From 0434e6c6c3af9cb06e55fd2c9940a3030d7fd5ad Mon Sep 17 00:00:00 2001 From: Ivan Dyachkov Date: Thu, 8 Jun 2023 15:26:15 +0200 Subject: [PATCH] docs: update description of TLS options incompatible with v1.3 --- rel/i18n/emqx_schema.hocon | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/rel/i18n/emqx_schema.hocon b/rel/i18n/emqx_schema.hocon index 78dd2ecaa..f871cfc49 100644 --- a/rel/i18n/emqx_schema.hocon +++ b/rel/i18n/emqx_schema.hocon @@ -92,7 +92,8 @@ mqtt_max_topic_alias.label: """Max Topic Alias""" common_ssl_opts_schema_user_lookup_fun.desc: -"""EMQX-internal callback that is used to lookup pre-shared key (PSK) identity.""" +"""EMQX-internal callback that is used to lookup pre-shared key (PSK) identity.
+Has no effect when TLS version is configured (or negotiated) to 1.3""" common_ssl_opts_schema_user_lookup_fun.label: """SSL PSK user lookup fun""" @@ -1240,7 +1241,8 @@ The SSL application already takes measures to counter-act such attempts, but client-initiated renegotiation can be strictly disabled by setting this option to false. The default value is true. Note that disabling renegotiation can result in long-lived connections becoming unusable due to limits on -the number of messages the underlying cipher suite can encipher.""" +the number of messages the underlying cipher suite can encipher.
+Has no effect when TLS version is configured (or negotiated) to 1.3""" server_ssl_opts_schema_client_renegotiation.label: """SSL client renegotiation""" @@ -1326,7 +1328,8 @@ common_ssl_opts_schema_secure_renegotiate.desc: """SSL parameter renegotiation is a feature that allows a client and a server to renegotiate the parameters of the SSL connection on the fly. RFC 5746 defines a more secure way of doing this. By enabling secure renegotiation, -you drop support for the insecure renegotiation, prone to MitM attacks.""" +you drop support for the insecure renegotiation, prone to MitM attacks.
+Has no effect when TLS version is configured (or negotiated) to 1.3""" common_ssl_opts_schema_secure_renegotiate.label: """SSL renegotiate""" @@ -1361,7 +1364,8 @@ mqtt_max_packet_size.label: """Max Packet Size""" common_ssl_opts_schema_reuse_sessions.desc: -"""Enable TLS session reuse.""" +"""Enable TLS session reuse.
+Has no effect when TLS version is configured (or negotiated) to 1.3""" common_ssl_opts_schema_reuse_sessions.label: """TLS session reuse"""