryption arguments to openssl are:
172-
* `-v1 PBE-MD5-DES`
173-
* `-v1 PBE-SHA1-3DES`
174-
* `-v1 PBE-SHA1-RC2-40`
175-
* `-v1 PBE-SHA1-RC2-128`
176-
* `-v1 PBE-SHA1-RC4-40`
177-
* `-v1 PBE-SHA1-RC4-128`
178-
* `-v1 PBE-SHA1-2DES`
179172
* `-v2 aes-128-cbc -v2prf hmacWithSHA1`
180173
* `-v2 aes-128-cbc -v2prf hmacWithSHA224`
181174
* `-v2 aes-128-cbc -v2prf hmacWithSHA256`
182175
* `-v2 aes-128-cbc -v2prf hmacWithSHA384`
183176
* `-v2 aes-128-cbc -v2prf hmacWithSHA512`
184-
* `-v2 aes-256-cbc -v2prf hmacWithSHA1`
185177
* `-v2 aes-256-cbc -v2prf hmacWithSHA224`
186178
* `-v2 aes-256-cbc -v2prf hmacWithSHA256`
187179
* `-v2 aes-256-cbc -v2prf hmacWithSHA384`
188180
* `-v2 aes-256-cbc -v2prf hmacWithSHA512`
189181

190-
It is highly recommended to use one of the `-v2` variants, because they offer more robust encryption.
191-
192182
[NOTE]
193183
====
194184
Versions before Neo4j 5.0 allow keys to be stored with the old PKCS #1 standard.

0 commit comments

Comments
 (0)