-
Notifications
You must be signed in to change notification settings - Fork 83
Document removed insecure cipher suites #2656
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: dev
Are you sure you want to change the base?
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good but we need to make it clear they are not completely removed, just removed by default.
|
||
Neo4j 2025.10:: | ||
|
||
As of 2025.10, the Java 21 default cipher suites that use insecure CBC-based ciphers are removed from Neo4j: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We need to say that the ciphers are removed by default. But if a user specifies a cipher config and explicitly references these ciphers then they can use them still.
Clarify that ciphers remain available if you define them in the config
This PR includes documentation updates Updated pages: |
No description provided.