[DOCS] Clarifies FIPS cipher suites #53138
Closed
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
lcawl
added
>docs
|
Pinging @elastic/es-docs (>docs) |
|
Pinging @elastic/es-security (:Security/Security) |
jkakavas
reviewed
Mar 5, 2020
| The use of TLS ciphers is mainly governed by the relevant crypto module | ||
| (the FIPS Approved Security Provider that your JVM uses). In general, the | ||
| ciphers that are configured by default in {es} are FIPS 140-2 compliant and can | ||
| be used in a FIPS 140-2 JVM. If you use JDK 11, however, the following ciphers |
There was a problem hiding this comment.
This is only true when users configure their JVM in FIPS 140 mode with the help of BouncyCastle crypto and JSSE providers so I don't think that we want to make a blanket statement about the list of supported ciphers
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Related to #51017 (comment)
This PR clarifies the list of supported cipher suites with FIPS.